Getting Started with Splunk

Course: 29 Minutes

• Course Introduction
• Introduction to Splunk
• Splunk Licensing
• Installing Splunk on Linux
• Installing Splunk on Windows
• Navigating the Splunk Interface
• Running Splunk Without Administrator Permissions
• Starting Splunk

Getting Your Data into Splunk

Course: 34 Minutes

• Data Forwarder Overview
• Adding Sample Data to Splunk
• Configuring Splunk Inputs
• Adding and Monitoring Files and Folders
• Setting Data Source Type
• Creating a New Source Type for Event Processing
• Configuring Timestamps
• Monitoring Network Ports and Splunk Forwarders
  
  

Splunk Forwarders

Course: 17 Minutes

• Deploy the Windows Universal Forwarder
• Deploy the Unix Universal Forwarder
• Configuring Load Balancing
• Configuring Data Cloning
• Deploy a Heavy Forwarder

Practice: Installing Splunk

Course: 3 Minutes

• Exercise: Installing Splunk on a Windows Server

Administration with Splunk Web

Course: 18 Minutes

• Course Introduction
• Splunk Web Introduction
• Default Dashboards and Customization
• Creating Users and Roles
  
  

Administration with Configuration Files

Course: 25 Minutes

• Configuration Files, Directories, and Structure
• Precedence of Splunk Configuration Files
• Working with Splunk Configuration Files
• Accessing the CLI
• CLI Help Interface
• CLI Admin Commands and Remote Servers

Administrative Tasks

Course: 20 Minutes

• Start and Stop Splunk Enterprise
• Change Default Values and License
• Configuring Splunk Networking
• Upgrading Splunk
• Migrating to a New Server

Splunk Alerts

Course: 24 Minutes

• Introduction to Alerts
• Throttling Alert Rates and Alert Permissions
• Creating Per-Result and Rolling-Window Alerts
• Creating Scheduled Alerts
• Extending Alert Functionality
• Sending an Alert E-mail
• Other Alert Actions
• Creating Triggered Alerts

Capacity Planning

Course: 12 Minutes

• Effect of Incoming Data on Performance
• Effect of Users and Searches on Performance
• Storage Requirements
• Scaling Your Deployment

Practice: Administer Splunk

Course: 5 Minutes

• Exercise: Create a Splunk Role and User

Administration with Splunk Web

Course: 18 Minutes

• Course Introduction
• Splunk Web Introduction
• Default Dashboards and Customization
• Creating Users and Roles

Administration with Configuration Files

Course: 25 Minutes

• Configuration Files, Directories, and Structure
• Precedence of Splunk Configuration Files
• Working with Splunk Configuration Files
• Accessing the CLI
• CLI Help Interface
• CLI Admin Commands and Remote Servers

Administrative Tasks

Course: 20 Minutes

• Start and Stop Splunk Enterprise
• Change Default Values and License
• Configuring Splunk Networking
• Upgrading Splunk
• Migrating to a New Server

Splunk Alerts

Course: 24 Minutes

• Introduction to Alerts
• Throttling Alert Rates and Alert Permissions
• Creating Per-Result and Rolling-Window Alerts
• Creating Scheduled Alerts
• Extending Alert Functionality
• Sending an Alert E-mail
• Other Alert Actions
• Creating Triggered Alerts

Capacity Planning

Course: 12 Minutes

• Effect of Incoming Data on Performance
• Effect of Users and Searches on Performance
• Storage Requirements
• Scaling Your Deployment

Practice: Administer Splunk

Course: 5 Minutes

• Exercise: Create a Splunk Role and User
• Privacy and Cookie PolicyTerms of Use

Visualization Overview and Chart Types

Course: 19 Minutes

• Course Introduction
• Visualizing Events
• Generating Tables
• Bar and Line Charts
• Pie, Scatter, and Bubble Charts
• Other Charting Types

Drilldown Behavior and Chart Controls

Course: 22 Minutes

• Drilldown Introduction
• Drilldown on Additional Chart Types
• Dynamic Drilldown
• Contextual Drilldown
• Chart Controls

Building Dashboards in Splunk Web

Course: 14 Minutes

• Introduction to Dashboard Editor
• Adding a New Dashboard
• Editing Dashboards
• Create Dashboard PDFs

Building Dashboards with Simple XML

Course: 39 Minutes

• Introduction to Editing Simple XML
• Dashboard Searches
• Creating Base Searches for Dashboards
• Configuring Dynamic Drilldown Using Simple XML
• Tokens and Dashboards

Practice: Charting in Splunk

Course: 5 Minutes

• Exercise: Create a Bar Chart

Multiple Indexes and Storage

Course: 22 Minutes

• Course Introduction
• Deploying Multiple Indexes
• Deleting Indexed Data and Indexes
• Moving the Index Database
• Configuring Index Disk Usage

Backing Up Index Data

Course: 11 Minutes

• Considerations for Index Backups
• Data Retirement and Aging
• Archiving Data
• Restoring Data

Indexer Clusters

Course: 20 Minutes

• Introducing Indexer Clusters
• Enable the Master Node
• Enable Peer Nodes
• Configure a Search Head
• Configure Forwarders to Use the Indexer Cluster

Managing the Indexer Cluster

Course: 14 Minutes

• View the Master Dashboard
• View the Peer and Search Head Dashboards
• Take a Node Offline
• Restarting Splunk Nodes

Advanced Search Topics

Course: 31 Minutes

• Retrieve Events with Search
• Retrieve Events Using Fields
• Specifying Search Indexes and Permissions
• Investigate Events Using the Timeline
• Defining Event Types
• Using Search Macros
• Executing Secondary Searches
• Identifying Data Patterns

Practice: Manage Indexes

Course: 5 Minutes

• Exercise: Configure Multiple Splunk Nodes