Filter data using time modifiers and time commands and use formatting functions to accommodate various time formats.

Calculate statistics using transforming commands and mathematical and statistical eval functions.

Compare, manipulate, and normalize data using several commands including the all-powerful eval command and an array of functions.

Enrich results with lookups and subsearches to correlate and filter data from multiple sources.

Use specific commands to calculate co-occurrence between fields and analyze data from multiple datasets.

Understand how components of a search are broken down and processed across the Splunk data pipeline and how to troubleshoot searches.

Manipulate, evaluate, and analyze multivalue data and create multivalue fields in search with multivalue eval commands and functions.

Improve search performance by understanding search best practices, accelerating repots and data models to optimize frequently accessed data.