Search this site

Splunk Enterprise Certified Architect Splunk Certification | INGENIQ Splunk Enterprise Certified Architect As part of Splunk Certification, a Splunk Enterprise Certified Architect has a thorough understanding of Splunk Deployment Methodology and best-practices for planning, data collection, and sizing for a distributed deployment and is able to manage and troubleshoot a standard distributed deployment with indexer and search head clustering. This certification demonstrates an individual’s ability to deploy, manage and troubleshoot complex Splunk Enterprise environments. The prerequisite courses listed below through Data and System Administration are highly recommended, but not required for candidates to register for the Splunk certification exam. All candidates who wish to access the exam must be Splunk Enterprise Certified Admin and complete the Architecting Splunk Enterprise Deployments, Troubleshooting Splunk Enterprise, Cluster Administration, and Splunk Enterprise Deployment Practical Lab courses. Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! Learning Path Paid Training Paid Cert Exam Cert Exam - Splunk Core Certfied Power User Cert Exam - Splunk Enterprise Certified Admin Troubleshooting Splunk Enterprise Splunk Enterprise Cluster Administration Architecting Splunk Enterprise Deployments Splunk Enterprise Practical Lab (Splunk run course) Cert Exam - Splunk Enterprise Certified Architect Splunk Certifications Exam When you’re ready to take a Splunk Certification exam, please view the Exam-Registration-Tutorial for registration assistance. As a reminder, each exam attempt costs US$125. Bulk registration vouchers can be purchased at a discounted price of five registrations for US$500. How to register for your exam There are three ways to purchase a PearsonVUE registration voucher: 1) Directly from PearsonVUE This is the most streamlined approach. Follow the steps for account creation and exam registration provided at www.pearsonvue.com/splunk Payment will be collected at the time of registration. You can also visit the Pearson VUE voucher store for direct purchase. 2) From Splunk (as an individual) Log into your existing account at Splunk.com/Education to purchase a registration code. Payment can be made via credit card or existing Splunk Education credits. Splunk will email you a unique registration code, which can be used for registration at www.pearsonvue.com/splunk . 3) From Splunk (as an account) Your Splunk Sales Rep can add certification exams to any deal. Once the number of vouchers has been requested, Splunk will email your unique registration codes, which can be used for registration at www.pearsonvue.com/splunk All scheduled exams are subject to a minimum 24-hour cancellation and/or rescheduling policy. Failure to cancel or reschedule an exam within this timeframe results in forfeiture of registration fee. One of the best trainers I've had - keeps content relevant & explains the tasks in easily understood language. Extremely knowledgeable in all fields relating to the content. Well paced & accommodated to everyone's questions & progress. Participant, Splunk Enterprise Data Administration

Splunk Training Packs delivered by INGENIQ Splunk Training Packs Learn more, for less... Splunk Training Packs are a collection of courses that can be purchased together to complete a certification and save upto to 15%. Splunk Training Packs apply to both Certifications, Roles and Personas. If any of our Splunk Training packs don’t quite fit your requirements then simply build your own Splunk Training Pack! Call or email our Training Consultants on 1300 245 802 or sales@ingeniq.com.au Team Training Packs Ingeniq Training Packs can be purchased for Teams for significant discounts. Licensed for up to 12 person Teams any student after number 6 gets free training. Team Training Packs apply to both Certifications, Roles and Personas. If any of the packs don’t quite fit your team’s requirements then simply build your own Splunk Training Pack! Call or email our Training Consultants on 1300 245 802 or sales@ingeniq.com.au Please note that the discounted prices indicated below is for one student. Splunk Training Pack #1 1700 USD Splunk Core Certified User This certification demonstrates an individual's ability to perform basic searches, uses fields, creates alerts, uses look-ups, and creates basic statistical reports and dashboards. Courses Working with Time Statistical Processing Leveraging Lookups and Subsearches Search Optimisation Original Price : 2000 USD Splunk Training Pack #2 3400 USD Splunk Core Certified Power User This certification demonstrates an individual's ability to do SPL searching and reporting, create knowledge objects, use field aliases and calculated fields, create tags and event types. Courses Working with Time Statistical Processing Comparing Values Result Modification Correlation Analysis Creating Knowledge Objects Creating Field Extractions Data Models Original Price : 4000 USD Splunk Training Pack #3 1700 USD Splunk Core Certified Advanced Power User Original Price : 2000 USD This certification demonstrates an individual's ability to generate complex searches, reports, and dashboards with Splunk’s core software to get the most out of their data. Courses Multivalue Fields Enriching Data with Lookups Introduction to Dashboards Dynamic Dashboards Pre-requisite Splunk Core Certified Power User Splunk Training Pack #4 3188 USD Splunk Enterprise Certified Admin Original Price : 3750 USD This certification demonstrates an individual's ability to build and manage a production Splunk environment, administer licences, Install and configure forwarders and understand the basics of getting data into Splunk. Courses Pre-requisite Splunk Core Certified Power User Splunk Enterprise System Administration Splunk Enterprise Data Administration Splunk Training Pack #5 3400 USD Splunk Enterprise Certified Architect Original Price : 4000 USD This certification demonstrates an individual's ability to understand the Splunk Support Model and its resources, Identify the best practices for troubleshooting Splunk Enterprise, list ways to gather useful Splunk diagnostic information and use Splunk diagnostic tools Courses Troubleshooting Splunk Enterprise Cluster Administration Architecting Enterprise Deployments Pre-requisite Splunk Core Certified Power User Splunk Enterprise Certified Admin Splunk Training Pack #6 3400 USD Search Expert Faststart Original Price : 4000 USD Instructor-Led Training, covers over 60 commands and functions. Learn to compare, manipulate, and normalise data. Enrich search results with lookups and subsearches and analyze data from multiple datasets. Courses Working with Time Statistical Processing Comparing Values Result Modification Leveraging Lookups and Subsearches Correlation Analysis Multivalue Fields Search Optimization Splunk Training Pack #7 Build my Own Pack If any of our Splunk Training packs don’t quite fit your requirements then simply build your own Splunk Training Pack! You can build custom training packs for Individuals or for a team upto 12 people. Call or email our Training Consultants on 1300 245 802 or sales@ingeniq.com.au Register Your Interest First Name Last Name Email Phone Company Who is this training for * Required An Individual A Team Please choose a Training Pack * Required Splunk Core Certified User Splunk Core Certified Power User Splunk Advanced Power User Splunk Enterprise Certified Admin Splunk Enterprise Certified Architect Search Expert Faststart I would like to build a Training pack of my own Message Submit One of the best trainers I've had - keeps content relevant & explains the tasks in easily understood language. Extremely knowledgeable in all fields relating to the content. Well paced & accommodated to everyone's questions & progress. Participant, Splunk Enterprise Data Administration

Splunk Training FAQs | Splunk Trainings delivered by INGENIQ Frequently Asked Questions General / Training Logistics Where are the Splunk training sessions held? Ingeniq delivers live virtual instructor-led training you can attend from home or office. What platform is used for the virtual training? Training is delivered via the LogMeIn GoToTraining application, compatible with Windows or Mac, with minimum 1 Mbps internet. Which time zone are courses scheduled in? Course times are shown in Australian Eastern Time (AEST / AEDT), but participants from multiple time zones are welcome. Are there remote Splunk courses available in New South Wales? Yes. All Splunk courses are virtual and accessible anywhere in Australia, including NSW, QLD, VIC, WA, SA, TAS, NT. What are the best Splunk training options near Chatswood or Silverwater? Ingeniq delivers official Splunk virtual instructor-led training that you can join from Chatswood, Silverwater, anywhere in Australia, or internationally. Because all courses are taught live online, learners can participate from any location worldwide without needing to travel. Where can I find Splunk training courses in Chatswood? Ingeniq provides virtual Splunk training that Chatswood-based learners can join from home or office. All courses are official Splunk curriculum. What discounts are available? Ingeniq offers Early-Bird discounts, Last-Minute Deals, savings on selected official Splunk courses, and occasional special offers for Splunk Partners. To stay updated on new promotions, limited-time deals, and upcoming Splunk course schedules, subscribe to the Ingeniq Newsletter. Can I use Splunk Education Credits (Training Credits) to pay for training? Yes, during checkout, you can request to pay with Splunk Education Credits by adding a note and your agreement number. What payment methods do you accept? We accept Debit/Credit Cards (via PayPal) and direct EFT. PayPal guest checkout is also supported. How much does Splunk training cost in Australia? Pricing varies by course, starting around AUD $1,000. Training Packs offer up to 15% savings. How much does Splunk certification cost in Chatswood? Certification exam fees are set by Splunk and purchased via Pearson VUE. Pricing is the same Australia-wide regardless of location. (Ingeniq does not sell certification exams.) When will I receive course materials? Course materials are made available in STEP (Splunk’s LMS) at the start of your class. Exams & Certification How to prepare for Splunk certification exams in Australia? Review the official Splunk exam blueprints and take recommended courses through Ingeniq. Practice in Splunk’s free sandbox to build confidence. How do I register for Splunk certification exams? Certifications are handled directly via Splunk’s official portal. (Refer to Splunk’s exam registration documentation.) How long do Splunk exams take? The typical exam duration is one hour, once the first page of questions appears. What is the format of the certification exams? Exams may include multiple choices, true/false, fill-in-the-blank, and multiple select questions. How can I prepare for Splunk certification exams in Australia? Take official Splunk training through Ingeniq and review Splunk’s exam blueprints online. What are the benefits of Splunk certification? Certification validates your Splunk skills and enhances your career opportunities. What if I experience connectivity issues during a training session? We provide contact numbers and support links for LogMeIn during sessions so you can get immediate help. When will I get my completion certificate? After the class, your lab results are marked in STEP, and you can download your certificate from your learning profile. Exams & Certification How to prepare for Splunk certification exams in Australia? Review the official Splunk exam blueprints and take recommended courses through Ingeniq. Practice in Splunk’s free sandbox to build confidence. How do I register for Splunk certification exams? Certifications are handled directly via Splunk’s official portal. (Refer to Splunk’s exam registration documentation.) How long do Splunk exams take? The typical exam duration is one hour, once the first page of questions appears. What is the format of the certification exams? Exams may include multiple choices, true/false, fill-in-the-blank, and multiple select questions. How can I prepare for Splunk certification exams in Australia? Take official Splunk training through Ingeniq and review Splunk’s exam blueprints online. What are the benefits of Splunk certification? Certification validates your Splunk skills and enhances your career opportunities. What if I experience connectivity issues during a training session? We provide contact numbers and support links for LogMeIn during sessions so you can get immediate help. When will I get my completion certificate? After the class, your lab results are marked in STEP, and you can download your certificate from your learning profile. Course Content, Packs & Advanced Topics What is a Splunk Training Pack? A “pack” is a bundled set of courses aligned to certification paths, often with cost savings compared to buying courses individually. Do you offer custom training packs? Yes, if none of our prebuilt packs suit your goals, we can help you build a custom pack. What topics are covered in Splunk training courses? Courses cover search, dashboards, admin, SOAR, ITSI, and troubleshooting. How does Splunk training improve data analysis skills? It teaches you to search, visualise, and interpret data effectively in Splunk. Which advanced courses do you offer? We provide advanced modules like Troubleshooting Splunk Enterprise, Building Apps with Splunk 8.2, SOAR playbooks, and more. Do you deliver training onsite or for teams? Yes, we can provide dedicated virtual or on-site training sessions tailored to your team. Policies & Terms When do Splunk training credits expire? Credits generally expireone year from the date of issue. Are credit card payments accepted from international customers? No, for customers outside Australia, payment must be made via electronic funds transfer (EFT). What are the terms for course refunds or claims? Claims for non-receipt or short delivery of “goods” must be lodged within 48 hours of scheduled delivery. How is my personal information handled? Ingeniq abides by privacy laws and policy to protect your data. See our Privacy Policy for details. Enrollment & Getting Started How do I enroll in a Splunk course with Ingeniq? You can enroll directly via Ingeniq’s course catalog or contact our Training Consultants at1300 245 802 or sales@ingeniq.com.au for assistance. Do I need a Splunk account before training? Yes, you’ll need a free Splunk.com account to access STEP (Splunk’s LMS) and course materials. What is STEP and how do I use it? STEP (Splunk Training Enablement Platform) is where you access course materials, track progress, and download certificates. You log in using your Splunk.com credentials. During Training What types of Splunk courses does Ingeniq offer? Ingeniq provides live virtual instructor-led courses across Splunk domains: Platform (searching, dashboards, admin) Security (ES, SOAR) Observability (ITSI, Cloud Monitoring) Architecture & Deployment How long do courses take? Courses range from 4.5 to 18 hours, depending on the subject and level. Can I customize my training path? Yes, Ingeniq offers custom training packs tailored to your goals, or you can choose from prebuilt certification-aligned bundles.

Splunk Education, Training and Professional Services Provider Building Apps with Splunk 8.2 Summary This two-day course focuses on Splunk Enterprise app development. It's designed for advanced users, administrators, and developers who want to create apps for Splunk Enterprise and Splunk Cloud. Major topics include planning apps, building data generators, adding data, custom search commands and REST endpoints, using the KV Store, app vetting using AppInspect and app packaging. Description Planning Apps Creating Apps Adding Data Enhancing Apps Using the REST API Packaging Apps Enjoyable presenter and easy to understand for an intermediate Splunk user pursuing Admin certification. Thanks from Massachusetts! Participant, Splunk Fundamentals 2 Splunk Credit Value: 150 Duration: 2 days Time: 11am – 3.30 pm AEST Objectives Module 1 – Planning Apps Set up a development environment Improve app performance Identify Splunk log files Use security best practices Create a data generator Module 2 – Creating Apps Describe the web framework architecture Manage apps and add-ons Create an app Configure app properties Create app navigation Add app icons and logos Module 3 – Adding Data List types of data inputs Identify ways to add data Explain modular vs scripted inputs Understand data normalization Review Add-on Builder Module 4 – Enhancing Apps Review commonly used knowledge object Learn about custom alert actions Build custom workflow actions Develop custom search commands Module 5 – Using the REST API Describe the Splunk REST API works Explain using REST with SplunkJS Extend Splunk with custom REST endpoints Review the KV Store and configuration Maintain app state using KV Store Module 6 – Packaging Apps Creating an app setup screen Define config file precedence Validate an app for Cloud with AppInspect Explain local and default differences Package an app Prerequisites To be successful, students should have a solid understanding of the following courses: Splunk Fundamentals 1 Splunk Fundamentals 2 Creating Dashboards OR the following single-subject courses: What Is Splunk? Intro to Splunk Using Fields Visualizations Leveraging Lookups and Subsearches Search Under the Hood Introduction to Knowledge Objects Creating Knowledge Objects Creating Field Extractions Enriching Data with Lookups Introduction to Dashboards Dynamic Dashboards To be successful, students should have a solid understanding of the following: Splunk system administration Splunk data administration Python or a similar scripting language Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! Splunk Course Schedules and Timezones Ingeniq Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm (4.5 hour sessions over 1 or more days) and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses start at AEDT 12:00pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West)

Multivalue Fields - Splunk Education Single Subject Course Training. Multivalue Fields The Splunk Education single-subject course module, Multivalue fields is for power users who want to become experts on searching and manipulating multivalue data. Topics will focus on using multivalue eval functions and multivalue commands to create, evaluate, and analyze multivalue data. Splunk Credit Value : 50 Duration : 3 hours Time : 9:00 am - 12:00 pm AEST Please use the currency convertor above to check for course pricing in your local currency. The instructor was very responsive to questions and queries both private and Communal.. Final module collaborative lab walkthrough on screen was particularly helpful. Participant, Splunk Fundamentals 2 Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! Multivalue Fields - Course Topics What are Multivalue Fields Creating Multivalue Fields Evaluating Multivalue Fields Analyzing Multivalue Fields Class Format Instructor-led lecture with labs. Delivered via virtual classroom or at your site Course Prerequisites To be successful, students must have completed these Splunk Education course(s) or have equivalent working knowledge: How Splunk works Creating search queries Multivalue Fields - Audience Search Expert learning path Multivalue Fields - Course Objectives Topic 1 – What are Multivalue Fields? Understand multivalue fields Define self-describing data Understand how JSON data is handled in Splunk Use the spath command to interpret self-describing data Use mvzip and mvexpand commands to manipulate multivalue fields Convert single-value fields to multivalue fields with specific commands and functions Topic 2 – Creating Multivalue Fields Creating multivalue fields with the makemv command and the split function of the eval command Topic 3 – Evaluating Multivalue Fields Use the mvcount, mvindex, and mvfilter eval functions to evaluate multivalue fields Topic 4 – Manipulating Multivalue Data Use the mvsotr, mvzip, mvjoin, mvmap, and mvappend eval functions and the mvexpand command to analyze multivalue data Splunk Course Schedules and Timezones Splunk Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses usually starts at AEDT 12:00pm or AEST 11:00 am and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) Multivalue Fields - Upcoming Schedule We don’t have any products to show here right now.

Level up your Splunk skills with the Power User Fast Start course. Explore 8 advanced modules covering search, reporting, correlation, field extractions, and data models. Splunk Power User Fast Start Strengthen your searching and reporting capabilities. Create workflow actions, event types, knowledge objects and data models. Know how to use field aliases, calculator fields and macros. Plus, learn to normalize data for Splunk. The Power User Fast start consists of the following 8 classes: Working with Time Statistical Processing Comparing Values Result Modification Correlation Analysis Creating Knowledge Objects Creating Field Extractions Data Models Splunk Credit Value : 400 or USD 4000 Duration : 24 hours (6 hours per day over 4 days) Time : 2 sessions per day 9:00 am - 12:00 pm and 1pm to 4pm Course Prerequisites Intro to Splunk Power User Fast Start Audience Analysts, IT operations, and security team members who need to level up their ability to manipulate and analyse data more effectively. These classes deepen practical searching, filtering, transforming, and reporting skills beyond the basics. Build more complex searches Related Certifications Splunk Certified Power User Working with Time This Splunk training course is for power users who want to become experts at using time in searches. Topics will focus on searching and formatting time in addition to using time commands and working with time zones. Read More Statistical Processing This Splunk training course is for power users who want to identify and use transforming commands and eval functions to calculate statistics on their data. Topics will cover data series types, primary transforming commands, mathematical and statistical eval functions, using eval as a function, and the rename and sort commands. Read More Comparing Values This Splunk training course is for power users who want to learn how to compare field values using eval functions and eval expressions. Topics will focus on using the comparison and conditional functions of the eval command, and using eval expressions with the field format and where commands. Read More Result Modification This Splunk training course is for power users who want to use commands to manipulate output and normalize data. Topics will focus on specific commands for manipulating fields and field values, modifying result sets, and managing missing data. Additionally, students will learn how to use specific eval command functions to normalize fields and field values across multiple data sources. Read More Correlation Analysis This Splunk training course is for power users who want to learn how to calculate co-occurrence between fields and analyze data from multiple datasets. Topics will focus on the transaction, append, appendcols, union, and join commands. Read More Creating Knowledge Objects This Splunk training course is for knowledge managers who want to learn how to create knowledge objects for their search environment using the Splunk web interface. Topics will cover types of knowledge objects, the search-time operation sequence, and the processes for creating event types, workflow actions, tags, aliases, search macros, and calculated fields. Read More Creating Field Extractions This Splunk training course is for knowledge managers who want to learn about field extraction and the Field Extractor (FX) utility. Topics will cover when certain fields are extracted and how to use the FX to create regex and delimited field extractions. Read More Data Models This Splunk training course is for knowledge managers who want to learn how to create and accelerate data models. Topics will cover datasets, designing data models, using the Pivot editor, and accelerating data models. Read More Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! The instructor was very responsive to questions and queries both private and Communal.. Final module collaborative lab walkthrough on screen was particularly helpful. Participant, Splunk Fundamentals 2

Splunk Enterprise Architect | Splunk Training Pack delivered by INGENIQ Splunk Enterprise Architect Splunk Training Pack#3 Splunk Enterprise Architect Learn more, for less.. Ingeniq Splunk Training Packs are a collections of courses that when purchased together qualify for discounts of up to 25%. Splunk Training Packs apply to all Training Tracks and Certifications – in fact to any combination of courses purchased together from Ingeniq. Buy Splunk Training Pack#3 and you’ll sit all the courses you need to be certified as a Splunk Enterprise Architect. A Splunk Enterprise Certified Architect has a thorough understanding of Splunk Deployment Methodology and best-practices for planning, data collection, and sizing for a distributed deployment and is able to manage and troubleshoot a standard distributed deployment with indexer and search head clustering. Call our Training Consultants now on 1300 245 802 or email sales@ingeniq.com.au to have this training pack tailored to you or your team' s requirements. Splunk Training Pack Courses Architecting Splunk Enterprise Deployments This 9 hour Splunk course focuses on large enterprise deployments. Students will learn steps and best practices for planning, data collection and sizing for a distributed deployment. Workshop-style labs challenge students to make design decisions about an example enterprise deployment. Troubleshooting Splunk Enterprise This 2 day course is designed for Splunk administrators. It covers topics and techniques for troubleshooting a standard Splunk distributed deployment using the tools available on Splunk Enterprise. Splunk Enterprise Cluster Administration This 3 day course is for an experienced Splunk Enterprise administrator who is new to Splunk Clusters. The course provides the fundamental knowledge of deploying and managing Splunk Enterprise in a clustered environment. It covers installation, configuration, management and monitoring of Splunk clusters. Cert Exam - Splunk Enterprise Architect [USD125] There are three ways to purchase a PearsonVUE registration voucher: Directly from PearsonVUE From Splunk (as an individual) From Splunk (as an account) Full instructions below. Addon & Save!! Splunk Fundamentals 2 This course focuses on searching and reporting commands as well as on the creation of knowledge objects. Major topics include using transforming commands and visualizations, filtering and formatting results, correlating events, creating knowledge objects, using field aliases and calculated fields, creating tags and event types, using macros, creating workflow actions and data models, and normalising data with the Common Interface Model (CIM). Splunk Fundamentals 3 This course runs over 4 days and focuses on additional search commands as well as advanced use of knowledge objects. Major topics include advanced statistics and eval commands, advanced lookup topics, advanced alert actions, using regex and erex to extract fields, using spath to work with self-referencing data, creating nested macros and macros with event types, accelerating reports and data models. Advanced Searching and Reporting This 13.5 hour Splunk course focuses on more advanced search and reporting commands. Scenario-based examples and hands-on challenges enable users to create robust searches, reports, and charts. Students are coached step by step through complex searches to produce final results. Splunk Enterprise System Administration This virtual 9 hour course is designed for system administrators who are responsible for managing the Splunk Enterprise environment. The course provides fundamental knowledge of Splunk license manager, indexers and search heads. It covers configuration, management and monitoring core Splunk Enterprise components. Splunk Enterprise Data Administration This virtual 13.5 hour course is designed for system administrators who are responsible for getting data into Splunk Indexers. Splunk Certifications Exam When you’re ready to take a Splunk Certification exam, please view the Exam-Registration-Tutorial for registration assistance. As a reminder, each exam attempt costs US$125. Bulk registration vouchers can be purchased at a discounted price of five registrations for US$500. How to register for your exam There are three ways to purchase a PearsonVUE registration voucher: 1) Directly from PearsonVUE This is the most streamlined approach. Follow the steps for account creation and exam registration provided at www.pearsonvue.com/splunk Payment will be collected at the time of registration. You can also visit the Pearson VUE voucher store for direct purchase. 2) From Splunk (as an individual) Log into your existing account at Splunk.com/Education to purchase a registration code. Payment can be made via credit card or existing Splunk Education credits. Splunk will email you a unique registration code, which can be used for registration at www.pearsonvue.com/splunk . 3) From Splunk (as an account) Your Splunk Sales Rep can add certification exams to any deal. Once the number of vouchers has been requested, Splunk will email your unique registration codes, which can be used for registration at www.pearsonvue.com/splunk All scheduled exams are subject to a minimum 24-hour cancellation and/or rescheduling policy. Failure to cancel or reschedule an exam within this timeframe results in forfeiture of registration fee. One of the best trainers I've had - keeps content relevant & explains the tasks in easily understood language. Extremely knowledgeable in all fields relating to the content. Well paced & accommodated to everyone's questions & progress. Participant, Splunk Enterprise Data Administration

Splunk Education, Training and Professional Services Provider Investigating Incidents with Splunk SOAR Summary This 3 hour course prepares security practitioners to use SOAR to respond to security incidents, investigate vulnerabilities, and take action to mitigate and prevent security problems. Description SOAR concepts Investigations Running actions and playbooks Case management & workflows Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! Enjoyable presenter and easy to understand for an intermediate Splunk user pursuing Admin certification. Thanks from Massachusetts! Participant, Splunk Fundamentals 2 Splunk Credit Value: 50 Duration: 3 hours Time: 11am – 2pm AEST Objectives Topic 1 – Starting Investigations SOAR investigation concepts ROI view Using the Analyst Queue Using indicators Using search Topic 2 – Working on Events Using the investigation page to work on events Use the heads-up display Set event status and other fields Use notes and comments How SLA affects event workflow Using artifacts and files Exporting events Executing actions and playbooks Managing approvals Topic 3 – Cases: Complex Events Use case management for complex investigations Use case workflows Mark evidence Running reports Pre-requisites Basic security operations knowledge Splunk Course Schedules and Timezones Ingeniq Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm (4.5 hour sessions over 1 or more days) and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses start at AEDT 12:00pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) Investigating Incidents with Splunk SOAR - Upcoming Courses Early Bird Discounts Investigating Incidents with Splunk SOAR : Starts November 19, 2026 Regular Price USD 500.00 Sale Price USD 450.00 Investigating Incidents with Splunk SOAR : Starts October 15, 2026 Price USD 500.00

Splunk Education, Training and Professional Services Provider Training Terms and Conditions Courses can be booked by phoning Ingeniq, sending an email or via www.ingeniq.com.au and are covered by the following terms and conditions. Ingeniq® is a registered trademark and wholly owned business division of Digital Networks Australia Pty Ltd. Digital Networks Australia Pty Ltd trades as Ingeniq® using the trademark and as such all legal requirements and agreements including contracts, notices, insurances, taxes and terms of trade are matters for Bluechip Infotech. Application of Terms These booking terms and conditions alone will form part of the agreement between the parties and will apply to any booking received or attendance at any course that is facilitated by Ingeniq, regardless of the process leading to a booking or the method of payment used in respect of such services. Acceptance of any purchase order will not constitute acceptance of any terms or conditions which may be attached to, or incorporated in, a purchase order. Supply of Services Ingeniq, a Bluechip Infotech agrees to supply services (“Services”) to a purchaser, attendee, student or course recipient (“Client”, “You” or “Your”) on these standard terms and conditions (“Terms”). Information on training events, courses and services are correct at the time of publication but are subject to change without notice. Ingeniq reserves the right to change course content, schedules and information at any time. Ingeniq assumes no responsibility for any and all expenses incurred due to course cancellations. Should a course be cancelled by Ingeniq, the paid seat for the course is transferable. Purchase Orders Any changes to these Terms for the supply Services must be approved in writing by Ingeniq. Only these Terms form part of the agreement between the parties and as such exclude any other terms and conditions which may be attached to, or incorporated in, a purchase order. Acceptance of a purchase order by Ingeniq will not constitute acceptance of any such terms or conditions. Taxes and GST Prices quoted for Services are in Australian Dollars and may exclude GST. The total amount payable to Ingeniq includes taxes, duties and government charges imposed or levied in Australia in connection with the supply of the Services. The client is required to pay any GST owed in connection with the supply and Ingeniq will issue a valid tax invoice where GST is to be collected. Course Bookings and Payment Course bookings can be made with Ingeniq over the phone, via email or via the Ingeniq website. Bookings are made on a “first-come, first-served” basis. Should the course or event be fully booked applicants will be placed on a waiting list. Payment can be made by Credit Card, EFT, Cheque, Purchase Order (for Credit Clients only) or vendor training credits (with vendor approval). Course bookings are not confirmed until payment is received. Unless a credit account is agreed or vendor training credits approved payment is due at time of booking. Training included as part of a product/software order is considered paid at the time invoice for the product/software order is paid. Payment for a course registration must be received no less than three business days before course commencement. Splunk Training Credits Vendor training credits (purchased directly through Splunk) can be applied to Ingeniq training courses. Splunk Credits are non-refundable and expire 12 months after date of purchase. Booking requests for Splunk Training Credits must be submitted in writing and approval from Vendor has be given before the student can be registered. Course Attendance Courses start and finish at the times scheduled unless specified otherwise. Ingeniq reserves the right to decline admission courses for late arrivals. Course prerequisites as specified in the course outlines must be met prior to attendance. Should a student fail to attend a course, 100% of course fees are payable and non-refundable. Course Conditions Training Credits are non-refundable and expire 12 months after date of purchase. . Refunds are NOT available for bookings if a student cancels the booking within three business days before course commencement. “Private Courses” are courses arranged for an organisation where attendees are typically restricted to approved registrants of that organisation. Private courses can be conducted on-site at the organisations premises, on-site at third party premises or virtually. Private Courses require payment at time of booking. Ingeniq makes no warranty in relation to the Services other than as contained in these Terms or as prescribed by a law which cannot be excluded or as otherwise published or made known to the Client. Cancellations and Transfers Public Courses Notification of booking cancellation must be received in writing 3 or more working days prior to course commencement date. Substitutions: Substitution of attendees are permitted provided that the substitution request is received in writing 3 or more working days priors prior to course commencement. Refunds will not be issued to students who fail to attend training. Private Courses All requests to cancel or change private course dates must be made in writing to and acknowledged by Ingeniq no less than 10 business days prior to the commencement date of the course. Requests for Private Course cancellation and date change received by Ingeniq less than 10 business days prior to the start of the course will incur a fee of 50% of the total course price, Requests for Private Course cancellations and date change requests received less than 5 business days prior to the start of the course will incur a fee of 80% of the total course price. Intellectual Property Material or courseware unless agreed otherwise in writing is provided is copyright and will remain the property of Ingeniq (or the relevant vendor, where such rights are owned by a vendor) and cannot be copied, reproduced or distributed without the express permission of Ingeniq or the relevant vendor. All material provided or shown is for the sole use of the course attendee and any usage rights are only conferred on payment of all charges payable in connection with those rights. Confidentiality Ingeniq and the Client agree to keep at all times as strictly confidential any Confidential Information that is disclosed or provided by one party to the other. In this clause, “Confidential Information” means information in any form but does not include information that is required to be shared by Ingeniq with a vendor to obtain courseware, accreditation or licensing rights, or is already in the public domain at the time that it is disclosed or becomes part of the public domain, otherwise than as a result of an unauthorised disclosure by Ingeniq or the Client. Privacy All information that Ingeniq collects in connection with your purchases or bookings will be treated in accordance with the Ingeniq Privacy Policy. Ingeniq will collect, use and disclose your personal information for the purpose of enabling you to enrol in a course, and to allow Ingeniq to deliver the course and related Products and Services to you. Ingeniq uses your information to: Communicate with you about your course, events, activities, products, services and opportunities available to you; Disclose your personal information to overseas vendors. Such vendors are those relevant to the course, products or courseware you have requested from Ingeniq; Carry out and record your details in internal administrative matters; and Fulfil any vendor requirements regarding your attendance for certification, planning, administration, policy development, program evaluation and other related or lawful purposes. As a division of Digital Networks Australia Pty Ltd refer to the Trading Terms and Conditions for all other general terms and conditions

Transitioning to Splunk Cloud Training delivered by INGENIQ Transitioning to Splunk Cloud The Transitioning to Splunk Cloud is a 2 day (9 hours) virtual course highlights key differences between Splunk Enterprise deployed on-premise and Splunk Enterprise Cloud to allow Splunk Administrators to transition to Splunk Cloud. The course provides the skills and knowledge for Splunk Cloud administrators to collect and ingest data as well as manage their cloud environment and maintain a productive Splunk SaaS deployment. Units : 2 Duration : 9 hours over 2 days Time : 9:00 am – 1:30 pm AEST (GMT +10) *Course discounts apply for Splunk Partners. Please use the currency convertor above to check for course pricing in your local currency. The instructor was very responsive to questions and queries both private and Communal.. Final module collaborative lab walkthrough on screen was particularly helpful. Participant, Splunk Fundamentals 2 Transitioning to Splunk Cloud - Course Topics Splunk Cloud SaaS User Authentication and Authorisation Index Management and Data Retention Cloud Ingestion – Using Splunk Forwarders Cloud Ingestion – Use API, HEC and Scripted Inputs Cloud Ingestion – Using Apps and IDM Inputs Installing and Managing Apps Refine and Manipulate Inputs § Working with Cloud Support Class Format Instructor-led lecture with labs. Delivered via virtual classroom or at your site Course Prerequisites Required Splunk Fundamentals 1 Splunk Fundamentals 2 Splunk Enterprise System Administration Splunk Enterprise Data Administration Transitioning to Splunk Cloud - Audience Splunk Partners having a Professional Services Practice. Related Certifications Splunk Cloud Certified Admin After completing Transitioning to Splunk Cloud course you will be able to Advantages of using Splunk Cloud Learn the differences between managing Splunk Enterprise and Cloud How to manage data and inputs in Splunk Cloud How to manage Apps and Configs in Splunk Cloud Transitioning to Splunk Cloud - Course Objectives Module 1 – Splunk Cloud SaaS Describe Cloud SaaS benefits and features Identify Splunk Cloud administrator managed tasks Explain the differences between Splunk Enterprise on premise and Splunk Enterprise Cloud Module 2 – User Authentication and Authorisation Identify Splunk Cloud authentication options Add Splunk users using native authentication Integrate Splunk with LDAP, Active Directory or SAML Understanding Splunk authorization options Module 3 – Index Management and Data Retention Understand cloud indexing strategy Create indexes in cloud Manage data retention and archiving Monitor indexing activities Module 4 – Cloud Ingestion – Using forwarders Review cloud ingestion strategies Understand the role of forwarders in GDI Configure forwarding to Splunk Cloud Monitoring forwarder connectivity Explore optional forwarder settings Module 5 – Cloud Ingestion – Using API, HEC and Scripted Inputs Understand how data is ingested using API Describe how to use HEC for ingestion Know how to deploy scripted inputs Module 6 – Cloud Ingestion – Using Apps and IDM Inputs Understand how inputs are managed using in apps or add-ons Describe how customers may use Splunk Stream app Deploy Cloud inputs for use on an IDM Module 7 – Installing and Managing Apps Understand how apps and add-ons are vetted and installed in Cloud Create apps to managing and distribute configurations Module 8 – Refine and Manipulate Inputs Create and define props and transforms using the UI Understand how to create, modify and deploy configs in Cloud Masking data and removing data prior to ingestion Dirty data and performance gains Module 9 – Cloud Support and Troubleshooting Troubleshooting Splunk deployments Collecting data and use diagnostics or monitoring to investigate Explore diagnostic tools used to troubleshoot common issues Overview of how to submit request with the relevant data for support to troubleshoot Splunk Course Schedules and Timezones Ingeniq Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses usually starts at AEDT 12:00pm or AEST 11:00 am and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) Transitioning to Splunk Cloud - Upcoming Courses We don’t have any products to show here right now.

Start your Splunk certification journey with Ingeniq. Learn from experts, build Splunk dashboards, and gain hands-on experience through guided Splunk learning. Splunk Certification Path & Training with Ingeniq How Ingeniq Guides You to Splunk Certification (Your training journey with us, step by step) Start your certification journey with confidence. This page walks you through how Ingeniq supports every phase, from selecting courses to passing the exam and beyond. Learn more about the certification paths and available training options today. Explore Splunk Training with Ingeniq Contact Us Today 1. Discovery & Goal Mapping 🔎 Your journey begins with understanding where you are, and where you want to go. Ingeniq helps you identify your starting point and design a certification path tailored to your goals. Needs assessment call / questionnaire: We start by understanding your existing experience, career goals, and Splunk ambitions (e.g. admin, security, SOAR). Path recommendation: Based on your answers, we recommend a certification route (e.g., Core → Power User → Admin → ES) that matches your skill level and objectives. 2. Course Selection & Enrolment 📅 Once your pathway is defined, we’ll help you choose the right official Splunk courses and set up your enrolment. Tailored course bundle: We recommend the specific Splunk training modules you’ll need, from foundational to advanced. Flexible scheduling: Choose from available instructor-led classes to fit your schedule. Account setup: You’ll receive guidance on creating your Splunk account to access your training sessions and materials. 3. Learn from Certified Splunk Experts 🎓 Gain valuable insights from instructors who use Splunk in real enterprise environments every day. Certified Splunk practitioners: Our trainers bring hands-on expertise and share real-world applications that go beyond theory. Interactive sessions & Q&A: Engage with instructors, ask questions, and get instant feedback during live or virtual lessons. 4. Hands-On Practice & Labs 💻 Practical experience is key to mastering Splunk. Every Ingeniq course includes real lab exercises to help you apply what you learn. Sandbox environments: Work in a safe, Splunk-configured environment to build dashboards, alerts, and reports. Guided exercises & mini-projects: Tackle real-world scenarios that reinforce classroom concepts. Instructor feedback: Receive personalised input and corrections to strengthen your skills before the exam. 5. Exam-Focused Preparation 📝 When you’re ready to certify, we’ll guide you on what to expect. Ingeniq ensures you’re aligned with Splunk’s official exam objectives and resources. Official exam blueprints: Splunk provides detailed exam blueprints and objectives to help you prepare. Practice recommendations: We’ll help you identify practice exercises to test your readiness before sitting the exam. Note: Ingeniq does not conduct live review or mock exam sessions. All certification exam materials, blueprints, and resources are provided directly by Splunk. 6. Certification Exam Support 🏆 Certification exams are administered externally by Pearson VUE on behalf of Splunk. Ingeniq does not sell or manage certification exams but can guide you on where to register. Exam registration guidance: You’ll find official Splunk tutorials and Pearson VUE registration links to schedule your test. Independent exam process: Exams are purchased and taken directly through Pearson VUE or using Splunk credits. 7. Post-Certification & Continued Growth 📈 Earning your Splunk certification is just the beginning. Ingeniq continues to support your professional development through advanced training and ongoing learning opportunities. Training completion & validation: Access your Splunk course completion certificates through your Splunk learning account. Next-level guidance: Our team can help you plan your next Splunk learning milestone, such as progressing from Admin to Architect, or branching into Security Admin or ITSI. Continued learning: Stay engaged through new Splunk course releases, upcoming classes, and updates from the Splunk learning ecosystem. Splunk Certification Tracks Splunk offers a progression of certifications, and Ingeniq aligns its training courses to help you prepare effectively, whether your goal is to master Splunk dashboards, develop apps, or manage enterprise environments. Foundational Certifications Administrator & Architect Certifications Developer Certification Security & Observability Certifications Ready to Take the Next Step? Turn your Splunk skills into globally recognised certifications with expert guidance from Ingeniq Start Your Splunk Certification Journey Splunk Training Packs Simplify your journey and save on course costs with Ingeniq Training Packs, bundled courses aligned with certification paths. Save up to 15% compared to single-course enrolments Choose pre-built packs for roles like Core User, Power User, Admin, or Architect Build a custom pack to fit your learning Splunk goals Team discounts available for group enrolments Explore Training Packs Splunk Training Credits Already have Splunk training units or credits from your organisation? Ingeniq makes redemption simple. Apply credits directly toward any Ingeniq-delivered Splunk course We’ll verify balances and manage registration before credits expire Ideal for corporate learners using pre-purchased Splunk education units Learn How to Use Splunk Credits Your Splunk Journey Starts Here Turn your curiosity into expertise with guided Splunk learning, hands-on labs, and real certification results. Begin Your Splunk Training with Ingeniq One of the best trainers I've had - keeps content relevant & explains the tasks in easily understood language. Extremely knowledgeable in all fields relating to the content. Well paced & accommodated to everyone's questions & progress. Participant, Splunk Enterprise Data Administration

Splunk Education, Training and Professional Services Provider Using Splunk Application Performance Monitoring Summary This 1-virtual day course targeted to developers and DevOps enables you to use Splunk APM to analyze traces, troubleshoot and monitor your microservices-based applications. Through in-person discussions and hands-on activities, deep dive into uses of distributed tracing, navigating the Splunk APM app to analyze traces, visualize and alert on APM metrics. All concepts and taught through discussions and hands-on activities. Description When to use Splunk APM View and Analyze End-to-end Collected Traces Find the Root Cause of a Problem Enjoyable presenter and easy to understand for an intermediate Splunk user pursuing Admin certification. Thanks from Massachusetts! Participant, Splunk Fundamentals 2 Splunk Credit Value: 50 Duration: 4.5 hours Time: 11:00 am - 2:30 pm AEST Objectives - Overview of Splunk APM Module 1 – Overview of Splunk APM Describe Splunk Observability Cloud Identify the key elements of the Splunk APM Differentiate between metrics, traces and logs. Module 2 – Navigating Splunk APM Define Splunk APM-based terminology Navigate the Splunk APM pages Module 3 – Troubleshooting Using Splunk APM Create detectors to alert on APM metrics Create custom dashboards Troubleshoot an issue after an alert triggers Prerequisites To be successful, students must have completed these Splunk Education course(s) or have equivalent working knowledge: Introduction to Splunk Infrastructure Monitoring (eLearning) Introduction to Splunk Application Performance Monitoring (eLearning) Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! Splunk Course Schedules and Timezones Ingeniq Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm (4.5 hour sessions over 1 or more days) and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses start at AEDT 12:00pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West)