Splunk : Discussion on Event types knowledge object & "findtypes" command

In this video I talked about eventtypes knowledge object and findtypes command in splunk.

[@skylake-eh1ph]

Thank you so much for the incredible content you've been creating on your KZbin channel. As a regular viewer, I've been consistently impressed by the depth of your knowledge, the quality of your production, and your genuine passion for the topics you cover. Your videos have become an invaluable resource for me, providing insights, information, and entertainment that I eagerly anticipate with each new upload. The time and care you clearly put into researching, filming, and editing each piece is truly evident, and it makes for an exceptional viewing experience.

[@surajbokka6276]

Hi Sid, any plans of uploading tutorials on Splunk Enterprise Security as well?

[@sajalbansal8586]

Hi, Appreciate this playlist. I am currently preparing for Splunk power user certification and want some video tutorial course for it. Can you please suggest me some courses apart from your videos..they only cover some of the topics and honestly I don't want to pay a huge amount that Splunk is charging for their course. Thanks

[@sumat3301]

Hi , can you say more about splunk software download ,expiry and what we have to do to extend our free trial version

[@splunk_ml]

Sure... I will try to cover this.

[@splunkuser1504]

Hi Bro , Hope you are doing good :) I have a doubt bro, so we have created a dynamic events Now when you give the eventype=action it shows the result like action-purchase,action-search,action-add to cart but how its taking the precedence as action-purchase,action-addtocart Is there a possibility we can give the precedence for this

[@splunk_ml]

we can give the priority in that stanza itself but all will have same priority. If you want to have separate priority I think we need to create separate stanzas and assign priority but that will contradict the purpose of creating eventtypes using templates.

[@splunkuser1504]

Thanks Bro :)

[@kiranmh8264]

Hi Sid, is it possible to use the same eventtype for two apps in Splunk?

[@thingsnerdsdo6862]

Yes, just change the permissions to share with all apps.

[@sumat3301]

Hi , are you teaching splunk on windows or linux platform

[@splunk_ml]

Mostly on windows.. Admin videos are on Linux.