Summary
The key takeaways from this chapter are as follows:
Use lookup tables to add more user-friendly data to search results
Create state tables that can track data over long periods of time
Create workflow actions that can link to external resources that can't be added in lookup tables
Automate tasks such as opening helpdesk tickets using data extracted from Splunk
The DB Connect application allows for a powerful connectivity between external databases or between ODBC/JDBC data stores and Splunk
