advanced alert actions, using regex and erex to extract fields, using spath to work with self-referencing data , creating nested macros and macros with event types, accelerating reports and data models. aliases and calculated fields, creating tags and event types, using macros, creating workflow actions and data models, and normalizing data with the Common Interface Model (CIM). Participant, Splunk Enterprise Data Administration

Fundamentals Transforming commands Creating reports and dashboards Datasets The Common Information Model Splunk Components Installing Splunk Getting data into Splunk Module 3 - Introduction to Splunk’s User 9 – Datasets and the Common Information Model Naming conventions What are datasets? What is the Common Information Model (CIM)? Describe Pivot Understand the relationship between data models and pivot Select a data model object Create

Students will learn steps and best practices for planning, data collection and sizing for a distributed models, and normalising data with the Common Interface Model (CIM). , creating nested macros and macros with event types, accelerating reports and data models. who are responsible for getting data into Splunk Indexers. Participant, Splunk Enterprise Data Administration

with Lookups Data Models Splunk Enterprise System Administration Splunk Enterprise Data Administration Validate data against the Common Information Model. Configure ES inputs and Technology Add-ons. Models Module 6 – Installation and Configuration Prepare a Splunk environment for installation Download 7 – Validating ES Data Plan ES inputs Configure technology add-ons Module 8 – Custom Add-ons Design a new add-on for custom data Use the Add-on Builder to build a new add-on Module 9 – Tuning Correlation

Splunk Enterprise Data Administration This virtual 13.5 hour course is designed for system administrators who are responsible for getting data into Splunk Indexers. models, and normalising data with the Common Interface Model (CIM). , creating nested macros and macros with event types, accelerating reports and data models. Participant, Splunk Enterprise Data Administration

Students will learn steps and best practices for planning, data collection and sizing for a distributed , creating nested macros and macros with event types, accelerating reports and data models. models, and normalising data with the Common Interface Model (CIM). who are responsible for getting data into Splunk Indexers. Participant, Splunk Enterprise Data Administration

Splunk Enterprise Data Administration This virtual 13.5 hour course is designed for system administrators who are responsible for getting data into Splunk Indexers. models, and normalising data with the Common Interface Model (CIM). , creating nested macros and macros with event types, accelerating reports and data models. Participant, Splunk Enterprise Data Administration

models, and normalising data with the Common Interface Model (CIM). , creating nested macros and macros with event types, accelerating reports and data models. Splunk Enterprise Data Administration This virtual 9 hour course is designed for system administrators Students will learn steps and best practices for planning, data collection and sizing for a distributed Participant, Splunk Enterprise Data Administration

Path Splunk Core Certified Power User Develop strong skills in search, reporting, knowledge objects, data models and CIM. modelling for real-world use cases. View Learning Path Splunk Cloud Certified Administrator Administer Splunk Cloud environments including data View Learning Path Splunk ITSI Certified Administrator Deploy and configure ITSI including service modelling

Major topics include how to install and deploy uberAgent to your Windows endpoints, user experience data collection and interpretation, application and network data collection and interpretation and data storage Module 1 - Overview Why uberAgent? Why Splunk? Licensing Module 2 - Use case Dashboards Splunk Data Models Identifying Remote Connections Troubleshooting 3 - Architecture Overview Basic Data Collection Browser Performance Data Collecting Citrix Data Encryption

Participant, Splunk Fundamentals 2 Dynamic Dashboards - Course Topics Data Source Types Mock Data Event Audience Knowledge Manager learning path Dynamic Dashboards- Course Objectives Topic 1 – Selecting a Data Source Identify dataSources stanza fields Name search types Use a secondary data source Topic 2 – Adding Topic 3 - Improving Performance Identify performance improvement methods Use tstats and accelerated data models Create chain searches Set defaults Topic 4 – Comparing Temporary versus Persistent Fields Differentiate

complex searches, reports, and dashboards with Splunk’s core software to get the most out of their data Multivalue Fields Search Optimisation Creating Knowledge Objects Creating Field Extractions Enriching Data with Lookups Data Models Introduction to Dashboards Dynamic Dashboards Cert Exam - Splunk Core Certified Participant, Splunk Enterprise Data Administration