Course Description

This course teaches you how to search and navigate in Splunk, use fields, get statistics from your data, create reports, dashboards, lookups, and alerts. Scenario-based examples and hands-on challenges will enable you to create robust searches, reports, and charts. It will also introduce you to Splunk's datasets features and Pivot interface.

Course Topics

  • Introduction to Splunk's interface
  • Basic searching
  • Using fields in searches
  • Search fundamentals
  • Transforming commands
  • Creating reports and dashboards
  • Creating and using lookups
  • Scheduled ReportsAlerts
Course Objectives

Module 1 -  Introducing Splunk

  • Understand the uses of Splunk
  • Define Splunk Apps
  • Learn basic navigation in Splunk

 

 

Module 2 -   Searching

  • Run basic searches
  • Use autocomplete to help build a search
  • Set the time range of a search
  • Identify the contents of search results
  • Refine searches
  • Use the timeline
  • Work with events
  • Control a search job
  • Save search results

 

Module 3 - Using Fields in Searching

  • Understand fields
  • Use fields in searches
  • Use the fields sidebar
  • Use search modes (fast, verbose, and smart)

Module 4 - Creating Reports and Dashboards

  • Save a search as a report
  • Edit reports
  • Create reports that display statistics (tables)
  • Create reports that display visualizations (charts)
  • Create a dashboard
  • Add a report to a dashboard
  • Edit a dashboard

 

Module 5 - Splunk's Search Language Fundamentals

  • Understand the search pipeline
  • Understand search syntax concepts
  • Use the following commands to perform searches: tables, rename, fields, dedup, sort

Module 6 - Using basic Transforming Commands

  • The top command
  • The rare command
  • The stats command

Module 7 - Creating and Using Lookups

  • Describe lookups 
  • Examine a lookup file example
  • Create a lookup file and create a lookup definition
  • Configure an automatic lookup
  • Use the lookup in searches

Module 8 - Creating Alerts and Scheduled Reports

  • Describe scheduled reportsC
  • onfigure scheduled reports
  • Describe alerts
  • Create alerts
  • View fired alerts

Module 9 - Creating and Using Macros

  • Describe macros
  • Create and use a basic macro
  • Define arguments and variables for a macro
  • Add and use arguments with a macro

Module 10 - Creating Data Models

  • Describe the relationship between data models and pivot
  • Identify data model attributes
  • Create a data modelUse a data model in pivot