Pre-Requisites

Technical requirements: Basic Linux administration and familiarity with using the command line. Basic networking concepts preferred.
Although it is not mandatory, students who have completed the self-paced Fundamentals of DevOps eLearning course have found it very helpful when completing this course.

Lessons

Splunk is one of the first platforms to help make sense of log data. Splunk is not just a tool for IT Ops. It’s a tool for developers. In fact, it’s a tool for everyone who’s interested in using the power of data. There are a lot of use cases for Splunk, but first, you need to learn what it’s capable of and how to get the most of it.

If you have concerns about security and compliance, don’t worry. You can still be compliant while making life easier with Splunk. You’ll just need to give everyone visibility on what’s happening with your applications in real-time or for analysis purposes. And yes—you can do all of this without giving people access to the servers.

This two-day boot camp is designed to empower a wide range of technology workers with the knowledge and skills needed to take full advantage of Splunk. This Splunk training course is exercise-intensive and is for individuals looking to develop a deeper understanding of the tool. Our continuous hands-on lab classroom format and real-world practice scenarios cement your new skills with Splunk’s various applications and leave you prepared to properly collect, analyze and utilize your machine data.  

Course Outline

*All lab exercises are run in a Linux environment. A Windows environment can be provided upon request. 

Part 1: Introduction to Splunk

1. What’s Splunk?
2. Authentication Methods
3. Access Controls & Users
4. Products, Licensing, and Costs
5. Quick Tour Guide: User Interface
6. Exercise: Lab Environment and Configuration

Part 2: Indexes

1. Splunk Data
2. What are Indexes?
3. What are Indexers?
4. Exercise: Create Your First Index
5. Search-Head
6. Index Clusters
7. Index Pipeline
8. Exercise: Upload Data Manually
9. Events
10. Fields & Field Extraction
11. Exercise: Using the Field Extractor Tool
12. Forwarders
13. Metrics
14. Exercise: Using the Forwarder to Send Data
15. Removing Data

Part 3: Splunk Architecture

1. Components of Splunk Deployments
2. Deployment Scenarios

Part 4: Search Processing Language

1. What is Search Processing Language (SPL)?
2. Searching Operators
3. Search Commands
4. Search Pipeline
5. Exercise: Search Examples
6. Subsearches
7. Commonly Used Search Commands
8. Exercise: Search Examples II
9. Drilldowns
10. Lookups
11. Exercise: Using Lookups
12. Optimize Searches
13. Exercise: Search Examples III

Part 5: Dashboard & Visualizations

1. Dashboards in Splunk
2. Creating Dashboards
3. Visualization Types
4. Search as Reports
5. Dashboards
6. Exercise: Creating a Dashboard
7. Drilldown
8. Forms
9. Exercise: Add Input Forms
10. Exercise: Drilldown

Part 6: Alerts

1. Creating Alerts
2. Scheduling Alerts
3. Alerts Notifications
4. Exercise: Creating Alerts

Part 7: Scheduled Reports

1. Creating Scheduled Reports
2. Exercise: Create a Scheduled Report

Part 8: Putting All Pieces Together

Exercise: As a final lab, you’ll configure a typical scenario when using Splunk. You'll install and configure an NGINX, then the Splunk forwarder to collect logs in Splunk. The idea is that you can apply everything you've learned within the Bootcamp: creating searches, visualizations, dashboards, etc.

Who should attend

This Splunk training course is exercise-intensive and is designed for individuals looking to develop a deeper understanding of the tool. Individuals with the following titles will find this course beneficial: 

• Developers
• Testers and QA teams
• Release engineers
• IT operations staff
• DevOps practitioners
• DBAs and data engineering teams
• Security Managers
• Security Administrators
• Senior Business Intelligence Architects and Consultants
• Senior Business Analysts
• Anyone responsible for implementing BI

Cancellation Policy

If a change needs to be made to your public course registration (cancel, transfer, or substitution) ASPE must receive written notice via email at customerservice@aspeinc.com or fax at 919-816-1710. If a cancel or transfer request is made less than 15 business days prior to the class start date, payment will still be due, no refunds will be issued and you will be charged a $200 change fee. Your paid tuition will be available for one year to be used as a credit towards another course of equal value; only one reenrollment opportunity is allowed. Failure to attend the course without written notification will result in forfeiture of the full course price. Student substitutions may be made at any time prior to the start of class free of charge. If ASPE is forced to cancel a course for any reason, liability is limited to the registration fee only.

Training Location

Virtual
Your Address

Your City, Your Province
Your Country