Employing the Splunk Common Information Model (CIM)

Data is the lifeblood of a business, and more than ever before, businesses want to understand their data. This course explores Splunk CIM, a powerful tool to help you take data in almost any format and derive valuable business and IT insight from it.
Course info
Rating
(12)
Level
Advanced
Updated
Oct 10, 2019
Duration
47m
Table of contents
Description
Course info
Rating
(12)
Level
Advanced
Updated
Oct 10, 2019
Duration
47m
Description

Data has been around for a long time. Business information systems have traditionally been good at capturing data about everything that happens to them, and about every action they take. Data is the new high-value commodity, and the ability to derive valuable business insight from diverse data sources is a sought-after skill set. In this course, Employing the Splunk Common Information Model (CIM), you'll gain the ability to make sense of source data that may be in a variety of different (sometimes scary) formats, normalize that data, and derive insights from it using the Splunk CIM add-on. First, you’ll explore knowledge objects. Next, you’ll discover how to install and configure the CIM add-on. Finally, you’ll learn how to normalize source data using the CIM data sets. When you’re finished with this course, you’ll have the skills and knowledge of the Splunk CIM needed to provide valuable business insight from sometimes messy source data.

About the author
About the author

Adam Frisbee is an educator, researcher, and practitioner of information systems and technology, specializing in cloud and DevOps. He is part of the faculty at a major university and has worked professionally to enable business outcomes through technology.

More from the author
Enterprise Cloud Strategy: Creating
Intermediate
1h 9m
Feb 24, 2021
Enterprise Cloud Strategy: Launching
Intermediate
1h 26m
Nov 17, 2020
Enterprise Cloud Strategy: Creating
Intermediate
1h 33m
Jun 26, 2020
More courses by Adam Frisbee
Section Introduction Transcripts
Section Introduction Transcripts

Course Overview
Hi everyone, my name is Adam Frisbee, and welcome to my course, Employing the Splunk Common Information Model. I'm a cloud and DevOps leader, a university instructor, and a researcher practitioner. More than ever before, businesses are seeking data professionals who understand how to take data from existing systems, which might be in any scary format or even no format at all, and derive valuable insights from it. Splunk and the Splunk CIM add-on are powerful tools that can help you do just that. In this course, we are going to show you how the Splunk Common Information Model works, how to install it, and then we're going to practice using it. Notice that this course is mostly hands-on practice, so get ready to roll up your sleeves. Some of the major topics that we will cover include Splunk knowledge objects and the five pillars of knowledge; data normalization in Splunk, why normalize data anyway; CIM data models and how to use them. By the end of this course, you will know how to deploy the Splunk CIM in an organization, normalize data from almost any format into CIM-compliant data, and derive valuable insight from CIM-normalized data. Before beginning the course, you should be familiar with the Splunk data pipeline, working with data models and datasets, and search processing language. I hope you'll join me on this journey to learn the Splunk Common Information Model with the Employing the Splunk Common Information Model course, at Pluralsight.