Search this site

Splunk Education, Training and Professional Services Provider Users The User Learning path takes you from investigative keyword searches to creating rich reports and visualisations to becoming a Splunk search ninja! Notice : The following courses; Using Splunk, Searching and Reporting with Splunk, Creating Splunk Knowledge Objects, and Splunk Infrastructure Overview are now replaced with Splunk Fundamentals 1 and Splunk Fundamentals 2. User Track Courses Splunk Fundamentals 1 Splunk Fundamentals 2 Splunk Fundamentals 3 Creating Dashboards with Splunk Advanced Searching and Reporting Splunk for Analytics and Data Science Splunk Infrastructure Overview Advanced Dashboards and Visualisations One of the best trainers I've had - keeps content relevant & explains the tasks in easily understood language. Extremely knowledgeable in all fields relating to the content. Well paced & accommodated to everyone's questions & progress. Participant, Splunk Enterprise Data Administration

Splunk Education, Training and Professional Services Provider Training Terms and Conditions Courses can be booked by phoning Ingeniq, sending an email or via www.ingeniq.com.au and are covered by the following terms and conditions. Ingeniq® is a registered trademark and wholly owned business division of Digital Networks Australia Pty Ltd. Digital Networks Australia Pty Ltd trades as Ingeniq® using the trademark and as such all legal requirements and agreements including contracts, notices, insurances, taxes and terms of trade are matters for Bluechip Infotech. Application of Terms These booking terms and conditions alone will form part of the agreement between the parties and will apply to any booking received or attendance at any course that is facilitated by Ingeniq, regardless of the process leading to a booking or the method of payment used in respect of such services. Acceptance of any purchase order will not constitute acceptance of any terms or conditions which may be attached to, or incorporated in, a purchase order. Supply of Services Ingeniq, a Bluechip Infotech agrees to supply services (“Services”) to a purchaser, attendee, student or course recipient (“Client”, “You” or “Your”) on these standard terms and conditions (“Terms”). Information on training events, courses and services are correct at the time of publication but are subject to change without notice. Ingeniq reserves the right to change course content, schedules and information at any time. Ingeniq assumes no responsibility for any and all expenses incurred due to course cancellations. Should a course be cancelled by Ingeniq, the paid seat for the course is transferable. Purchase Orders Any changes to these Terms for the supply Services must be approved in writing by Ingeniq. Only these Terms form part of the agreement between the parties and as such exclude any other terms and conditions which may be attached to, or incorporated in, a purchase order. Acceptance of a purchase order by Ingeniq will not constitute acceptance of any such terms or conditions. Taxes and GST Prices quoted for Services are in Australian Dollars and may exclude GST. The total amount payable to Ingeniq includes taxes, duties and government charges imposed or levied in Australia in connection with the supply of the Services. The client is required to pay any GST owed in connection with the supply and Ingeniq will issue a valid tax invoice where GST is to be collected. Course Bookings and Payment Course bookings can be made with Ingeniq over the phone, via email or via the Ingeniq website. Bookings are made on a “first-come, first-served” basis. Should the course or event be fully booked applicants will be placed on a waiting list. Payment can be made by Credit Card, EFT, Cheque, Purchase Order (for Credit Clients only) or vendor training credits (with vendor approval). Course bookings are not confirmed until payment is received. Unless a credit account is agreed or vendor training credits approved payment is due at time of booking. Training included as part of a product/software order is considered paid at the time invoice for the product/software order is paid. Payment for a course registration must be received no less than three business days before course commencement. Splunk Training Credits Vendor training credits (purchased directly through Splunk) can be applied to Ingeniq training courses. Splunk Credits are non-refundable and expire 12 months after date of purchase. Booking requests for Splunk Training Credits must be submitted in writing and approval from Vendor has be given before the student can be registered. Course Attendance Courses start and finish at the times scheduled unless specified otherwise. Ingeniq reserves the right to decline admission courses for late arrivals. Course prerequisites as specified in the course outlines must be met prior to attendance. Should a student fail to attend a course, 100% of course fees are payable and non-refundable. Course Conditions Training Credits are non-refundable and expire 12 months after date of purchase. . Refunds are NOT available for bookings if a student cancels the booking within three business days before course commencement. “Private Courses” are courses arranged for an organisation where attendees are typically restricted to approved registrants of that organisation. Private courses can be conducted on-site at the organisations premises, on-site at third party premises or virtually. Private Courses require payment at time of booking. Ingeniq makes no warranty in relation to the Services other than as contained in these Terms or as prescribed by a law which cannot be excluded or as otherwise published or made known to the Client. Cancellations and Transfers Public Courses Notification of booking cancellation must be received in writing 3 or more working days prior to course commencement date. Substitutions: Substitution of attendees are permitted provided that the substitution request is received in writing 3 or more working days priors prior to course commencement. Refunds will not be issued to students who fail to attend training. Private Courses All requests to cancel or change private course dates must be made in writing to and acknowledged by Ingeniq no less than 10 business days prior to the commencement date of the course. Requests for Private Course cancellation and date change received by Ingeniq less than 10 business days prior to the start of the course will incur a fee of 50% of the total course price, Requests for Private Course cancellations and date change requests received less than 5 business days prior to the start of the course will incur a fee of 80% of the total course price. Intellectual Property Material or courseware unless agreed otherwise in writing is provided is copyright and will remain the property of Ingeniq (or the relevant vendor, where such rights are owned by a vendor) and cannot be copied, reproduced or distributed without the express permission of Ingeniq or the relevant vendor. All material provided or shown is for the sole use of the course attendee and any usage rights are only conferred on payment of all charges payable in connection with those rights. Confidentiality Ingeniq and the Client agree to keep at all times as strictly confidential any Confidential Information that is disclosed or provided by one party to the other. In this clause, “Confidential Information” means information in any form but does not include information that is required to be shared by Ingeniq with a vendor to obtain courseware, accreditation or licensing rights, or is already in the public domain at the time that it is disclosed or becomes part of the public domain, otherwise than as a result of an unauthorised disclosure by Ingeniq or the Client. Privacy All information that Ingeniq collects in connection with your purchases or bookings will be treated in accordance with the Ingeniq Privacy Policy. Ingeniq will collect, use and disclose your personal information for the purpose of enabling you to enrol in a course, and to allow Ingeniq to deliver the course and related Products and Services to you. Ingeniq uses your information to: Communicate with you about your course, events, activities, products, services and opportunities available to you; Disclose your personal information to overseas vendors. Such vendors are those relevant to the course, products or courseware you have requested from Ingeniq; Carry out and record your details in internal administrative matters; and Fulfil any vendor requirements regarding your attendance for certification, planning, administration, policy development, program evaluation and other related or lawful purposes. As a division of Digital Networks Australia Pty Ltd refer to the Trading Terms and Conditions for all other general terms and conditions

Advanced Searching and Reporting Training Legacy Course Information delivered by INGENIQ Advanced Searching and Reporting - Legacy Course Information The Advanced Searching and Reporting course focuses on more advanced search and reporting commands. Scenario-based examples and hands-on challenges enable users to create robust searches, reports, and charts. Students are coached step by step through complex searches to produce final results. Major topics include optimizing searches, additional charting commands and functions, formatting and calculating results, correlating events, and using combined searches and sub-searches. This Advanced Searching and Reporting Splunk Courses have been replaced by shorter Splunk single-subject course modules , this page have been retained to assist customers. To see which courses have replaced Advanced Searching and Reporting and book the equivalent course click here Single-subject to Multi-subject course mapping. Alternatively contact one of our Training Consultants on 1300 245 802 or email sales@ingeniq.com.au Extremely proficient at controlling the pace of training. Great explanation of answers & not just reading the content. Very knowledgeable about all content. Looking forward to completing the rest of the of the class. Highly recommended. Participant, Splunk Enterprise Data Administration Advanced Searching and Reporting - Course Topics Using Search Efficiently More Search Tuning Manipulating and Filtering Data Working with Multivalue Fields Using Advanced Transactions Working with Time Combining Searches Using Subsearches Class Format Instructor-led lecture with labs. Delivered via virtual classroom or at your site Course Prerequisites Splunk Fundamentals 1 Splunk Fundamentals 2 Splunk Fundamentals 3 Highly recommend 6 months experience with the Splunk search language Related Certifications Splunk Core Certified Advanced Power User Splunk Core Certified Consultant Advanced Searching and Reporting - Audience Anyone within a technical role who needs to utilise more complex searches or reports or are looking to become Splunk certified. Previous attendees have included Consultants, IT Administrators, Data Scientists, Security and Risk Professionals and Solution Architects. After completing Advanced Searching and Reporting course you will be able to Extend your basic search language knowledge Understand and use sub-searches Create advanced visualisations using extended search language Identify events before or after events Use advanced lookups Understand and be able to use the DB Connect App Advanced Searching and Reporting - Course Objectives Module 1 – Using Search Efficiently Review search architecture Understand how the components of a bucket (.tsidx an djournal.gz files) are used How bloom filters are used to improve search speed Describe the parts of a search string Understand the use of centralized vs. distributable commands Create better searches Module 2 – More Search Tuning Understand how segmenters are used in Splunk Use lispy to reduce the number of events read from disk Module 3 - Manipulating and Filtering Data Divide search results into different groups, based on values in a specified field, using the bin command Regroup fields of search results using untable and xyseries Create a template for performing additional processing on a set of related fields using foreach Module 4 - Working with Multivalue Fields Use multivalue eval functions to analyze and format data Use the makemv command to convert a single value into a multivalue field Use the mvexpand command to create separate events for each value in a multivalue field Module 5 - Using Advanced Transactions Find events logged before or after a particular event occurs Compare complete vs. incomplete transactions Analyze Transactions Module 6 – Working with Time Use time modifiers Search for events using custom time ranges and time windows Display and use using relative dates Use custom time ranges in multiple subsearches Module 7 – Combining Searches Use the append and appendcols commands (and know the differences) Use join and union (and when not to use them) Module 8 – Using Subsearches Use subsearches to provide filtering and other information to the main search Know when NOT to use subsearches Troubleshoot subsearches Module 9– Some Extra Tips Describe the use of regular expressions Provide some guidance on using lookups Provide miscellaneous optimization tips Splunk Course Schedules and Timezones Ingeniq Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses usually starts at AEDT 12:00pm or AEST 11:00 am and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West)

Splunk Education, Training and Professional Services Provider Thank You For Contacting Us We will get back to you as soon as possible. One of the best trainers I've had - keeps content relevant & explains the tasks in easily understood language. Extremely knowledgeable in all fields relating to the content. Well paced & accommodated to everyone's questions & progress. Participant, Splunk Enterprise Data Administration

Statistical Processing - Splunk Education Single Subject Course Training. Statistical Processing The Splunk Education single-subject course module, Statistical Processing is for power users who want to identify and use transforming commands and eval functions to calculate statistics on their data. Topics will cover data series types, primary transforming commands, mathematical and statistical eval functions, using eval as a function, and the rename and sort commands. Splunk Credit Value : 50 Duration : 3 hours Time : 9:00 am - 12:00 pm AEST Please use the currency convertor above to check for course pricing in your local currency. Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! The instructor was very responsive to questions and queries both private and Communal.. Final module collaborative lab walkthrough on screen was particularly helpful. Participant, Splunk Fundamentals 2 Statistical Processing - Course Topics What is Data Series Transforming Data Manipulating Data with eval Formatting Data Class Format Instructor-led lecture with labs. Delivered via virtual classroom or at your site Course Prerequisites To be successful, students must have completed these Splunk Education course(s) or have equivalent working knowledge: Intro to Splunk Using Fields Visualizations Working with Time Statistical Processing - Audience Search Expert learning path Statistical Processing - Course Objectives Topic 1 – What is a Data Series Introduce data series Explore the difference between single-series, multi-series, and time series data series Topic 2 – Transforming Data Use the chart, timechart, top, rare, and stats commands to transform events into data tables Explore search modes and their effect on search results Topic 3 - Manipulating Data with eval Command Understand the eval command Explore and perform calculations using mathematical and statistical eval functions Perform calculations and concatenations on field values Use the eval command as a function with the stats command Topic 4 – Formatting Data Use the rename command Use the sort command Splunk Course Schedules and Timezones Splunk Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses usually starts at AEDT 12:00pm or AEST 11:00 am and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) Statistical Processing - Upcoming Schedule We don’t have any products to show here right now.

Ingeniq delivers authorised Splunk training with role-based paths for Analysts, Admins, Architects, ES and SOAR teams. Build real, job-ready Splunk skills. Your Role-Based Splunk Learning Starts Here Train with Australia’s authorised Splunk training provider — with live instructors, hands-on labs and product-specific paths designed for real Splunk environments. Start building capability across the Splunk products your team uses today. View Course Dates Explore Courses Available ● Authorised Splunk Training Provider Since 2010 ● Thousands Trained Across Australia & New Zealand Plan Your Splunk Certification Speak with an Ingeniq expert about your certification goals — for individuals or teams. Full Name* Work Email* Company / Organisation* Course for: Notes: Send Enquiry Our team will contact you within one business day Why Choose Ingeniq for Splunk Certification Training Ingeniq delivers official Splunk training aligned to real operational roles — analysts, administrators, architects, security teams and SOAR engineers. Our certified instructors help learners build practical, job-ready Splunk skills that support Splunk certifications and day-to-day operational excellence. Why people choose Ingeniq: Authorised Splunk Training Provider Access Splunk-approved content for every product area. Certified, Industry-Experienced Instructors Learn from instructors active in real Splunk environments. Hands-On, Lab-Driven Learning Develop skills through real Splunk labs, not theory-only. Product-Specific Paths Follow structured journeys tailored to your daily tasks. Up-to-Date Training Stay current with Splunk features, tools and best practices. Your Role-Based Splunk Learning Starts Here A simple overview of how Ingeniq helps you build role-based Splunk skills with paths that support both Splunk learning and Splunk certification goals. Choose Your Product Path Select the role that matches your responsibilities. Enroll in a Course Use Splunk Credits or standard payment. Train Live With Experts Learn through instructor-led labs and demos. Apply Product-Specific Skills Apply Splunk skills directly in real work. See how your role path connects to Splunk certifications. View Certification Training Guide Role-Based Learning Paths Choose the role that matches your day-to-day responsibilities. Each learning path includes official Splunk courses grouped into structured sequences to build capability step-by-step. Splunk User / Analyst Path Ideal for users who need to run searches, build dashboards, and share insights with the business. Introduction to Dashboards View course Dynamic Dashboards View course Search Optimisation View course Splunk Administrator Path For administrators responsible for data onboarding, user management, and overall platform health. System Administration View course Data Administration View course Troubleshooting Splunk View course Cluster Administration (Optional) View course Splunk Architect Path For engineers designing and optimising distributed Splunk deployments across the organisation. System Administration (revision) View course Data Administration (revision) View course Architecting Splunk Deployment View course Security (ES) Analyst Path For SOC analysts working with notable events, investigations, and security incidents. Using Splunk Enterprise Security View course Recommended for new users Searching & Reporting, Using Fields, Creating Alerts View course Enterprise Security Admin Path For admins responsible for maintaining and tuning Splunk Enterprise Security. System & Data Administration View course | View course Using Splunk Enterprise Security View course Administering Splunk ES View course SOAR Automation Path For engineers designing and optimizing distributed Splunk deployments. Investigating Incidents with SOAR View course Administering Splunk SOAR View course Developing SOAR Playbooks View course Which Role Path Should You Start With? Use this guide to match your day-to-day responsibilities with the role-based learning path that fits best. Analyst / Business User Administrator Architect Security (ES) Analyst ES Administrator SOAR Engineer Best for Users running searches, dashboards and reports Core Focus Searching Reporting Visualisations Key Courses Power User Fast Track Best for IT & platform teams managing Splunk environments Core Focus Deployment Data onboarding System health Key Courses Power User Fast Track Admin Data Admin Troubleshooting Cluster Admin Best for Senior engineers designing distributed deployments Core Focus Architecture Scaling Clustering Key Courses Architecting Splunk Deployments (plus System & Data Admin revision) Best for SOC teams working with detections & investigations Core Focus Notable events Triage Investigations Key Courses Using Enterprise Security Best for Automation engineers building SOAR workflows Core Focus Playbooks Integrations Orchestration Key Courses Using SOAR Admin SOAR Playbook Development Best for Security & platform teams maintaining Splunk ES Core Focus ES Configuration Tuning Correlation Searches Key Courses Using ES Administering ES System & Data Admin (revision) Talk to a Training Advisor Which Certification Path Is Right for You? Choose a path based on your role and how you use Splunk. If you're unsure, Ingeniq experts can help you map the right certification journey. Official Splunk Curriculum Every role path follows Splunk’s authorised training sequences. Hands-On Labs Practice in real lab environments — not simulations. Team-Ready Delivery Run private training sessions aligned to your team’s roles. Splunk Education Credits Accepted Practice in real lab environments — not simulations. What Our Participants Say “Clear guidance and hands-on labs made it easy to build the core skills needed for my role as an analyst.” Participant, Splunk User / Analyst Path — Australia Frequently Asked Questions (FAQs) Do we need to complete the core platform path first? Recommended for most teams new to Splunk, but not required. We can tailor the path based on your experience. Can we mix products in private training? Yes. Many teams combine core admin with ES, ITSI or SOAR. Are these the same as certification paths? They align with Splunk’s official training but are organised by product, not exam. Can we use Splunk Training Credit? Yes. Splunk Credits and training packs can be applied to product-based paths. Start Your Product-Based Splunk Training Talk to us about the Splunk products your team uses today. Choose your product path, enrol in your courses and build the skills you need to operate Splunk confidently across your environment. View Course Dates Contact Us

Ingeniq delivers official Splunk training with hands-on, product-based paths across Enterprise, ES, ITSI, SOAR and Observability to build real Splunk skills. Your Product-Based Splunk Learning Starts Here Train with Australia’s authorised Splunk training provider — with live instructors, hands-on labs and product-specific paths designed for real Splunk environments. Start building capability across the Splunk products your team uses today. View Course Dates Explore Courses Available ● Authorised Splunk Training Provider Since 2010 ● Thousands Trained Across Australia & New Zealand Plan Your Splunk Certification Speak with an Ingeniq expert about your certification goals — for individuals or teams. Full Name* Work Email* Company / Organisation* Course for: Notes: Send Enquiry Our team will contact you within one business day Why Choose Ingeniq for Splunk Certification Training Ingeniq delivers official Splunk product training across Enterprise, Cloud, ES, ITSI, SOAR and Observability. Our certified instructors help teams build practical, product-specific skills that align with how Splunk is used in real operational environments. Why people choose Ingeniq: Authorised Splunk Training Provider Access authorised content aligned with Splunk’s latest product updates. Certified, Industry-Experienced Instructors Learn from practitioners who use Splunk across real deployments. Hands-On, Lab-Driven Learning Develop real capability with labs built around each Splunk product. Product-Specific Paths Follow structured sequences mapped to Splunk Enterprise, ES, ITSI, SOAR and Observability. Up-to-Date Training Stay current with Splunk’s newest features, tools and best practices. Your Product-Based Learning Journey A simple overview of how Ingeniq helps teams build capability across the Splunk products they use. Choose Your Product Path Select the Splunk product your team uses. Enroll in a Course Use Splunk Credits or standard payment. Train Live With Experts Learn through instructor-led labs and demos. Apply Product-Specific Skills Build confidence using Splunk in real work. See how your role path connects to Splunk certifications. View Certification Training Guide Product-Based Learning Paths Choose the Splunk product that matches your environment. Each path combines official Splunk courses into a clear sequence designed to build capability step-by-step. Splunk Enterprise & Splunk Cloud For teams responsible for searching, dashboards, data onboarding and day-to-day Splunk operations. Recommended Course Sequence: Power User Fast Start View course System Administration View course Data Administration View course Architecting Splunk Deployments View course Splunk Enterprise Security For SOC teams, security analysts and cyber operations using Splunk ES as their SIEM. Recommended Course Sequence: Using ES View course Administering ES View course ‎ Splunk IT Service Intelligence – ITSI For service owners, IT operations teams and SREs focused on service health and event analytics. Recommended Course Sequence: Using ITSI View course Implementing ITSI View course ‎ Splunk Observability Cloud For cloud-native, microservices and reliability teams needing APM and real-time infrastructure visibility. Recommended Course Sequence: Fundamentals of Metrics Monitoring in Splunk Observability Cloud View course Investigating Incidents in Splunk Observability Cloud View course Using SignalFlow in Splunk Observability Cloud View course Splunk SOAR For security teams building automated workflows, playbooks and response processes. Recommended Course Sequence: Using SOAR View course Administering SOAR View course Playbook Development View course Advanced SOAR View course Which Product Path Should You Start With? Use this guide to match your responsibilities with the right learning path. Splunk Enterprise / Cloud Splunk Enterprise Security (ES) Splunk ITSI Splunk Observability Splunk SOAR Best for Admins, power users, operations teams Core Focus Data Onboarding Index design Dashboards Key Courses Power User Fast Start System Admin Data Admin Architecting Deployments Best for SOC & security teams Core Focus Detection Correlation Investigations Key Courses Using ES Administering ES Best for IT Ops & service owners Core Focus KPIs Service Health Event analytics Key Courses Using ITSI Implementing ITSI Best for SRE, DevOps, cloud teams Core Focus APM & infra monitoring Key Courses Fundamentals of Metrics Monitoring in Splunk Observability Cloud Investigating Incidents in Splunk Observability Cloud Using SignalFlow in Splunk Observability Cloud Best for Security automation teams Core Focus Playbooks & workflows Key Courses Using SOAR Admin SOAR Playbook Development Talk to a Training Advisor Official Training, Product-Specific Skills Official Splunk Curriculum Follow authorised content for every Splunk product. Hands-On Product Labs Practice in real Splunk environments, not demos. Team-Ready Delivery Run workshops tailored to your Splunk product needs. Splunk Education Credits Accepted Use Splunk Credits or training packs for any path. What Our Participants Say “Clear guidance and hands-on labs made learning Splunk Enterprise much easier for our team.” Participant, Splunk Enterprise Training — Australia Frequently Asked Questions (FAQs) Do we need to complete the core platform path first? Recommended for most teams new to Splunk, but not required. We can tailor the path based on your experience. Can we mix products in private training? Yes. Many teams combine core admin with ES, ITSI or SOAR. Are these the same as certification paths? They align with Splunk’s official training but are organised by product, not exam. Can we use Splunk Training Credit? Yes. Splunk Credits and training packs can be applied to product-based paths. Start Your Product-Based Splunk Training Talk to us about the Splunk products your team uses today. Choose your product path, enrol in your courses and build the skills you need to operate Splunk confidently across your environment. View Course Dates Contact Us

Splunk Education, Training and Professional Services Provider Other Courses Ingeniq is the Splunk Training Provider and Authorised Learning Partner for Australia and New Zealand and is certified to deliver the complete range of Splunk courses and modules and offers both Instructor led public and dedicated virtual and face-to-face courses. Splunk Education Instructor led multi-subject course training takes 4.5 to 18 hours or less to complete and contributes towards Splunk certifications. Have a question? Our Education Consultants can help - call us or email at sales@ingeniq.com.au and we'll be in touch. Call us on 1300 245 802 Advanced SOAR Implementation This 13.5 hour course is intended for experienced SOAR consultants who will be responsible for complex SOAR solution development, and will prepare the attendee to integrate SOAR with Splunk as well as develop playbooks requiring custom coding and REST API usage. Read More Visualizing and Alerting in Splunk Infrastructure Monitoring This course assumes that you have completed the course Splunk Infrastructure Monitoring Fundamentals. It is targeted towards DevOps/SRE/Observability teams, Senior On-call Engineers, Onboarding and Monitoring Strategists and Developers Read More Fundamentals of Metrics Monitoring in Splunk Observability his course serves as the foundation for all other Splunk Observability courses. It is targeted towards DevOps/SRE/Observability teams, Senior On-call Engineers, Onboarding and Monitoring Strategists and Developers. Read More Kubernetes Monitoring with Splunk Observability Cloud This virtual course targeted to SREs and DevOps enables you to monitor and troubleshoot your Kubernetes clusters with Splunk Observability Cloud. Read More Advanced Dashboards and Visualizations with Splunk 8.1 This one-day course is designed for advanced users who want to create SplunkJS dashboards and Splunk Custom Visualizations. It focuses on creating dashboards, adding inputs, using event handlers and creating Splunk Custom Visualizations using JavaScript and XML. Read More Developing with Splunk's REST API 8.2 This nine hour course teaches you how to use the Splunk REST API to accomplish tasks interacting with Splunk servers. In this course, you will use curl and Python to send requests to Splunk REST endpoints and will learn how to parse and use the results. Read More Configuring Tracing and Profiling for Splunk APM This single subject course targeted to DevOps enables you to learn configuration techniques to send traces to Splunk APM. Through in-person discussions and hands-on activities, learn to deploy the Splunk OpenTelemetry Collector on a Linux host. Read More Building Apps with Splunk 8.2 This two-day course focuses on Splunk Enterprise app development. It's designed for advanced users, administrators, and developers who want to create apps for Splunk Enterprise and Splunk Cloud. Read More Manual Instrumentation with Splunk APM This single subject course targeted to developers enables you to manually instrument your applications to send traces to Splunk APM. Through in-person discussions and hands-on activities, learn to manually instrument applications to create spans and add metadata to spans. Read More Using Splunk Application Performance Monitoring This 1-virtual day course targeted to developers and DevOps enables you to use Splunk APM to analyze traces, troubleshoot and monitor your microservices-based applications. Read More One of the best trainers I've had - keeps content relevant & explains the tasks in easily understood language. Extremely knowledgeable in all fields relating to the content. Well paced & accommodated to everyone's questions & progress. Participant, Splunk Enterprise Data Administration

Splunk Enterprise Lab Splunk Enterprise Lab This Splunk Enterprise 24-hour practical lab exercise is designed to take you through the tasks of a complete mock development. Each participant is given access to a specified number of Linux servers and a set of requirements. Participants then perform a mock deployment according to requirements which adhere to Splunk Deployment Methodology and best-practices. Splunk Credit Value : 100 Duration : First 4 hours instructor led, 24 hours allowed for completion Time : 11:00 am - 3:00 pm AEST *Course discounts apply for Splunk Partners. Please use the currency convertor above to check for course pricing in your local currency. Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! Extremely proficient at controlling the pace of training. Great explanation of answers & not just reading the content. Very knowledgeable about all content. Looking forward to completing the rest of the of the class. Highly recommended. Participant, Splunk Enterprise Data Administration Class Format Instructor-led lecture with labs. Delivered via virtual classroom. Audience Enterprise architects seeking to sit the Certified Architect exam. Related Certifications Splunk Enterprise Certified Architect Prerequisite Knowledge To be successful, students should have a solid understanding of the following: Splunk Fundamentals 1 Splunk Fundamentals 2 Or the following single-subject courses : What is Splunk? Intro to Splunk Using Fields Scheduling Reports and Alerts Visualisations Introduction to Knowledge Objects Creating Field Extractions Introduction to Dashboards Students should also understand the following courses: Splunk Enterprise System Administration Splunk Enterprise Data Administration Architecting Splunk Enterprise Deployments Troubleshooting Splunk Enterprise Splunk Enterprise Cluster Administration After completing the Splunk Enterprise Lab you will be able to; You will have a thorough understanding of Splunk Deployment Methodology and best-practices for planning, data collection, and sizing for a distributed deployment. Be able to manage and troubleshoot a standard distributed deployment with indexer and search head clustering. Splunk Enterprise Lab - Course Objectives Installation and Infrastructure Install forwarders, indexer, search head, deployment server and license master Configuration and Collection Configure an index cluster Deploy all specified configurations via deployment server Configure inputs from forwarders Configure and confirm index-time knowledge Create search time fields Searching and Reporting Create searches for each required use case Get indexer event acknowledgements Splunk Enterprise Practical Lab - Upcoming Sessions We don’t have any products to show here right now.

Splunk Education, Training and Professional Services Provider Learning Tracks Certification Tracks provide comprehensive education for Splunk customer and partner personnel according to their areas of responsibility. Classes are designed for specific roles such as User, Splunk Administrator, Application Developer or Architect. Power Users The Ingeniq learning path for power users will not only help you to search, create alerts, rich reports and visualisations but also be able to create and manage knowledge objects used across your organisation. Explore Track App Developers Harness the power of Splunk’s Web Framework. Create rich, interactive dashboards and forms and package Splunk knowledge objects for distribution across your organisation. Explore Track Enterprise Security End Users This path prepares security practitioners to use splunk Enterprise Security (ES). Attendees will use ES to identify and track security incidents, analyse security risks, use predictive analytics and threat discovery. Explore Track Architects Learn concepts and best practices for sizing, scaling, and deploying Splunk across your organisation. These classes prepare you to design and implement a Splunk distributed deployment. Explore Track Splunk Enterprise Administrators Whether you’re responsible for a single Splunk instance or a massive distributed deployment, our Administrator curriculum teaches you the concepts, tasks, and best practices to keep your Splunk easy. Explore Track Enterprise Security Administrators Learn to install, configure, manage, and use the Splunk App for Enterprise Security. This path is intended for Splunk Administrators that manage Splunk Enterprise Security deployments. Explore Track One of the best trainers I've had - keeps content relevant & explains the tasks in easily understood language. Extremely knowledgeable in all fields relating to the content. Well paced & accommodated to everyone's questions & progress. Participant, Splunk Enterprise Data Administration

Unlock the power of data with our exclusive Splunk Credits! Drive insights and efficiency. Claim your Splunk Credit today and elevate your operations! Splunk Credits Training Units, often referred to as "education credits" or "training credits," serve as a specialized currency for Splunk Education that can be utilized for any paid Splunk training sessions. Ingeniq is an authorised learning partner, allowing us to accept payment through these training credits. We ensure that your organisation maximises the benefits of these purchased Splunk training credits, whether they are included in a Splunk Success Plan or obtained independently. Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! Training Unit Policies Training units will expire at 12:01 AM Eastern Time on the specified expiration date listed in STEP. To use training units for registrations, they must be submitted before 12:01 AM U.S. Eastern Time. Instructor-led and dedicated classes paid for with training units must begin before the units' expiration date. For self-paced eLearning, registration must occur before the training units expire. Once registered, the eLearning course will be accessible for up to 12 months. Instructor-Led Training Registration Steps You must register for each individual course you are interested in. Please be sure to review the prerequisite knowledge required for each course. You can register directly on the Ingeniq website or log in to STEP to explore available training courses. You’ll need to log in to Splunk Education using your splunk.com account credentials. If you don’t already have an account, you can create one on the login page. To find courses, use the search bar at the top right or apply filters on the left. Click on the course title you’re interested in to view the schedule. If you want to attend a course offered by Ingeniq, avoid clicking the “Buy Now” button next to the session. Instead, click on the pink-highlighted text labeled Click HERE to Enrol, which will redirect you to the Ingeniq website for that specific course. Scroll down to choose your preferred date, and click “Add to cart” when ready. If you want to use Splunk credits, select the “add a note” option and mention that you wish to pay with Splunk Education credits. Include the Splunk Sales Agreement number as well. Proceed to the checkout page, select “Manual Payment ,” and complete the attendee details to finalise the registration process. Once your order is processed, you’ll receive a confirmation email from the Ingeniq education team. You will also get a confirmation email from STEP. Read more for further information: How Can You Effectively Maximise Your Splunk Training Credits? One of the best trainers I've had - keeps content relevant & explains the tasks in easily understood language. Extremely knowledgeable in all fields relating to the content. Well paced & accommodated to everyone's questions & progress. Participant, Splunk Enterprise Data Administration

Troubleshooting Splunk Enterprise Training delivered by INGENIQ Troubleshooting Splunk Enterprise The Troubleshooting Splunk Enterprise course is designed for Splunk administrators. It covers topics and techniques for troubleshooting a standard Splunk distributed deployment using the tools available on Splunk Enterprise. Troubleshooting Splunk Enterprise course is a lab-oriented class designed to help you gain troubleshooting experience before attending more advanced courses. You will debug a distributed Splunk Enterprise environment using the live system and simulated case logs. This course does not cover the issues surrounding Splunk Cloud, Splunk Clusters, or Splunk premium apps. Splunk Credit Value : 100 Duration : 9 hours over 2 days Time : 9:00 am - 1:30 pm AEST *Course discounts apply for Splunk Partners. Please use the currency convertor above to check for course pricing in your local currency. Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! This course was very interactive . Logging into Splunk and showing how to do it, giving examples and showing the ins and outs of ES actually makes a huge difference. Well done to the instructor. Participant, Using Splunk Enterprise Security Troubleshooting Splunk Enterprise - Course Topics Splunk Support Model Splunk Troubleshooting Methods and Tools Clarifying the Problem Installation, Licensing, and Crash Problems UI and Search Problems Configuration Problems Deployment Problems User Management Problems Course Prerequisites To be successful, students must have completed these Splunk Education course(s) or have equivalent working knowledge: Intro to Splunk Using Fields Introduction to Knowledge Objects Creating Knowledge Objects Creating Field Extractions Splunk Enterprise System Administration Splunk Enterprise Data Administration Troubleshooting Splunk Enterprise Additional courses and/or knowledge in these areas are also highly recommended: Enriching Data with Lookups Data Models Splunk Enterprise Cluster Administration Troubleshooting Splunk Enterprise - Audience Anyone within a technical role who is involved in the Administration of Splunk within their organisation or are looking to become Architect II certified. Previous Attendees have included IT Administrators, DevOps, Security Analysts and Solution Architects Class Format Instructor-led lecture with labs. Delivered via virtual classroom or at your site Related Certifications Splunk Enterprise Certified Architect After completing Troubleshooting Splunk Enterprise course you will be able to Understand the Splunk Support Model and its resources Identify the best practices for troubleshooting Splunk Enterprise List ways to gather useful Splunk diagnostic information Use Splunk diagnostic tools Identify common Splunk technical issues and solutions Splunk Course Schedules and Timezones Module 1 – Splunk Support Model Splunk support resources Module 2 – Splunk Troubleshooting Methods and Tools Splunk troubleshooting methodology Splunk diagnostic tools Module 3 – Clarifying the problem Splunk Topology Index-time pipeline Search-time pipeline Module 4 – Installation, Licensing and Crash problems Installation issues License issues Crash issues Module 5 – Configuration problems Input issues Configuration Precedence Module 6 – UI and Search problems Search issues Dashboard issues Module 7 – Deployment problems Forwarding issues Distributed search issues Deployment server issues Module 8 – User Management problems Splunk users and role capabilities Directory integration issues Splunk Course Schedules and Timezones Ingeniq Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses usually starts at AEDT 12:00pm or AEST 11:00 am and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) Troubleshooting Splunk Enterprise - Upcoming Courses Troubleshooting Splunk Enterprise : Starts August 3 and 4, 2026 Price USD 1,000.00