Optimizing Fields, Tags, and Event Types in Splunk

Have you ever wanted to be more in control of your experience within Splunk? This course will give you the knowledge and tools to help you learn more about this SIEM, the objects within it, and how to manipulate them to your advantage.
Course info
Rating
(12)
Level
Intermediate
Updated
Feb 28, 2019
Duration
1h 37m
Table of contents
Description
Course info
Rating
(12)
Level
Intermediate
Updated
Feb 28, 2019
Duration
1h 37m
Description

Splunk is used for many different applications within our enterprise environments, enabling us to store, analyze, and track machine data and other information within our networks. In this course, Optimizing Fields, Tags, and Event Types in Splunk, you will learn the skills needed to optimize your Splunk environment. First, you will explore knowledge and knowledge objects. Then, you will delve into creating lookups, tags, event types, and workflow actions. Finally, you will use Splunk Fields and create efficiencies within them. When you’re finished with this course, you will have the knowledge to be able to optimize Splunk and share the efficiencies you create with your enterprise.

About the author
About the author

Joe is a Network Consulting Engineer and has worked in the IT industry since 2010. He has experience in teaching and mentoring IT professionals in both DoD environments and in the civilian sector, in both the networking and IT security fields.

More from the author
Creating Workflow Actions in Splunk
Intermediate
1h 10m
Aug 21, 2019
Generating Tailored Searches in Splunk
Intermediate
1h 55m
May 30, 2019
More courses by Joe Abraham
Section Introduction Transcripts
Section Introduction Transcripts

Course Overview
Hi everyone. My name is Joe Abraham, and welcome to my course, Optimizing Fields, Tags, and Event Types in Splunk. I'm currently a Network Security Consultant and a Pluralsight Author for both IT operations and security topics. Do you run your SIEM, or does it run you? Have you always wondered how to improve your workflows within Spunk and better understand how to manipulate it to meet your needs? Well, look no further. In this course, we're going to do just that. We will help you optimize your Splunk environment and empower you with the knowledge to create efficiencies wherever you can. Some of the major topics that we will cover include knowledge and knowledge objects, creating lookups and workflow actions, using Splunk fields and creating efficiencies within them, and creating and using tags and event types. By the end of this course, you'll know how to use these objects to be able to efficiently use the Splunk application. Before beginning this course, you should be familiar with Splunk and be able to work with it, as well as have familiarity with basic IT terminology. Having some knowledge of machine data will help out as well. From here, you should feel comfortable diving further into the Splunk learning path at Pluralsight and learning more about both Splunk and the data that you can send to it through courses on building dashboards, alerts, tailored searches, and so much more. I hope that you'll join me on this journey to learn more about Splunk with the Optimizing Fields, Tags, and Event Types in Splunk course, at Pluralsight.