Skip to main content

Splunk Training + Certification

Splunk Fundamentals 1

Course Description

This course teaches you how to search and navigate in Splunk, use fields, get statistics from your data, create reports, dashboards, lookups, and alerts. Scenario-based examples and hands-on challenges will enable you to create robust searches, reports, and charts. It also introduces Splunk's datasets features and Pivot interface.

As of Oct. 25, 2021, Splunk Education has replaced this course with the new Single-Subject Courses. Please refer to this page for more information on the new offerings. This course will continue to be offered by our Authorized Learning Partners (ALPs) only until approximately April 30, 2022. 

Instructor-led Training Schedule


Registration for this course is no longer available.


Registration for this course is no longer available.

Course Topics

  • Introduction to Splunk's interface
  • Basic searching
  • Using fields in searches
  • Search fundamentals
  • Transforming commands
  • Creating reports and dashboards
  • Datasets
  • The Common Information Model (CIM)
  • Creating and using lookups
  • Scheduled Reports
  • Alerts
  • Using Pivot

Course Objectives

Module 1 – Introduction
  • Overview of Buttercup Games Inc.
Module 2 – What is Splunk?
  • Splunk components
  • Installing Splunk
  • Getting data into Splunk
Module 3 – Introduction to Splunk's User Interface
  • Understand the uses of Splunk
  • Define Splunk Apps
  • Customizing your user settings
  • Learn basic navigation in Splunk
Module 4 – Basic Searching
  • Run basic searches
  • Use autocomplete to help build a search
  • Set the time range of a search
  • Identify the contents of search results
  • Refine searches
  • Use the timeline
  • Work with events
  • Control a search job
  • Save search results
Module 5 – Using Fields in Searches
  • Understand fields
  • Use fields in searches
  • Use the fields sidebar
Module 6 – Search Language Fundamentals
  • Review basic search commands and general search practices
  • Examine the search pipeline
  • Specify indexes in searches
  • Use autocomplete and syntax highlighting
  • Use SPL search commands to perform searches:
Module 7 – Using Basic Transforming Commands
  • The top command
  • The rare command
  • The stats command
Module 8 – Creating Reports and Dashboards
  • Save a search as a report
  • Edit reports
  • Create reports that include visualizations such as charts
  • and tables
  • Create a dashboard
  • Add a report to a dashboard
  • Edit a dashboard
Module 9 – Datasets and the Common Information Model
  • Naming conventions
  • What are datasets?
  • What is the Common Information Model (CIM)?
Module 10 – Creating and Using Lookups
  • Describe lookups 
  • Create a lookup file and create a lookup definition
  • Configure an automatic lookup
Module 11 – Creating Scheduled Reports and Alerts
  • Describe scheduled reports
  • Configure scheduled reports
  • Describe alerts
  • Create alerts
  • View fired alerts
Module 12 - Using Pivot
  • Describe Pivot
  • Understand the relationship between data models and pivot
  • Select a data model object
  • Create a pivot report
  • Create an instant pivot from a search
  • Add a pivot report to a dashboard