- Learning Path Libraries: This path is only available in the libraries listed. To access this path, purchase a license for the corresponding library.
- Security
Splunk Enterprise Security Administration
A Splunk Enterprise Security (ES) Admin manages a Splunk Enterprise Security environment, including ES event processing and normalization, deployment requirements, technology add-ons, settings, risk analysis settings, threat intelligence and protocol intelligence configuration, and customization's.
This skill demonstrates an individual's ability to install, configure, and manage a Splunk Enterprise Security deployment.
Content in this path
Beginner
In this section, you will review the features and concepts of Splunk Enterprise Security, as well as, how to install, deploy, and configure Splunk Enterprise Security.
Intermediate
In this section, you will learn to configure and manage Splunk ES dashboards. Next, you will learn how to tune and create correlation searches in Splunk ES. Last, you will learn how to configure threat intelligence in Splunk ES.
- Review of the features and concepts of Splunk Enterprise Security
- Configure Splunk ES dashboards to reveal insights, monitor, and investigate
- Manage Splunk Enterprise Security dashboards
- Deploy Splunk Enterprise Security to your SOC environment
- Install and Configure Splunk Enterprise Security
- Customize Splunk Enterprise Security data
- Create custom add ons to enhance visibility
- Tune correlation searches for use in Splunk Enterprise Security
- Create correlation searches for use in Splunk ES
- Add context to data using lookups and identities
- Deploy Splunk ES security intelligence tools
- Use the Splunk threat inteligence framework
- Knowledge of basic networking concepts (CompTIA Network+)
- Knowledge of the fundamental information security concepts (CompTIA Security+)
- Knowledge and skill of security event triage
- Knowledge and skill of incident response and handling
- Basic competence of using Splunk Enterprise
- security event triage
- incident detection and response
- SIEM solutions
- incident investigation
- security operations
- splunk fundamentals
Learn with the best
