top of page
Splunk Training Provider Authorised Learning Partner Australia

Creating Field Extractions

The Splunk Education single-subject course module, Creating Field Extractions is for knowledge managers who want to learn about field extraction and the Field Extractor (FX) utility.

 

Topics will cover when certain fields are extracted and how to use the FX to create regex and delimited field extractions.

​

Splunk Credit Value : 50

Duration : 3 hours
Time : 9:00 am - 12:00 pm AEST

 

Please use the currency convertor above to check for course pricing in your local currency.

Buy Splunk Creating Field Extractions Training Course Now
Creating Field Extractions - Splunk Education Single Subject Course Training

The instructor was very responsive to questions and queries both private and Communal.. Final module collaborative lab walkthrough on screen was particularly helpful.

Participant, Splunk Fundamentals 2

Creating Field Extractions - Splunk Education Single Subject Course Training
Creating Field Extractions - Course Topics

  • Using the Field Extractor

  • Creating Regex Field Extractions

  • Creating Delimited Field Extractions

Class Format

Instructor-led lecture with labs. Delivered via virtual classroom or at your site

Course Prerequisites

To be successful, students should have a solid understanding of the following:

  • How Splunk works

  • Knowledge Objects (Introduction to Knowledge Objects module)

Course Module Mapping
Creating Field Extractions - Audience

Knowledge Manager learning path.

Creating Field Extractions - Course Objectives

Topic 1 – Using the Field Extractor

  • Understand types of extracted fields and when they are extracted

  • Explore the Splunk Web Field Extractor (FX)

Topic 2 – Creating Regex Field Extractions

  • Identify basics of regular expressions (regex)

  • Understand the regex field extraction workflow

  • Edit regex for field extractions

Topic 3 - Creating Delimited Field Extractions

  • Identify delimited field values in event data

  • Understand the delimited field extraction workflow

​

​

Splunk Course Schedules and Timezones

Splunk Course are delivered live and in English and provide access to customers spanning multiple timezones.

​

Dates and times displayed for each course are relative to Australian Eastern Time (AET).

​

​

AM Marked Splunk Courses

AM marked courses start at AET 9:00am and finish at AET 1:30pm and are optimal for customers in the following countries and areas;

​

  • UTC+10 including Australia (East Coast)

  • UCT+11/+12 including New Zealand and the Pacific Islands

  • UTC-8 including USA (West Coast), Canada (West Coast)

  • UTC-7 including USA (Mid West)

PM Marked Splunk Courses

PM marked courses usually starts at AEDT 12:00pm or AEST 11:00 am and are optimal for customers in the following countries and areas;

​

  • UTC+10 including Australia (East Coast)

  • UCT+11/+12 including New Zealand and the Pacific Islands

  • UTC-8 including USA (West Coast), Canada (West Coast)

  • UTC-7 including USA (Mid West)

Creating Field Extractions - Upcoming Schedule

bottom of page