Deutsch
Francais
日本語
한국어
中文
繁體中文

false

logo

Support
Support Portal

Splunk Answers

Support Programs

System Status

Contact Us

Product Security Updates

Cisco Support
Languages
- Deutsch
- Francais
- 日本語
- 한국어
- 中文
- 繁體中文
Click User Account
- Log In
- Sign Up
- My Dashboard
- Instances
- My Training
- Logout
- PRODUCT LOGINS

logo

Products
Product Overview

Get visibility and insights across your whole organization, powering actions that improve security, reliability and innovation velocity.

More from Splunk

Pricing

Free Trials & Downloads

Product Tours
Security

Splunk Enterprise Security

Splunk SOAR

Splunk Attack Analyzer

Security User Behavior Analytics

Observability

Splunk Infrastructure Monitoring

Splunk Application Performance Monitoring

Splunk IT Service Intelligence

Splunk Real User Monitoring

Splunk Synthetic Monitoring

Platform

Splunk Cloud Platform

Splunk Enterprise
View All Products
Solutions
SOC of the Future

Strengthen your cyber defense with integrations and an open ecosystem.

Build a Leading Observability Practice

Maintain performance and reliability with unified visibility and lightning-fast troubleshooting.

Build on a Solid Foundation

Power unified security, full-stack observability and custom apps on the same platform.
by Use Case

Advanced Threat Detection

Artificial Intelligence

Automation & Orchestration

Extend Visibility to the Cloud

Isolate Cloud Native Problems

IT Modernization

BY TECHNOLOGY

AWS

Azure

GCP

Kubernetes

OpenTelemetry

SAP

BY INDUSTRY

Communications & Media

Financial Services

Manufacturing

Public Sector

Retail

Technology
View All Solutions
Why Splunk?
What Makes Splunk Different

The world’s leading organizations trust Splunk to help keep their digital systems secure and reliable.
Business Initiatives

Digital Resilience

Artificial Intelligence

Cloud Transformation

Digital Customer Experience

Better Together

Customer Stories

Partners

Customer Success

Cisco + Splunk
Resources
Resources

Explore e-books, white papers and more.

Events

Join us at an event near you.

Blogs

See what Splunk is doing.
GET STARTED

Splunk Lantern

Splunk experts provide clear and actionable guidance.

Customer Success

Customer success starts with data success.

Splunk Cloud Platform Migration

Plan your migration with helpful Splunk resources.

Get Started With Splunk

Learn how to use Splunk.

become an expert

Splunk Training & Certification

Become a certified Splunk Expert.

Documentation

Find answers about how to use Splunk.

User Groups

Meet Splunk enthusiasts in your area.

Community

Share knowledge and inspiration.

SURGe

Access timely security research and guidance.

Expand & optimize

Customer Support

It’s easy to get the help you need.

Splunkbase

See Splunk’s 1,000+ Apps and Add-ons.

Splunk Dev

Create your own Splunk Apps.

Splunk Services

Maximize your Splunk investment.

.conf24

Attend Splunk's largest learning event of the year.

Support
Support Portal

Splunk Answers

Support Programs

System Status

Contact Us

Product Security Updates

Cisco Support
Click Search
Languages
- Deutsch
- Francais
- 日本語
- 한국어
- 中文
- 繁體中文
Click User Account
- Log In
- Sign Up
- My Dashboard
- Instances
- My Training
- Logout
- PRODUCT LOGINS
Free Splunk

Click Search
Free Splunk

logo

Free Splunk

Products

Solutions

Why Splunk?

Resources

Support

Account

Deutsch
Francais
日本語
한국어
中文
繁體中文

Products

Solutions

Why Splunk?

Resources

Support

Product Overview

Get visibility and insights across your whole organization, powering actions that improve security, reliability and innovation velocity.

Course Catalog

See all of the courses available to help you turn data into doing, shown in recommended order. Expand your knowledge and understanding of Splunk.

Start Your Journey

Filter Courses

Results

Clear All

Content Type

Courses

Free Courses

Certification Exams

Content Type

Courses

Free Courses

Certification Exams

Certification

Splunk Core Certified User

Splunk Core Certified Power User

Splunk Core Certified Advanced Power User

Splunk Cloud Certified Admin

Splunk Enterprise Certified Admin

Splunk Enterprise Certified Architect

Splunk Enterprise Security Certified Admin

Splunk IT Service Intelligence Certified Admin

Splunk Core Certified Consultant

Splunk SOAR Certified Automation Developer

Splunk O11y Cloud Certified Metrics User

Splunk Certified Cybersecurity Defense Analyst

Role

Search Expert

Knowledge Manager

Splunk Administrator

Splunk Architect

Splunk Developer

SOC Analyst

SOAR Administrator

SOC Administrator

IT Analyst

IT Administrator

DevOps Engineer

Site Reliability Engineer (SRE)

Data Science Analyst

Application Developer

Product

Apps & Add-Ons

Splunk Cloud

Splunk Enterprise

Splunk Enterprise Security

Splunk ITSI

Splunk Infrastructure Monitoring

Splunk UBA

Splunk Insights

Splunk APM

Splunk On-Call

Splunk SOAR

Splunk RUM

Splunk Log Observer

Splunk Synthetic Monitoring

Splunk Observability Cloud

Delivery Method

Instructor-led

eLearning

Results

results for:

filtered by:

No Results Found.

See recommended content you might like.

Getting Data into Splunk Observability Cloud - This 90-minute introductory course is designed for anyone who wants to use the Splunk Distribution of the OpenTelemetry (OTel) Collector to send metrics and logs to Splunk Observability Cloud, including basic troubleshooting during setup. - Register Intro to Mission Control: Superman Login Use Case - Discover key concepts in using Splunk Mission Control with Splunk Enterprise Security Cloud and Splunk SOAR to detect and manage geographically improbable logins (sometimes called Superman logins).   - Register Using Splunk Real User Monitoring - Discover how Splunk Real User Monitoring (RUM) enables you to analyze and troubleshoot the front-end user experience of your applications. - Register Building Splunk Apps - This 9-hour course is designed for advanced users, administrators and developers who want to create apps using the Splunk Web Framework. - Register Splunk Observability Cloud: Enterprise Features - This free eLearning module describes the mirrored dashboards and permissions features of Splunk Observability Cloud Enterprise. - Register Splunk Enterprise Cluster Administration - This 13.5-hour virtual course is for experienced Splunk Enterprise administrators who are new to Splunk Clusters. - Register Implementing Splunk IT Service Intelligence - This 18-hour virtual course prepares consultants to install and configure Splunk's app for IT Service Intelligence (ITSI). - Register Splunk Certified Cybersecurity Defense Analyst - This certification demonstrates an individual’s ability to protect businesses and mitigate risk, while managing vulnerabilities and threats using common types of cyber defense systems. - Learn More Using Splunk Log Observer Connect - This 3-hour course is designed for developers responsible for debugging their own applications, and for SREs responsible for troubleshooting performance issues and describes how to use the tool to work with log data using the no-code user interface. - Register Splunk Enterprise Certified Admin - This certification demonstrates an individual's ability to support the day-to-day administration and health of a Splunk Enterprise environment. - Learn More Kubernetes Monitoring with Splunk Observability Cloud - This 4.5-hour course helps you learn best practices and tips to use Splunk Observability Cloud to monitor and troubleshoot Kubernetes clusters. - Register Visualizing and Alerting in Splunk Observability Cloud - This 4.5-hour virtual course describes ways to enhance your dashboards and alerts to help with troubleshooting in Splunk Observability Cloud. - Register Creating Maps - This three-hour course for power users focuses on the data and components required to create cluster and choropleth maps. - Register Intro to Knowledge Objects - This eLearning course teaches students about different types of knowledge objects to extract additional insights from their data. - Register Using the Splunk Observability Cloud REST API - Discover how to use the Splunk Observability Cloud REST API to manage charts, dashboard groups, dashboards, and detectors. - Register Splunk Enterprise Deployment Practical Lab - This 24-hour practical lab (to be submitted and graded as an exam) is designed to take you through the tasks of a complete mock Splunk Enterprise deployment. - Register Introduction to CyberSecurity Awareness - Explore basic security awareness including reporting and security event recognition. - Register Visualizations - This eLearning course teaches students how to create visualizations in Splunk, using Splunk's Search Processing Language as well as the Splunk Web interface. - Register Intro to Splunk - This eLearning course teaches students how to use Splunk to create reports and dashboards and explore events using Splunk's Search Processing Language.<a title="Course Description" href="https://www.splunk.com/pdfs/training/IntrotoSplunkCourseDescription.pdf"> </a> - Register Splunk Enterprise System Administration - This 12-hour virtual course is designed for system administrators who are responsible for managing the Splunk Enterprise environment and provides fundamental knowledge of Splunk license manager, indexers and search heads. - Register Configuring Tracing and Profiling for Splunk APM - Targeted to developers and DevOps, this course helps you instrument your applications to send traces to SplunkAPM. - Register Creating Knowledge Objects - This three-hour course is for knowledge managers who want to learn how to create knowledge objects for their search environment using the Splunk web interface. - Register Troubleshooting Splunk Enterprise - This nine-hour course for Splunk administrators covers topics and techniques for troubleshooting a standard Splunk distributed deployment using the tools available on Splunk Enterprise. - Register Introduction to SPL2 - This free, self-paced 60-minute course introduces SPL2, the next-generation Splunk search processing language designed to make it easier to process data-in-motion and data-at-rest. - Register Splunk Cloud Administration - This 18-hour, hands-on course covers everything net-new Splunk administrators need to know to manage users and to get data into Splunk Cloud. This standalone course is not to be taken together with Transitioning to Splunk Cloud. - Register Splunk Observability Cloud: Teams - This 15-minute, free eLearning video describes the benefits of using Splunk Observability Cloud teams. - Register Data and Tools for Defense Analysts - This course, as part of the Splunk Blue Team Academy curriculum, emphasizes the specific data and tools that a cyber defense analyst needs to successfully investigate security events. - Register Splunk Core Certified Consultant - This certification demonstrates a Consultant’s ability to properly size, install and implement Splunk environments and to advise others on how to utilize the product and maximize its value for their needs. - Learn More Introduction to Enterprise Security - Understand the basics of security incidents and how Enterprise Security can help identify, combat and prevent threats. - Register Splunk Enterprise Security Certified Admin - This certification demonstrates an individual’s ability to install, configure and manage a Splunk Enterprise Security deployment. - Learn More Creating Classic Dashboards - This six-hour course is designed for Splunk power users who want to create advanced, interactive dashboards using the classic, simple XML framework. - Register Introduction to Splunk SOAR - Explore the features, capabilities and use cases for Splunk SOAR (Security Orchestration and Automated Response). - Register Splunk O11y Cloud Certified Metrics User - This certification demonstrates an individual’s ability to monitor using Splunk Observability Cloud, deploy and configure the OpenTelemetry Collector to send in metrics, visualize metrics, find insights using analytics, and set up alerts to monitor development environments in real time. - Learn More Introduction to Splunk Log Observer Connect - This eLearning course will give you an overview of Splunk Log Observer Connect. It describes the relationship between metrics, traces and logs, discusses use cases for Splunk Log Observer, and how to send log data to Splunk Log Observer Connect. - Register Splunk UBA Administration - This 6-hour course provides the fundamental knowledge of Splunk UBA, foundational product information, and product administration techniques. - Register Introduction to Splunk Infrastructure Monitoring (IM) - This 28-minute, free eLearning course gives an overview of the following topics: getting data into infrastructure monitoring, data models, built-in content, dashboards and dashboard groups, charts, and detectors. - Register Splunk SOAR Certified Automation Developer - This certification demonstrates an individual’s knowledge and skills in installing and configuring a SOAR (Phantom) server and integrating it with Splunk, as well as planning, designing, creating and debugging playbooks. Formerly Splunk Phantom Certified Admin. - Learn More Administering Splunk Enterprise Security - This 13.5-hour course prepares architects and systems administrators to install, configure and manage Splunk Enterprise Security. - Register Using Fields - This three-hour course is for power users who want to learn about fields and how to use fields in searches.  - Register Ingesting Application Metrics in Splunk Observability Cloud - This 4.5-hour virtual course, targeted towards developers and DevOps, focuses on creating custom metrics to monitor your applications/services with Splunk Observability Cloud. - Register Moving from RIGOR to Splunk Synthetic Monitoring - This course provides a high-level roadmap for customers to migrate from Rigor to Splunk Synthetic Monitoring. It is intended for anyone that wants to learn more about the overall migration process. - Register IT Essentials Work - Walkthrough - This 24-minute walkthrough is for Splunk and IT admins with basic IT knowledge who understand IT operations and monitoring. Students will learn the basic use of Splunk’s IT Essentials Work, its design and its workflows. They will learn how to add computing resources to monitor, how to check monitoring metrics and how to find operations problems. - Register Introduction to Splunk IT Service Intelligence - This free, self-paced 30-minute course provides learners the opportunity to explore Splunk IT Service Intelligence (ITSI) through the eyes of three different roles using common use cases. - Register Core Consultant Labs - This self-paced bundle consists of an eLearning course focusing on base configs and props.conf best practices, along with six rigorous labs. Note: Registration is strictly limited to Splunk Enterprise Certified Architects. - Register Introduction to Splunk Real User Monitoring - This short module describes Splunk Real User Monitoring, including use cases, basic concepts and key terminology. - Register Responding to Incidents in Splunk On-Call - This 10-minute, free eLearning video explains basic Splunk On-Call concepts such as shifts, rotations, escalation policies and on-call schedule. - Register Splunk for Analytics and Data Science - This 13.5-hour virtual course covers implementing analytics and data science projects using Splunk's statistics and machine learning, as well as its built-in and custom visualization capabilities. - Register Working with Time - This three-hour course is for power users who want to become experts at using time in searches. - Register Using Splunk Observability Cloud Terraform Provider - This 9-hour virtual course targeted towards DevOps, Observability and SRE teams is a follow-up to the course “Automation Using the REST and SignalFlow APIs.” - Register Result Modification - This three-hour course is for power users who want to use commands to manipulate output and normalize data.  - Register Splunk Enterprise Licensing - Discover the requirements of installing Splunk Enterprise in a non-clustered environment and learn to manage Splunk licenses and configure a Splunk License Manager. - Register Leveraging Lookups & Subsearches - This three-hour course is designed for power users who want to learn how to use lookups and subsearches to enrich their results.  - Register Getting Data into Splunk - This free eLearning course teaches students about how to get simple data into Splunk using Splunk Web. - Register Using SignalFlow in Splunk Observability Cloud - Learn to use SignalFlow – the analytics language used in Splunk Observability Cloud to define Charts, Navigators and Detectors, and for more complicated data manipulation. This is an advanced, highly-technical course — please review course description for required prerequisite knowledge. - Register Introduction to Dashboards - This 4.5-hour course teaches students how to create dashboards in Dashboard Studio. Students will learn the basics of the dashboard source code, dashboard layout types, how to select a data source and improve dashboard performance. - Register Understanding Threats and Attacks - This 4-hour free, self-paced eLearning course includes important concepts, tools and resources to better understand the most common threats and attacks. - Register Search Under the Hood - This eLearning course gives students additional insight into how Splunk processes searches. - Register Developing with Splunk's REST API - This 9-hour course teaches you to use the Splunk REST API to accomplish tasks on a Splunk server. - Register Transitioning to Splunk Cloud - This 9-hour course, not to be taken with Splunk Cloud Administration, is designed for experienced on-prem administrators migrating to a Splunk Cloud environment —  providing the skills to collect and ingest data with Splunk Cloud and maintain a productive Splunk SaaS deployment.  - Register IT Essentials Learn - Walkthrough - This 8-minute eLearning course steps you through the IT Essentials Learn app. - Register Splunk Distributed Search - Learn how distributed search works, how to set up and monitor distributed search, and distributed search best practices. - Register Splunk Enterprise Certified Architect - This certification demonstrates an individual’s ability to deploy, manage and troubleshoot complex Splunk Enterprise environments. - Learn More Getting Kubernetes Data into Splunk Observability Cloud - This 30-minute introductory course focuses on sending telemetry data to Splunk Observability Cloud from Kubernetes, from set up to monitoring. - Register Using Splunk UBA (User Behavior Analytics) - This free 4-hour course includes foundational product information and use cases for Splunk User Behavior Analytics (UBA), including prerequisites, configuration, management, monitoring, and troubleshooting. - Register Splunk Core Certified User - This optional entry-level certification demonstrates an individual's basic ability to navigate and use Splunk software. - Learn More Splunk App for Content Packs - This quick walkthrough video is for Splunk and IT admins with basic IT knowledge and an understanding of IT Operations and monitoring. - Register Introduction to Splunk Observability Cloud - This 25-minute eLearning course distinguishes between monitoring and observability and provides the requirements for an observable system. - Register Search Optimization - This three-hour course is for power users who want to improve search performance.  - Register Security Operations and the Defense Analyst - Join Splunk's Blue Team Academy — an initiative combining industry and Splunk product learning in a single place — to build a strong career foundation as a Defense Analyst in a SOC. - Register Advanced SOAR Implementation - This 13.5-hour course is intended for experienced SOAR consultants who will be responsible for complex SOAR solution development. - Register Architecting Splunk Enterprise Deployments - This 9-hour course focuses on best practices for large enterprise deployments. - Register Splunk Core Certified Power User - This certification demonstrates an individual's foundational competence of Splunk’s core software. - Learn More Developing SOAR Playbooks - This 9-hour introductory course prepares IT and security practitioners to plan, design, create and debug basic playbooks for SOAR (Phantom). - Register Using Splunk Enterprise Security - This 13.5-hour course prepares security practitioners to use Splunk Enterprise Security (ES). - Register Splunk Enterprise Data Administration - This 18-hour virtual course is designed for system administrators who are responsible for getting data into Splunk indexers. - Register Enriching Data with Lookups - This three-hour course is for knowledge managers who want to use lookups to enrich their search environment. - Register Scheduling Reports & Alerts - This eLearning course teaches students how to use scheduled reports and alerts to automate processes in their organization. - Register Splunk Cloud Certified Admin - This certification demonstrates an individual's ability to support the day-to-day administration and health of a Splunk Cloud environment. - Learn More Creating Field Extractions - This three-hour course is for knowledge managers who want to learn about field extraction and the Field Extractor (FX) utility. - Register Multivalue Fields - This three-hour course is for power users who want to become experts on searching and manipulating multivalue data. - Register Introduction to Edge Processor - This free, self-paced course introduces the installation and configuration of Edge Processor while providing an overview of how it works and the problems it solves. - Register Implementing Splunk Smart Store - This hands-on class is designed to provide essential knowledge for deploying and managing Splunk Smart Store. - Register Optimizing Metrics Usage with Splunk Metrics Pipeline Management - Explore Splunk Metrics Pipeline Management and how IT and engineering teams can use it to optimize their data intake into Splunk Observability Cloud. - Register The Cybersecurity Landscape - Join the Blue Team Academy — a Splunk Education initiative that combines industry and Splunk product learning in a single place — in this introduction to the cybersecurity world for anyone who wants to begin or grow a career as a Security Analyst within a SOC. - Register Instrumenting Splunk Mobile RUM - In this 15-minute eLearning course, you will see how to use Splunk Real User Monitoring for Mobile — iOS and Android. You will install the respective agent (iOS or Android) and add auto instrument and manual instrument to an application (iOS or Android). - Register Dynamic Dashboards - This 4.5-hour course teaches students how to create interactive dashboards in Dashboard Studio. Students will learn how to add user inputs and drilldowns, and create dynamically colored visualizations. - Register Splunk Search Expert Fast Start - Covers 60 commands and functions, comparing, manipulating and normalizing data from multiple datasets, and enriching search results. - Register Investigating Incidents with Splunk SOAR - This 3-hour course prepares security practitioners to use SOAR to respond to security incidents, investigate vulnerabilities and take action to mitigate and prevent security problems. - Register Advanced Dashboards and Visualizations in Splunk JS - This 4.5-hour course is designed for advanced users who want to create SplunkJS-based dashboards and forms. - Register Splunk Power User Fast Start - Prepare for the Splunk Core Certified Power User exam with nine essential eLearning courses in a single registration. Learn about field extraction creation, correlation analysis, result modification and more. - Register Implementing Splunk SOAR Community Playbooks - This 30-minute video course prepares security practitioners to explore and enable the preloaded community playbooks in Splunk SOAR, which can be used to analyze security events and respond automatically to new threats. - Register Splunk On-Call Administration - This 4.5-hour virtual course is targeted towards Splunk On-Call admins responsible for setting up incident response with Splunk On-Call. - Register Developing SOAR Applications - Unlock new possibilities in SOAR application design, creation and debugging with this advanced, free eLearning course. - Register Splunk IT Service Intelligence Certified Admin - This certification demonstrates an individual’s ability to deploy, manage and use Splunk ITSI to monitor mission-critical services. - Learn More Using Splunk Synthetic Monitoring - Become proactive in your approach to troubleshooting and optimizing web performance by exploring use cases and creating robust tests with Splunk Synthetic Monitoring. - Register Splunk Infrastructure Overview - This self-paced course gives users a high-level look at how to grow a Splunk deployment from a single instance to a distributed environment. - Register Manual Instrumentation with Splunk APM - This course, targeted to developers, enables you to manually instrument your applications to send traces to Splunk APM. - Register Using Splunk IT Service Intelligence - In this 6-hour course, learn to use Splunk IT Service Intelligence features, such as Service Analyzer, Notable Events Review, Glass Tables, Deep Dives, KPI Alerts and more. - Register Statistical Processing - This four-hour course is for power users who want to identify and use transforming commands and eval functions to calculate statistics on their data. - Register Services Core Implementation - This 5-day instructor-led course covers how to make Splunk Enterprise run efficiently in setting up large clustered Splunk environments using best practices. - Register Setting Up Log Observer Connect - This 1-hour free, self-paced course describes the fundamental requirements for setting up Log Observer Connect, a feature that enables observability users to explore the data already being sent to Splunk instances with a no-code interface for faster troubleshooting and root-cause analysis. - Register Splunk Core Certified Advanced Power User - This certification demonstrates an individual’s ability to generate complex searches, reports, and dashboards with Splunk’s core software to get the most out of their data. - Learn More Introduction to Splunk Application Performance Monitoring (APM) - This 15 min course for Developers, SRE's, and Architects explores Splunk APM's key features, navigation and basic troubleshooting. - Register Introduction to Splunk Synthetic Monitoring - Learn what Splunk Synthetic Monitoring is, explore the UI, and differentiate the types of tests. - Register Comparing Values - This three-hour course is for power users who want to learn how to compare field values using eval functions and eval expressions. - Register Using Splunk Application Performance Monitoring - This 4.5-hour virtual course, targeted to developers and DevOps, helps you use Splunk APM to analyze traces, and troubleshoot and monitor your microservices-based applications. - Register Instrumenting Splunk RUM for Browser - Learn how to instrument front-end browser-based applications using Splunk Real User Monitoring. - Register Introduction to Splunk UBA - Learn to define UBA, understand threats and anomalies, contextualize internal data, and examine the relationship between employees and user accounts. - Register Administering Splunk SOAR - This 3-hour course prepares IT professionals to configure and manage Splunk SOAR.  - Register Correlation Analysis - This three-hour course is for power users who want to learn how to calculate co-occurrence between fields and analyze data from multiple datasets. - Register Developing Playbooks for Splunk Mission Control - Learn to use the SOAR VPE to create, test, and deploy playbooks for Mission Control. - Register Data Models - This three-hour course is for knowledge managers who want to learn how to create and accelerate data models. - Register Fundamentals of Metrics Monitoring in Splunk Observability Cloud - This course serves as the foundation for all other Splunk Observability Cloud courses. It is targeted towards DevOps/SRE/observability teams, senior on-call engineers, onboarding and monitoring strategists and developers. - Register Using Splunk Synthetic Monitoring (RIGOR) - Learn to use Splunk Synthetic Monitoring (RIGOR) in this eLearning video, intended mainly for admins and managers. - Register Introduction to Splunk Security Essentials - Understand what's available in Splunk Security Essentials (SSE) including use cases and analytic stories and learn to filter the over 1000 pieces of content to find the detections that are relevant your security data. Unpack each use case to discover how the detection works and the data sources it is looking for. - Register Network Performance Monitoring with Splunk Network Explorer - This 20-minute eLearning course teaches the basics of Splunk Network Explorer to gain insight into your cloud application deployment, including service dependencies and network traffic pattern analysis. - Register