Splunk Data Model Field Aliasing

Splunk Data Models require that your splunk fields match the data model. This video demonstrates how to alias your existing fields so that they work within a data model.
Splunk Data Models and why you should use them • Splunk Data Models - W...
Getting the data model restricted to specific indexes • Splunk Data Models Res...
Eventtypes for the data model • Splunk Data Models and...
Tagging the data for the data model • Splunk Data Models and...
Field aliasing for the data model • Splunk Data Model Fiel...
Converting a normal query into a tstats query - • Splunk How to Convert ...
Join this channel to get access to early release of videos and exclusive training videos that will help make you L.A.M.E. ninja: / @lamecreations_guides
Visit our discord channel to post questions and suggestions for what you want to learn. / discord
The latest L.A.M.E. Splunk apps are available at
www.github.com/lameCreations

[@austinguidry2]

Thanks a lot! This is great stuff! :)

[@lamecreations_guides]

Glad it was helpful!

[@dogmaticwonder]

Free is better than $$ for Cribl. Or, is the Cribl deployment your using Free?

[@lamecreations_guides]

Cribl has a free version available for anyone to use. Free and easy to use. It's generally a win win.