Splunk Fundamentals

Paths

Splunk Fundamentals

Authors: Thomas Henson, Joe Abraham, Adam Frisbee

The courses in this skill path build a foundational competence with Splunk’s core software. This includes a basic understanding of SPL searching and reporting commands and... Read more

What you will learn

  • Install and configure Splunk
  • Compose searches
  • Construct reports, dashboards and alerts
  • Compose advanced searches
  • Generate visualizations using commands
  • Create search macros
  • Create fields, field aliases and calculated fields
  • Create tags and event types
  • Correlate events with transactions
  • Create workflow actions
  • Create data models
  • Employ the Splunk Common Information Model (CIM) Add-On

Pre-requisites

No formal prerequisites but knowledge of Windows and Linux operating systems is encouraged.

Beginner

These courses get you up and running with the Splunk platform.

Installing and Configuring Splunk

by Thomas Henson

Apr 9, 2019 / 1h 17m

1h 17m

Start Course
Description

At the core of the Splunk Architect is a thorough knowledge of building and configuring Splunk environments. In this course, Installing and Configuring Splunk, you'll learn how to build out a Splunk development environment. First, you'll learn the architecture of Splunk. Next, you'll explore career paths in Splunk. Finally, you'll discover how to install and configure Splunk in Windows, Mac, and Linux environments. When you're finished with this course, you'll have a foundational knowledge of Installing Splunk that will help you as you move forward with the Splunk Architecture path. Software required: Splunk 7.25 free tier.

Table of contents
  1. Course Overview
  2. What Is Splunk?
  3. Installing Splunk
  4. Navigating the Splunk Interface

Performing Basic Splunk Searches

by Thomas Henson

Aug 9, 2019 / 2h 17m

2h 17m

Start Course
Description

Searching machine-generated data can be difficult. In this course, Performing Basic Splunk Searches, you will gain foundational knowledge of Splunk Search and gain the ability to build your own Splunk queries. First, you will learn how to navigate the Splunk Search interface. Next, you will discover how to write Search Processing Language queries from scratch. Finally, you will explore the Splunk commands. When you’re finished with this course, you will have the skills and knowledge of searching data in Splunk needed to excel as a Splunk user or admin.

Table of contents
  1. Course Overview
  2. Introduction to Search in Splunk
  3. Understanding the Basics of Splunk Search
  4. Using Field Searches for Splunk Searches
  5. Building SPL Queries in Splunk
  6. Performing Transformative Searches in Splunk
  7. Beyond the Basic Search

Intermediate

These courses dive into search generation, field optimization, correlation, and workflow actions.

Generating Tailored Searches in Splunk

by Joe Abraham

May 30, 2019 / 1h 55m

1h 55m

Start Course
Description

Splunk is used for many different applications within our enterprise environments. It enables us to store, analyze, and track machine data and other information within our networks from a central application. Learning how to search for your data efficiently within Splunk will help you realize its potential. In this course, Generating Tailored Searches in Splunk, you will learn the skills needed to perform advanced searches that allow you to quickly find the data that you’re looking for. When you’re finished with this course, you will have the knowledge to be able to sift through your massive amounts of data, filter it how you need, and generate visualizations to help clearly see what your data represents. Software required: Linux or Windows virtual machine with Splunk installed.

Table of contents
  1. Course Overview
  2. Introduction
  3. Composing Advanced Searches
  4. Generating Visualizations Using Commands
  5. Creating Search Macros
  6. Course Summary

Optimizing Fields, Tags, and Event Types in Splunk

by Joe Abraham

Feb 28, 2019 / 1h 37m

1h 37m

Start Course
Description

Splunk is used for many different applications within our enterprise environments, enabling us to store, analyze, and track machine data and other information within our networks. In this course, Optimizing Fields, Tags, and Event Types in Splunk, you will learn the skills needed to optimize your Splunk environment. First, you will explore knowledge and knowledge objects. Then, you will delve into creating lookups, tags, event types, and workflow actions. Finally, you will use Splunk Fields and create efficiencies within them. When you’re finished with this course, you will have the knowledge to be able to optimize Splunk and share the efficiencies you create with your enterprise.

Table of contents
  1. Course Overview
  2. Introduction
  3. Optimizing Splunk Knowledge
  4. Managing Splunk Fields
  5. Using Tags and Event Types
  6. Course Summary

Creating Workflow Actions in Splunk

by Joe Abraham

Aug 21, 2019 / 1h 10m

1h 10m

Start Course
Description

In today's IT environments, there is a lot of talk regarding integrations between technologies and products, as well as the ability to add more context to the data that you see and use. Splunk's workflow actions can help add context to your data, or use it effectively for multiple purposes. Taking advantage of HTTP GET and POST request formats, these actions can reduce administration time and drastically increase productivity while using Splunk, as well as allow you to perform additional searches based on pre-defined criteria. This course will teach you everything that you need to know about the three default workflow actions in Splunk, as well as how to configure them to suit your own needs. We'll step through the knowledge and the configuration of GET workflow actions, POST workflow actions, and search workflow actions so that by the time you're finished with this course, you'll be able to step in and use your data better.

Table of contents
  1. Course Overview
  2. Exploring Workflow Actions
  3. Creating GET Workflow Actions
  4. Creating POST Workflow Actions
  5. Creating Search Workflow Actions
  6. Course Summary

Advanced

These courses dive into data models, Pivot, and how to employ the Splunk Common Information Model (CIM).

Creating Data Models and Optimizing Pivot in Splunk

by Adam Frisbee

May 29, 2019 / 1h 55m

1h 55m

Start Course
Description

Become a Splunk knowledge manager, and enable your organization to make data-driven decisions. In this course, Creating Data Models and Optimizing Pivot in Splunk, you will gain the ability to build robust data models that will become the foundation for business and IT decision making, timely and accurate responses to incidents, and predictions about the future of the organization. First, you will learn what it means to be a Splunk knowledge manager. You will learn about the types of knowledge objects in Splunk and how to create and manage them. Next, you will discover the power of Splunk data models through hands-on demonstrations. Finally, you will explore how to build compelling dashboards, reports, and alerts that are built on data models. When you're finished with this course, you will have the skills and knowledge of data models and the Pivot tool in Splunk needed to become a Splunk knowledge manager.

Table of contents
  1. Course Overview
  2. Getting Familiar with Data Models and the Pivot Tool in Splunk
  3. Diving Deeper into Data Models
  4. Identifying Data Model Attributes
  5. Building Dashboards, Reports, and Alerts Using the Data Model