Best Splunk Online Training

Splunk Course Content:

Splunk Essentials

Splunk Terminology

Defining Splunk

Splunk 3 Tier Overview

Splunk 3 Tier Architecture

Server Settings and Control

Preferences and Licensing

Managing & Pooling License

Components of Splunk Tool

The Hardware Requirements

Conditions for Installation of Splunk

Splunk Licensing

Configuration Files on Linux

Configuration Files on Windows

Linux VS Windows OS in Splunk

Installation of Splunk Search Heads

Index Creation in Splunk

Standalone Server & Input Configuration

Splunk Indexer and Forwarders

Files Formats in Splunk

Common Configuration Files in Splunk

inputs.conf and outputs.conf

props.conf, index.conf, savedsearches.conf

Splunk Search and Search Fields

Understanding Search in Splunk

Writing Splunk Query for Search

Autocomplete Building a Search

Setting Time Range

Refining Search Criteria

Working Closely with Events

Identifying the Contents of Search

Controlling a Search Job

Fields in Searches

Using Fields Sidebar

Regex Field Extraction using Field Extractor (FX)

Delimiter Field Extraction using FX

Saving Searches

Scheduling Searches

Exporting Search Results

How to Create Alerts?

Explaining Alerts

Viewing Fired Alerts

Scheduled Reports

Describing and Configuring Scheduled Reports

Tags and Event Types

Tags in Splunk

Deployment of Tags for Splunk Search

Event Types and Utility

Generate and Implement Event Types in Search

Create and Use Macros

Defining Macros, Arguments and Variables in a Macro

Using Macros Variables

Workflows and Commands in Splunk

Understanding Workflows in Splunk

GET, POST, and Search Workflow Actions

Splunk Search Commands

Splunk Search Commands – An Overview

Best Search Practices

Understanding Search Pipeline

Specifying Indexes in Search

Syntax Highlighting

Autocomplete in Splunk

Search Commands: Tables, Fields, Sort, Multikv, Rename, Rex & Erex

Transforming Commands

Using Top, Rare, Stats Commands

Reporting Commands

Exploring Commands and their Functions

addcoltotals, addtotals,top, rare,stats

Mapping and Single Value Commands

iplocation, geostats, geom, addtotals commands

Splunk Reports and Visualization

Importance of Reporting & Visualization in Splunk

Exploring Available Visualizations

Creating Charts and Time Charts

Omitting Null Values and Format Results

Analyzing, Calculating and Formatting Results

Value Conversion

Roundoff and Format Values

How to use eval command?

Conditional Statements

Filtering Calculated Search Results

Correlating Events

Search with Transactions

Reporting on Transactions

Group Events using Fields and Time

Transaction VS Stats

Lookups

Lookup Table

Defining and Configuring Automatic Lookup

Deploying Lookup in Reports and Searches

Creating Reports and Dashboards

Creating Search Charts

Creating and Editing Reports and Dashboard

How to Add Reports to Dashboard?

Data Extraction and Parsing

Raw Data for Data Extraction

Transformation of Raw Data

Parsing and Preview of Data

Defining Pivot

Data Model and Pivot

Selecting a Data Model Object

Steps to Create a Pivot Report

Instant Pivot from a Search

Adding a Pivot Report to Dashboard

Common Information Model (CIM) Add-On

Defining Splunk CIM

CIM Add-On to Normalize Data

Machine Data Parsing

Manipulation of Raw Data

Data Field Extraction

Comparing Single Line and Multi-Line Events

Search Scaling and Monitoring

Distributed Search Concepts

Large Scale Deployment

Overcoming Execution Hurdles

Distributed Management Console

Distributed Management Console

Splunk Distributed Management Console

Index Clustering in Splunk

Forwarder Management and Distributed Search in Splunk

Splunk App – An Overview

Add-ons in Splunk App

Delete and Install Apps from SplunkBase

App Permissions and Deployment

Splunk Deployment Management

Deploying the Splunk Tool

Splunk Deployment Server and Environment

Deploying Clients Grouping in Splunk

Splunk Indexes: Definition and Segregation

Splunk Buckets and Bucket Classification

Index storage and Creating New Index

User Roles and Authentication

Native and LDAP Authentications

Splunk Administration Environment

Splunk Installation and Configuration

Data Inputs in Splunk

Search Indexer and Forwarder

Machine Data Parsing

Splunk Production Environment

Splunk Configuration Files

Universal Forwarder

Forwarder Data Management

Troubleshooting and Monitoring

Splunk Search Engine, User, and Management

How to Convert Data?

Machine-generated Data and Operational Intelligence

Search Head Clustering & Indexer Clustering

Configuring Individual Nodes

Configuring the Cluster behavior

Index and Search Behavior

Node and Clusters

Master node, peer node and search head

Splunk Input Methods

Deploying Scripted

Network and Agentless Input Types

Splunk User & Index Management

Splunk User Authentication

Monitoring and Optimizing Splunk Indexes