Skip to main content

Splunk Training + Certification

Correlation Analysis

Course Description

This three-hour course is for power users who want to learn how to calculate co-occurrence between fields and analyze data from multiple datasets. Topics will focus on the transaction, append, appendcols, union, and join commands.

Instructor-led Training Schedule

eLearning with Labs

The best of both delivery methods. Self-paced eLearning videos accessible anytime, anywhere, plus access to the interactive lab environment to sharpen your skills.


Prerequisite Knowledge

To be successful, students should have a solid understanding of the

  • How Splunk works
  • Creating search queries
  • Lookups

Course Topics

  • Calculate Co-Occurrence Between Fields
  • Analyze Multiple Datasets

Course Objectives

Module 1 - Calculate Co-Occurrence Between Fields
  • Understand transactions
  • Explore the transaction command


Module 2 - Analyze Multiple Data Sources
  • Understand subsearch
  • Use the append, appendcols, union, and join commands to combine, analyze, and compare multiple data sources