This course focuses on searching and reporting commands as well as on the creation of knowledge objects. Major topics include using transforming commands and visualizations, filtering and formatting results, correlating events, creating knowledge objects, using field aliases and calculated fields, creating tags and event types, using macros, creating workflow actions and data models, and normalizing data with the Common Interface Model (CIM).
This course focuses on searching and reporting commands as well as on the creation of knowledge objects. Major topics include using transforming commands and visualizations, filtering and formatting results, correlating events, creating knowledge objects, using field aliases and calculated fields, creating tags and event types, using macros, creating workflow actions and data models, and normalizing data with the Common Interface Model (CIM).
Course Objectives
Module 1 - Introduction
Module 2 - Beyond Search Fundamentals
Module 3 - Using Transforming Commands for Visualizations
Module 4 - Using Mapping and Single Value Commands
Module 5 - Filtering and Formatting Results
Module 6 - Correlating Events
Module 7 - Introduction to Knowledge Objects
Module 8 - Creating and Managing Fields
Module 9 - Creating Field Aliases and Calculated Fields
Module 10 - Creating Tags and Event Types
Module 11 - Creating and Using Macros
Module 12 - Creating and Using Workflow Actions
Module 13 - Creating Data Models
Module 14 - Using the Common Information Model (CIM) Add-On