Splunk Fundamentals and Searching Training

Splunk Fundamentals and Searching Training

Duration: 3 days

Splunk turns machine data into answers, but only if you can write the search. This three-day course takes you from your first query to building dashboards and alerts that a security or operations team relies on. Hands-on throughout, using log data of the kind you will meet at work.

Learning Objectives

• Navigate Splunk and understand how data is indexed
• Write effective searches using the Search Processing Language
• Use fields, lookups and time ranges to narrow results quickly
• Build reports, dashboards and alerts
• Apply Splunk to practical security and operations questions
• Understand where Splunk fits alongside other monitoring tools

Who Should Attend

• Security analysts and SOC staff
• System and network administrators
• IT operations staff responsible for monitoring
• Anyone who has Splunk at work and cannot get answers out of it

Prerequisites

• Comfort with IT infrastructure concepts
• Some command line familiarity is helpful but not required