Splunk Boot Camp

*All lab exercises are run in a Linux environment. A Windows environment can be provided upon request. 

Part 1: Introduction to Splunk

1. What’s Splunk?
2. Authentication Methods
3. Access Controls & Users
4. Products, Licensing, and Costs
5. Quick Tour Guide: User Interface
6. Exercise: Lab Environment and Configuration

Part 2: Indexes

1. Splunk Data
2. What are Indexes?
3. What are Indexers?
4. Exercise: Create Your First Index
5. Search-Head
6. Index Clusters
7. Index Pipeline
8. Exercise: Upload Data Manually
9. Events
10. Fields & Field Extraction
11. Exercise: Using the Field Extractor Tool
12. Forwarders
13. Metrics
14. Exercise: Using the Forwarder to Send Data
15. Removing Data

Part 3: Splunk Architecture

1. Components of Splunk Deployments
2. Deployment Scenarios

Part 4: Search Processing Language

1. What is Search Processing Language (SPL)?
2. Searching Operators
3. Search Commands
4. Search Pipeline
5. Exercise: Search Examples
6. Subsearches
7. Commonly Used Search Commands
8. Exercise: Search Examples II
9. Drilldowns
10. Lookups
11. Exercise: Using Lookups
12. Optimize Searches
13. Exercise: Search Examples III

Part 5: Dashboard & Visualizations

1. Dashboards in Splunk
2. Creating Dashboards
3. Visualization Types
4. Search as Reports
5. Dashboards
6. Exercise: Creating a Dashboard
7. Drilldown
8. Forms
9. Exercise: Add Input Forms
10. Exercise: Drilldown

Part 6: Alerts

1. Creating Alerts
2. Scheduling Alerts
3. Alerts Notifications
4. Exercise: Creating Alerts

Part 7: Scheduled Reports

1. Creating Scheduled Reports
2. Exercise: Create a Scheduled Report

Part 8: Putting All Pieces Together

Exercise: As a final lab, you’ll configure a typical scenario when using Splunk. You'll install and configure an NGINX, then the Splunk forwarder to collect logs in Splunk. The idea is that you can apply everything you've learned within the Bootcamp: creating searches, visualizations, dashboards, etc.

This Splunk training course is exercise-intensive and is designed for individuals looking to develop a deeper understanding of the tool. students should come prepared with some knowledge of Splunk itself, as this will be a deeper dive into the tool.

Professionals who may benefit include: 

• Developers
• Testers and QA teams
• Release engineers
• IT operations staff
• DevOps practitioners
• DBAs and data engineering teams
• Security Managers
• Security Administrators
• Senior Business Intelligence Architects and Consultants
• Senior Business Analysts
• Anyone responsible for implementing BI

• Create Your First Index
• Upload Data Manually
• Use the Forwarder to Send Data
• Search in Splunk using the Search Processing Language (SPL)
• Create a Dashboard
• Create Alerts
• Create a Scheduled Report