Learning Splunk

Learning Splunk, available at $59.99, has an average rating of 4.45, with 56 lectures, 7 quizzes, based on 70 reviews, and has 466 subscribers.

You will learn about Build your own Splunk development environment from scratch on a Linux server—and use it! Onboard and index multiple types of data into your Splunk instance Understand the importance of the Splunk Common Information Model (CIM), and why data models make Splunk a powerful tool for managing logs at volume Normalize data using Splunk apps Develop basic reports and dashboards using your new Splunk instance and the data from your Linux system Understand why leaving systems exposed to the internet is a bad idea This course is ideal for individuals who are This course is for IT professionals and data analysts who want to get started with Splunk and rapidly take their skills to the point where they can get hands-on and fully proficient with its features and benefits. It is particularly useful for This course is for IT professionals and data analysts who want to get started with Splunk and rapidly take their skills to the point where they can get hands-on and fully proficient with its features and benefits.

Enroll now: Learning Splunk

Summary

Title: Learning Splunk

Price: $59.99

Average Rating: 4.45

Number of Lectures: 56

Number of Quizzes: 7

Number of Published Lectures: 56

Number of Published Quizzes: 7

Number of Curriculum Items: 63

Number of Published Curriculum Objects: 63

Original Price: $109.99

Quality Status: approved

Status: Live

What You Will Learn

Build your own Splunk development environment from scratch on a Linux server—and use it!
Onboard and index multiple types of data into your Splunk instance
Understand the importance of the Splunk Common Information Model (CIM), and why data models make Splunk a powerful tool for managing logs at volume
Normalize data using Splunk apps
Develop basic reports and dashboards using your new Splunk instance and the data from your Linux system
Understand why leaving systems exposed to the internet is a bad idea

Who Should Attend

This course is for IT professionals and data analysts who want to get started with Splunk and rapidly take their skills to the point where they can get hands-on and fully proficient with its features and benefits.

Target Audiences

This course is for IT professionals and data analysts who want to get started with Splunk and rapidly take their skills to the point where they can get hands-on and fully proficient with its features and benefits.

Maybe you’ve heard about Splunk, but don’t know how to use it to take control of big data? Have you used Splunk, but want to learn how to set it up and use it properly? If so, this course is for you.

In this course, you will work with Splunk from the ground up. You’ll learn the basics of Splunk terminology, and how to use the Splunk web interface to find data. You’ll also build your own Splunk environment, add data to the Common Information Model (CIM), create dashboards, and find events within data. Finally, you’ll master advanced searching techniques that are especially useful to those in network, security, and system administration roles.

The course also covers the latest additions brought in for Splunk 8 and helps you quickly perform an upgrade. By the end of the course, you will be confident about using Splunk and will be well on the road to becoming a proficient Splunk architect and administrator as quickly as possible!

About the Author

Tom Kopchak is the Director of Technical Operations at Hurricane Labs, where he pretends to manage a team of network and Splunk engineers but is still an engineer and technology geek at heart. Tom is a Splunk Certified Architect and Accredited Consultant and has several years’ experience building, designing, and managing Splunk deployments; he also manages teams of Splunk engineers, designing Splunk deployment strategies, and developing Splunk training materials.

He holds a Master’s degree in Computing Security from the Rochester Institute of Technology and has spoken at numerous Infosec conferences around the country (including Splunk .conf and DEFCON). You will often find him researching digital forensics topics or tinkering with any and all forms of computer hardware. When he is not working with computers, Tom enjoys composing, music improvisation (Acts of Music), and playing both the piano and organ.

Course Curriculum

Chapter 1: Introduction to Splunk

Lecture 1: Course Overview

Lecture 2: What Is Splunk

Lecture 3: What Are Logs and Why They Matter

Lecture 4: Setting Up an AWS Environment

Lecture 5: Splunk Installation

Chapter 2: Splunk Terminology

Lecture 1: Splunk – Splexicon

Lecture 2: What Data Looks Like in Splunk – Events

Lecture 3: Getting Data Out of Splunk – Search

Lecture 4: Saved Searches – Report

Lecture 5: Visualizing Data – Dashboard

Lecture 6: Splunk’s Search Language – Search Processing Language

Lecture 7: What Type of Data Do We Have – Sourcetype

Lecture 8: How is Data Stored – Index

Lecture 9: Making Data Useful with Knowledge Objects and Fields

Lecture 10: Enriching Data – Lookup Table

Chapter 3: Data Onboarding

Lecture 1: How to Approach Data Onboarding

Lecture 2: Hands-On Lab: Onboarding Linux Authentication Logs

Lecture 3: Field Extractions Using Splunk Apps

Lecture 4: What If There Is Not an App Available

Lecture 5: Splunk Configuration Files

Chapter 4: Splunk Deployment Components

Lecture 1: Core Splunk Infrastructure – Indexes and Search Heads

Lecture 2: Supporting Infrastructure – Forwarders

Lecture 3: Supporting Infrastructure – Syslog Receiver

Lecture 4: Supporting Infrastructure – Deployment Server

Lecture 5: Splunk Licensing – How It Works and How to Investigate Your License Utilization

Lecture 6: Splunk Clustering – Building Splunk for Fault Tolerance

Lecture 7: Distributed Splunk Environments

Lecture 8: Splunk Apps – The Building Blocks of Any Splunk Deployment

Chapter 5: Data Normalization and Data Models

Lecture 1: Onboarding Iptables Logs

Lecture 2: Normalizing Data Using the Splunk Common Information Model (CIM)

Lecture 3: Applying the Common Information Model to Your Firewall Logs

Chapter 6: Using Your Splunk Environment

Lecture 1: Overview of Splunk UI

Lecture 2: Using Fields

Lecture 3: Hands-on Lab: Working with the Splunk UI

Lecture 4: Splunk Search Models

Lecture 5: Hands-On Lab: Splunk Search Modes

Lecture 6: The Search Pipeline

Lecture 7: Hands-On Lab: Search Pipeline

Chapter 7: Visualizing Data

Lecture 1: Reporting Log Data – Tables

Lecture 2: Hands-On Lab: Tables – Displaying Search Results

Lecture 3: Advanced Searching Concepts – Chart – Graphing Search Results

Lecture 4: Advanced Searching Concepts – Timechart – Results Over Time

Lecture 5: Advanced Searching Concepts – Geostats and IP Location

Lecture 6: Advanced Searching Concepts: Eval – Manipulating and Reformatting Data

Lecture 7: Advanced Searching Concepts: Rename â€“ Making Table Headers More Accessible

Lecture 8: Advanced Searching Concepts: Relative Time Syntax

Lecture 9: Advanced Searching Concepts: Search Performance – Gotchas to Avoid

Lecture 10: Advanced Searching Concepts: Time to Experiment â€“ Expanding Your Splunk Knowle

Lecture 11: Creating Splunk Dashboards

Lecture 12: Hands-On Lab: Dashboards

Chapter 8: Upgrading Splunk

Lecture 1: Splunk Release Cycles

Lecture 2: What’s New in Splunk 8.0

Lecture 3: Planning for an Upgrade

Lecture 4: Backing up Your Splunk Instance

Lecture 5: Performing a Splunk Upgrade

Lecture 6: Hands-on Lab: Upgrading Your Lab System

Instructors

Packt Publishing
Tech Knowledge in Motion

Rating Distribution

1 stars: 2 votes
2 stars: 0 votes
3 stars: 9 votes
4 stars: 30 votes
5 stars: 29 votes

Frequently Asked Questions

How long do I have access to the course materials?

You can view and review the lecture materials indefinitely, like an on-demand channel.

Can I take my courses with me wherever I go?

Definitely! If you have an internet connection, courses on Udemy are available on any device at any time. If you don’t have an internet connection, some instructors also let their students download course lectures. That’s up to the instructor though, so make sure you get on their good side!

Menu