Search this site

Ingeniq delivers official Splunk training and guided certification paths to help learners build skills and prepare for Splunk certifications effectively. Your Path to Splunk Certification Starts Here. Train with Australia’s authorised Splunk training provider — live instructors, hands-on labs, and certification-aligned learning. Start your Splunk journey with Ingeniq today. View Course Dates Explore Learning Paths ● Authorised Splunk Training Provider Since 2010 ● Thousands Trained Across Australia & New Zealand Plan Your Splunk Certification Speak with an Ingeniq expert about your certification goals — for individuals or teams. Full Name* Work Email* Company / Organisation* Course for: Notes: Send Enquiry Our team will contact you within one business day Why Choose Ingeniq for Splunk Certification Training Ingeniq is an authorised Splunk training provider delivering official, up-to-date courses trusted across ANZ. Our certified instructors help learners build practical skills, gain real-world confidence, and prepare effectively for Splunk certification. Why people choose Ingeniq: Authorised Splunk Training Provider Access official course content aligned with Splunk’s latest standards. Certified, Industry-Experienced Instructors Learn directly from practitioners who use Splunk in real environments. Hands-On, Lab-Driven Learning Build real capability with exercises that mirror production scenarios. Certification-Aligned Paths Follow structured journeys designed to get you exam-ready, faster. Up-to-Date Training Stay current with Splunk’s newest features, tools and best practices. Your Splunk Training Journey A simple overview of how Ingeniq prepares you for Splunk certification. Choose Your Product Path Pick courses or tailor with an Ingeniq expert. Enroll in a Course Use Splunk Credits or standard payment. Train Live With Experts Learn in instructor-led classes with labs. Get Exam-Ready Gain the skills needed for certification. Want a deeper look at the Splunk certification process? View Certification Training Guide How Splunk Certification Works Splunk certification validates your ability to work confidently in real Splunk environments. It proves your skills across search, administration, architecture, security or development — helping you grow your career and support your organisation. Ingeniq provides the official training that prepares you for the exam. All Splunk certification exams are delivered separately through Pearson VUE. What you can expect Official Splunk-aligned training Guidance from certified instructors Hands-on labs for real practice Certification exams via Pearson VUE Download the Splunk Certification Candidate Handbook for a full overview. Your Splunk Certification Options Core Certifications Admin & Architect Certifications Developer Certifications Security & ITSI Certifications Observability & Cybersecurity Certifications Splunk Core Certified User Build foundational skills in searching, fields, dashboards, alerts and reports. Ideal for beginners or anyone new to Splunk. View Learning Path Splunk Core Certified Power User Develop strong skills in search, reporting, knowledge objects, data models and CIM. Gain confidence working across Splunk Enterprise and Splunk Cloud. View Learning Path Splunk Core Certified Advanced Power User Master advanced search commands, complex dashboards, knowledge objects and data modelling for real-world use cases. View Learning Path Splunk Enterprise Certified Administrator Learn to configure and manage indexes, inputs, users, licensing, monitoring and system health across Splunk Enterprise environments. View Learning Path Splunk Enterprise Certified Architect Gain deep expertise in designing, deploying and troubleshooting distributed Splunk environments, including clustering and large-scale architectures. View Learning Path Splunk Cloud Certified Administrator Administer Splunk Cloud environments including data inputs, forwarder configuration, user management and basic troubleshooting. View Learning Path Splunk ITSI Certified Administrator Deploy and configure ITSI including service modelling, glass tables, notable events and deep dives to monitor critical services. View Learning Path Splunk Core Certified Consultant Expert-level certification covering large-scale deployments, multi-tier architectures, clustering and Splunk Deployment Methodology. View Learning Path Splunk Enterprise Security Certified Administrator Configure, manage and optimise Splunk Enterprise Security including correlation searches, threat intelligence, risk scoring and event processing. View Learning Path Splunk Core Certified Consultant Expert-level certification covering large-scale deployments, multi-tier architectures, clustering and Splunk Deployment Methodology. View Learning Path Splunk O11y Cloud Certified Metrics User Build foundational skills in monitoring and troubleshooting using Splunk Observability Cloud. Learn to collect metrics, configure the OpenTelemetry Collector, create visualizations, and set up alerts for real-time insights. Ideal for DevOps, SRE, and observability practitioners. TBA Splunk Certified Cybersecurity Defense Analyst Develop the skills to detect, analyze, and respond to cyber threats using Splunk Enterprise Security. Covers threat detection, investigation techniques, and security operations workflows. Ideal for SOC analysts and cybersecurity professionals. TBA Splunk Certified Cybersecurity Defense Engineer Advance your expertise in building and optimizing security operations in Splunk. Focus on detection engineering, automation (SOAR), and system optimization for scalable SOC environments. Ideal for security engineers and advanced SOC roles. TBA Which Certification Path Is Right for You? Choose a path based on your role and how you use Splunk. If you're unsure, Ingeniq experts can help you map the right certification journey. Core Track For beginners, analysts and anyone building foundational search, reporting and dashboard skills. Admin Track For IT teams, system administrators and platform owners managing Splunk environments. Security (ES) Track For SOC analysts, incident responders and security operations teams. SOAR Track For automation engineers and security orchestration teams building playbooks and workflows. ITSI Track For service owners and teams monitoring critical services using IT Service Intelligence. Security (ES) Track Coming soon — observability, O11y Cloud and APM-focused learning paths. Talk to a Training Advisor What Our Participants Say “The instructor was very knowledgeable and shared practical examples throughout the course." Participant, Splunk Enterprise System Administration — Australia Frequently Asked Questions (FAQs) Do you provide the certification exam? No. Splunk certification exams are delivered by Splunk through Pearson VUE. Ingeniq provides the official training that prepares you for those exams. Do your courses prepare me for Splunk certification? Yes. Our courses follow the official Splunk curriculum and align with the knowledge areas tested in Splunk certification exams. Can I take the exam without training? Yes, Splunk does not require training. However, most learners find that official courses significantly improve their exam readiness and confidence. Do you offer practice labs? Yes. All Ingeniq courses include hands-on lab environments so you can practice using Splunk in real-world scenarios. Start Your Splunk Certification Journey Talk to us about your Splunk certification goals, for individuals or teams. Choose your path, enrol in your courses, and build the skills you need to pass your Splunk certification with confidence View Course Dates Contact Us

Using Fields - Splunk Education Single Subject Course Training. Using Fields The Splunk Education single-subject course module, Using Fields is a three-hour course and for power users who want to learn about fields and how to use fields in searches. Topics will focus on explaining the role of fields in searches, field discovery, using fields in searches, and the difference between persistent and temporary fields. The last topic will introduce how fields from other data sources can be used to enrich search results. Splunk Credit Value : 50 Duration : 3 hours Time : 9:00 am - 12:00 pm AEST Please use the currency convertor above to check for course pricing in your local currency. The instructor was very responsive to questions and queries both private and Communal.. Final module collaborative lab walkthrough on screen was particularly helpful. Participant, Splunk Fundamentals 2 Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! Using Fields - Course Topics What are Fields What is Field Discovery Using Fields in Searches Comparing Temporary versus Persistent Fields Enriching Data Class Format Instructor-led lecture with labs. Delivered via virtual classroom or at your site Course Prerequisites To be successful, students must have completed these Splunk Education course(s) or have equivalent working knowledge: How Splunk works Creating search queries Knowledge objects Using Fields - Audience Search Experts and Knowledge Managers Using Fields - Course Objectives Topic 1 – What are Fields? Understand fields and field auto-extraction Explore the Fields sidebar Add fields to the Selected Fields list Explore and generate reports from the Fields window Topic 2 – What is Field Discovery? Understand Field Discovery Explore search modes and their effect on search results Topic 3 - Using Fields in Searches Use fields correctly in basic searches Use fields with operators Use the rename command Use the fields command to improve search performance Topic 4 - Comparing Temporary versus Persistent Fields Differentiate between temporary and persistent fields Create temporary fields with the eval command Extract temporary fields with the erex and rex commands Topic 5 - Enriching Data Understand how fields from lookups, calculated fields, field aliases, and field extractions enrich data Splunk Course Schedules and Timezones Splunk Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses usually starts at AEDT 12:00pm or AEST 11:00 am and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) Using Fields - Upcoming Schedule We don’t have any products to show here right now.

Administering SOAR Training delivered by INGENIQ Administering Splunk SOAR The Administering SOAR (previously called Phantom) course prepares IT and security practitioners to install, configure and use a SOAR (Phantom) server in their environment and will prepare developers to attend the playbook development course. This 3.5 hour course prepares IT professionals to configure and manage SOAR Splunk Credit Value : 50 Duration : 3.5 hours over 1 day Time : 11:00 am - 2:30 pm AEST *Course discounts apply for Splunk Partners. Please use the currency convertor above to check for course pricing in your local currency. Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! The instructor very knowledgeable and was able to provide useful examples during the course.. Participant, Splunk Enterprise System Administration Administering SOAR - Course Topics SOAR concepts Initial configuration Apps and assets Configuring automation User management Ingesting data Customization and monitoring Class Format Instructor-led lecture with labs. Delivered via virtual classroom or at your site Course Prerequisites To be successful, students must have a working understanding of these courses: Investigating Incidents with Splunk SOAR Related Certifications None Administering SOAR - Audience Anyone whose role includes deploying, or maintaining and configuring Splunk SOAR (Phantom). SOC Engineer, Security Architects, Threat Hunters & Responders. After completing Administering SOAR course you will be able to Install and configure SOAR (Phantom) Configure apps, assets, access control and manage playbooks Identify and onboard data into SOAR (Phantom) Work with containers, labels, artifacts, and tags Manage investigations with actions and playbooks Use workbooks and case management Module 1 – Initial Configuration Describe SOAR operating concepts Identify documentation and community resources SOAR & Splunk Architecture Product settings Access control Authentication settings Response settings Understanding roles Creating users Managing user access Module 2 – Apps, Assets and Playbooks Add and configure apps and assets Manage playbooks Ingesting Data Labels and tags Event settings Module 3 – Customisation and Monitoring Create custom severity levels Create custom status levels Add custom fields and CEF settings Create custom workbooks Run reports Use SOAR audit tools Monitor system health Administering SOAR - Course Objectives Splunk Course Schedules and Timezones Ingeniq Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses usually starts at AEDT 12:00pm or AEST 11:00 am and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) Administering SOAR (Phantom) - Upcoming Courses Administering Splunk SOAR : Starts August 13, 2026, 9:00am AET Price USD 500.00 Administering Splunk SOAR : Starts July 16, 2026, 9:00am AET Course Closed

Statistical Processing - Splunk Education Single Subject Course Training. Statistical Processing The Splunk Education single-subject course module, Statistical Processing is for power users who want to identify and use transforming commands and eval functions to calculate statistics on their data. Topics will cover data series types, primary transforming commands, mathematical and statistical eval functions, using eval as a function, and the rename and sort commands. Splunk Credit Value : 50 Duration : 3 hours Time : 9:00 am - 12:00 pm AEST Please use the currency convertor above to check for course pricing in your local currency. Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! The instructor was very responsive to questions and queries both private and Communal.. Final module collaborative lab walkthrough on screen was particularly helpful. Participant, Splunk Fundamentals 2 Statistical Processing - Course Topics What is Data Series Transforming Data Manipulating Data with eval Formatting Data Class Format Instructor-led lecture with labs. Delivered via virtual classroom or at your site Course Prerequisites To be successful, students must have completed these Splunk Education course(s) or have equivalent working knowledge: Intro to Splunk Using Fields Visualizations Working with Time Statistical Processing - Audience Search Expert learning path Statistical Processing - Course Objectives Topic 1 – What is a Data Series Introduce data series Explore the difference between single-series, multi-series, and time series data series Topic 2 – Transforming Data Use the chart, timechart, top, rare, and stats commands to transform events into data tables Explore search modes and their effect on search results Topic 3 - Manipulating Data with eval Command Understand the eval command Explore and perform calculations using mathematical and statistical eval functions Perform calculations and concatenations on field values Use the eval command as a function with the stats command Topic 4 – Formatting Data Use the rename command Use the sort command Splunk Course Schedules and Timezones Splunk Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses usually starts at AEDT 12:00pm or AEST 11:00 am and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) Statistical Processing - Upcoming Schedule We don’t have any products to show here right now.

Ingeniq delivers authorised Splunk training with role-based paths for Analysts, Admins, Architects, ES and SOAR teams. Build real, job-ready Splunk skills. Your Role-Based Splunk Learning Starts Here Train with Australia’s authorised Splunk training provider — with live instructors, hands-on labs and product-specific paths designed for real Splunk environments. Start building capability across the Splunk products your team uses today. View Course Dates Explore Courses Available ● Authorised Splunk Training Provider Since 2010 ● Thousands Trained Across Australia & New Zealand Plan Your Splunk Certification Speak with an Ingeniq expert about your certification goals — for individuals or teams. Full Name* Work Email* Company / Organisation* Course for: Notes: Send Enquiry Our team will contact you within one business day Why Choose Ingeniq for Splunk Certification Training Ingeniq delivers official Splunk training aligned to real operational roles — analysts, administrators, architects, security teams and SOAR engineers. Our certified instructors help learners build practical, job-ready Splunk skills that support Splunk certifications and day-to-day operational excellence. Why people choose Ingeniq: Authorised Splunk Training Provider Access Splunk-approved content for every product area. Certified, Industry-Experienced Instructors Learn from instructors active in real Splunk environments. Hands-On, Lab-Driven Learning Develop skills through real Splunk labs, not theory-only. Product-Specific Paths Follow structured journeys tailored to your daily tasks. Up-to-Date Training Stay current with Splunk features, tools and best practices. Your Role-Based Splunk Learning Starts Here A simple overview of how Ingeniq helps you build role-based Splunk skills with paths that support both Splunk learning and Splunk certification goals. Choose Your Product Path Select the role that matches your responsibilities. Enroll in a Course Use Splunk Credits or standard payment. Train Live With Experts Learn through instructor-led labs and demos. Apply Product-Specific Skills Apply Splunk skills directly in real work. See how your role path connects to Splunk certifications. View Certification Training Guide Role-Based Learning Paths Choose the role that matches your day-to-day responsibilities. Each learning path includes official Splunk courses grouped into structured sequences to build capability step-by-step. Splunk User / Analyst Path Ideal for users who need to run searches, build dashboards, and share insights with the business. Introduction to Dashboards View course Dynamic Dashboards View course Search Optimisation View course Splunk Administrator Path For administrators responsible for data onboarding, user management, and overall platform health. System Administration View course Data Administration View course Troubleshooting Splunk View course Cluster Administration (Optional) View course Splunk Architect Path For engineers designing and optimising distributed Splunk deployments across the organisation. System Administration (revision) View course Data Administration (revision) View course Architecting Splunk Deployment View course Security (ES) Analyst Path For SOC analysts working with notable events, investigations, and security incidents. Using Splunk Enterprise Security View course Recommended for new users Searching & Reporting, Using Fields, Creating Alerts View course Enterprise Security Admin Path For admins responsible for maintaining and tuning Splunk Enterprise Security. System & Data Administration View course | View course Using Splunk Enterprise Security View course Administering Splunk ES View course SOAR Automation Path For engineers designing and optimizing distributed Splunk deployments. Investigating Incidents with SOAR View course Administering Splunk SOAR View course Developing SOAR Playbooks View course Which Role Path Should You Start With? Use this guide to match your day-to-day responsibilities with the role-based learning path that fits best. Analyst / Business User Administrator Architect Security (ES) Analyst ES Administrator SOAR Engineer Best for Users running searches, dashboards and reports Core Focus Searching Reporting Visualisations Key Courses Power User Fast Track Best for IT & platform teams managing Splunk environments Core Focus Deployment Data onboarding System health Key Courses Power User Fast Track Admin Data Admin Troubleshooting Cluster Admin Best for Senior engineers designing distributed deployments Core Focus Architecture Scaling Clustering Key Courses Architecting Splunk Deployments (plus System & Data Admin revision) Best for SOC teams working with detections & investigations Core Focus Notable events Triage Investigations Key Courses Using Enterprise Security Best for Automation engineers building SOAR workflows Core Focus Playbooks Integrations Orchestration Key Courses Using SOAR Admin SOAR Playbook Development Best for Security & platform teams maintaining Splunk ES Core Focus ES Configuration Tuning Correlation Searches Key Courses Using ES Administering ES System & Data Admin (revision) Talk to a Training Advisor Which Certification Path Is Right for You? Choose a path based on your role and how you use Splunk. If you're unsure, Ingeniq experts can help you map the right certification journey. Official Splunk Curriculum Every role path follows Splunk’s authorised training sequences. Hands-On Labs Practice in real lab environments — not simulations. Team-Ready Delivery Run private training sessions aligned to your team’s roles. Splunk Education Credits Accepted Practice in real lab environments — not simulations. What Our Participants Say “Clear guidance and hands-on labs made it easy to build the core skills needed for my role as an analyst.” Participant, Splunk User / Analyst Path — Australia Frequently Asked Questions (FAQs) Do we need to complete the core platform path first? Recommended for most teams new to Splunk, but not required. We can tailor the path based on your experience. Can we mix products in private training? Yes. Many teams combine core admin with ES, ITSI or SOAR. Are these the same as certification paths? They align with Splunk’s official training but are organised by product, not exam. Can we use Splunk Training Credit? Yes. Splunk Credits and training packs can be applied to product-based paths. Start Your Product-Based Splunk Training Talk to us about the Splunk products your team uses today. Choose your product path, enrol in your courses and build the skills you need to operate Splunk confidently across your environment. View Course Dates Contact Us

Ingeniq delivers official Splunk training with hands-on, product-based paths across Enterprise, ES, ITSI, SOAR and Observability to build real Splunk skills. Your Product-Based Splunk Learning Starts Here Train with Australia’s authorised Splunk training provider — with live instructors, hands-on labs and product-specific paths designed for real Splunk environments. Start building capability across the Splunk products your team uses today. View Course Dates Explore Courses Available ● Authorised Splunk Training Provider Since 2010 ● Thousands Trained Across Australia & New Zealand Plan Your Splunk Certification Speak with an Ingeniq expert about your certification goals — for individuals or teams. Full Name* Work Email* Company / Organisation* Course for: Notes: Send Enquiry Our team will contact you within one business day Why Choose Ingeniq for Splunk Certification Training Ingeniq delivers official Splunk product training across Enterprise, Cloud, ES, ITSI, SOAR and Observability. Our certified instructors help teams build practical, product-specific skills that align with how Splunk is used in real operational environments. Why people choose Ingeniq: Authorised Splunk Training Provider Access authorised content aligned with Splunk’s latest product updates. Certified, Industry-Experienced Instructors Learn from practitioners who use Splunk across real deployments. Hands-On, Lab-Driven Learning Develop real capability with labs built around each Splunk product. Product-Specific Paths Follow structured sequences mapped to Splunk Enterprise, ES, ITSI, SOAR and Observability. Up-to-Date Training Stay current with Splunk’s newest features, tools and best practices. Your Product-Based Learning Journey A simple overview of how Ingeniq helps teams build capability across the Splunk products they use. Choose Your Product Path Select the Splunk product your team uses. Enroll in a Course Use Splunk Credits or standard payment. Train Live With Experts Learn through instructor-led labs and demos. Apply Product-Specific Skills Build confidence using Splunk in real work. See how your role path connects to Splunk certifications. View Certification Training Guide Product-Based Learning Paths Choose the Splunk product that matches your environment. Each path combines official Splunk courses into a clear sequence designed to build capability step-by-step. Splunk Enterprise & Splunk Cloud For teams responsible for searching, dashboards, data onboarding and day-to-day Splunk operations. Recommended Course Sequence: Power User Fast Start View course System Administration View course Data Administration View course Architecting Splunk Deployments View course Splunk Enterprise Security For SOC teams, security analysts and cyber operations using Splunk ES as their SIEM. Recommended Course Sequence: Using ES View course Administering ES View course ‎ Splunk IT Service Intelligence – ITSI For service owners, IT operations teams and SREs focused on service health and event analytics. Recommended Course Sequence: Using ITSI View course Implementing ITSI View course ‎ Splunk Observability Cloud For cloud-native, microservices and reliability teams needing APM and real-time infrastructure visibility. Recommended Course Sequence: Fundamentals of Metrics Monitoring in Splunk Observability Cloud View course Investigating Incidents in Splunk Observability Cloud View course Using SignalFlow in Splunk Observability Cloud View course Splunk SOAR For security teams building automated workflows, playbooks and response processes. Recommended Course Sequence: Using SOAR View course Administering SOAR View course Playbook Development View course Advanced SOAR View course Which Product Path Should You Start With? Use this guide to match your responsibilities with the right learning path. Splunk Enterprise / Cloud Splunk Enterprise Security (ES) Splunk ITSI Splunk Observability Splunk SOAR Best for Admins, power users, operations teams Core Focus Data Onboarding Index design Dashboards Key Courses Power User Fast Start System Admin Data Admin Architecting Deployments Best for SOC & security teams Core Focus Detection Correlation Investigations Key Courses Using ES Administering ES Best for IT Ops & service owners Core Focus KPIs Service Health Event analytics Key Courses Using ITSI Implementing ITSI Best for SRE, DevOps, cloud teams Core Focus APM & infra monitoring Key Courses Fundamentals of Metrics Monitoring in Splunk Observability Cloud Investigating Incidents in Splunk Observability Cloud Using SignalFlow in Splunk Observability Cloud Best for Security automation teams Core Focus Playbooks & workflows Key Courses Using SOAR Admin SOAR Playbook Development Talk to a Training Advisor Official Training, Product-Specific Skills Official Splunk Curriculum Follow authorised content for every Splunk product. Hands-On Product Labs Practice in real Splunk environments, not demos. Team-Ready Delivery Run workshops tailored to your Splunk product needs. Splunk Education Credits Accepted Use Splunk Credits or training packs for any path. What Our Participants Say “Clear guidance and hands-on labs made learning Splunk Enterprise much easier for our team.” Participant, Splunk Enterprise Training — Australia Frequently Asked Questions (FAQs) Do we need to complete the core platform path first? Recommended for most teams new to Splunk, but not required. We can tailor the path based on your experience. Can we mix products in private training? Yes. Many teams combine core admin with ES, ITSI or SOAR. Are these the same as certification paths? They align with Splunk’s official training but are organised by product, not exam. Can we use Splunk Training Credit? Yes. Splunk Credits and training packs can be applied to product-based paths. Start Your Product-Based Splunk Training Talk to us about the Splunk products your team uses today. Choose your product path, enrol in your courses and build the skills you need to operate Splunk confidently across your environment. View Course Dates Contact Us

Splunk Education, Training and Professional Services Provider Other Courses Ingeniq is the Splunk Training Provider and Authorised Learning Partner for Australia and New Zealand and is certified to deliver the complete range of Splunk courses and modules and offers both Instructor led public and dedicated virtual and face-to-face courses. Splunk Education Instructor led multi-subject course training takes 4.5 to 18 hours or less to complete and contributes towards Splunk certifications. Have a question? Our Education Consultants can help - call us or email at sales@ingeniq.com.au and we'll be in touch. Call us on 1300 245 802 Advanced SOAR Implementation This 13.5 hour course is intended for experienced SOAR consultants who will be responsible for complex SOAR solution development, and will prepare the attendee to integrate SOAR with Splunk as well as develop playbooks requiring custom coding and REST API usage. Read More Visualizing and Alerting in Splunk Infrastructure Monitoring This course assumes that you have completed the course Splunk Infrastructure Monitoring Fundamentals. It is targeted towards DevOps/SRE/Observability teams, Senior On-call Engineers, Onboarding and Monitoring Strategists and Developers Read More Fundamentals of Metrics Monitoring in Splunk Observability his course serves as the foundation for all other Splunk Observability courses. It is targeted towards DevOps/SRE/Observability teams, Senior On-call Engineers, Onboarding and Monitoring Strategists and Developers. Read More Kubernetes Monitoring with Splunk Observability Cloud This virtual course targeted to SREs and DevOps enables you to monitor and troubleshoot your Kubernetes clusters with Splunk Observability Cloud. Read More Advanced Dashboards and Visualizations with Splunk 8.1 This one-day course is designed for advanced users who want to create SplunkJS dashboards and Splunk Custom Visualizations. It focuses on creating dashboards, adding inputs, using event handlers and creating Splunk Custom Visualizations using JavaScript and XML. Read More Developing with Splunk's REST API 8.2 This nine hour course teaches you how to use the Splunk REST API to accomplish tasks interacting with Splunk servers. In this course, you will use curl and Python to send requests to Splunk REST endpoints and will learn how to parse and use the results. Read More Configuring Tracing and Profiling for Splunk APM This single subject course targeted to DevOps enables you to learn configuration techniques to send traces to Splunk APM. Through in-person discussions and hands-on activities, learn to deploy the Splunk OpenTelemetry Collector on a Linux host. Read More Building Apps with Splunk 8.2 This two-day course focuses on Splunk Enterprise app development. It's designed for advanced users, administrators, and developers who want to create apps for Splunk Enterprise and Splunk Cloud. Read More Manual Instrumentation with Splunk APM This single subject course targeted to developers enables you to manually instrument your applications to send traces to Splunk APM. Through in-person discussions and hands-on activities, learn to manually instrument applications to create spans and add metadata to spans. Read More Using Splunk Application Performance Monitoring This 1-virtual day course targeted to developers and DevOps enables you to use Splunk APM to analyze traces, troubleshoot and monitor your microservices-based applications. Read More One of the best trainers I've had - keeps content relevant & explains the tasks in easily understood language. Extremely knowledgeable in all fields relating to the content. Well paced & accommodated to everyone's questions & progress. Participant, Splunk Enterprise Data Administration

Splunk Enterprise Lab Splunk Enterprise Lab This Splunk Enterprise 24-hour practical lab exercise is designed to take you through the tasks of a complete mock development. Each participant is given access to a specified number of Linux servers and a set of requirements. Participants then perform a mock deployment according to requirements which adhere to Splunk Deployment Methodology and best-practices. Splunk Credit Value : 100 Duration : First 4 hours instructor led, 24 hours allowed for completion Time : 11:00 am - 3:00 pm AEST *Course discounts apply for Splunk Partners. Please use the currency convertor above to check for course pricing in your local currency. Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! Extremely proficient at controlling the pace of training. Great explanation of answers & not just reading the content. Very knowledgeable about all content. Looking forward to completing the rest of the of the class. Highly recommended. Participant, Splunk Enterprise Data Administration Class Format Instructor-led lecture with labs. Delivered via virtual classroom. Audience Enterprise architects seeking to sit the Certified Architect exam. Related Certifications Splunk Enterprise Certified Architect Prerequisite Knowledge To be successful, students should have a solid understanding of the following: Splunk Fundamentals 1 Splunk Fundamentals 2 Or the following single-subject courses : What is Splunk? Intro to Splunk Using Fields Scheduling Reports and Alerts Visualisations Introduction to Knowledge Objects Creating Field Extractions Introduction to Dashboards Students should also understand the following courses: Splunk Enterprise System Administration Splunk Enterprise Data Administration Architecting Splunk Enterprise Deployments Troubleshooting Splunk Enterprise Splunk Enterprise Cluster Administration After completing the Splunk Enterprise Lab you will be able to; You will have a thorough understanding of Splunk Deployment Methodology and best-practices for planning, data collection, and sizing for a distributed deployment. Be able to manage and troubleshoot a standard distributed deployment with indexer and search head clustering. Splunk Enterprise Lab - Course Objectives Installation and Infrastructure Install forwarders, indexer, search head, deployment server and license master Configuration and Collection Configure an index cluster Deploy all specified configurations via deployment server Configure inputs from forwarders Configure and confirm index-time knowledge Create search time fields Searching and Reporting Create searches for each required use case Get indexer event acknowledgements Splunk Enterprise Practical Lab - Upcoming Sessions We don’t have any products to show here right now.

Splunk Education, Training and Professional Services Provider Learning Tracks Certification Tracks provide comprehensive education for Splunk customer and partner personnel according to their areas of responsibility. Classes are designed for specific roles such as User, Splunk Administrator, Application Developer or Architect. Power Users The Ingeniq learning path for power users will not only help you to search, create alerts, rich reports and visualisations but also be able to create and manage knowledge objects used across your organisation. Explore Track App Developers Harness the power of Splunk’s Web Framework. Create rich, interactive dashboards and forms and package Splunk knowledge objects for distribution across your organisation. Explore Track Enterprise Security End Users This path prepares security practitioners to use splunk Enterprise Security (ES). Attendees will use ES to identify and track security incidents, analyse security risks, use predictive analytics and threat discovery. Explore Track Architects Learn concepts and best practices for sizing, scaling, and deploying Splunk across your organisation. These classes prepare you to design and implement a Splunk distributed deployment. Explore Track Splunk Enterprise Administrators Whether you’re responsible for a single Splunk instance or a massive distributed deployment, our Administrator curriculum teaches you the concepts, tasks, and best practices to keep your Splunk easy. Explore Track Enterprise Security Administrators Learn to install, configure, manage, and use the Splunk App for Enterprise Security. This path is intended for Splunk Administrators that manage Splunk Enterprise Security deployments. Explore Track One of the best trainers I've had - keeps content relevant & explains the tasks in easily understood language. Extremely knowledgeable in all fields relating to the content. Well paced & accommodated to everyone's questions & progress. Participant, Splunk Enterprise Data Administration

Unlock the power of data with our exclusive Splunk Credits! Drive insights and efficiency. Claim your Splunk Credit today and elevate your operations! Splunk Credits Training Units, often referred to as "education credits" or "training credits," serve as a specialized currency for Splunk Education that can be utilized for any paid Splunk training sessions. Ingeniq is an authorised learning partner, allowing us to accept payment through these training credits. We ensure that your organisation maximises the benefits of these purchased Splunk training credits, whether they are included in a Splunk Success Plan or obtained independently. Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! Training Unit Policies Training units will expire at 12:01 AM Eastern Time on the specified expiration date listed in STEP. To use training units for registrations, they must be submitted before 12:01 AM U.S. Eastern Time. Instructor-led and dedicated classes paid for with training units must begin before the units' expiration date. For self-paced eLearning, registration must occur before the training units expire. Once registered, the eLearning course will be accessible for up to 12 months. Instructor-Led Training Registration Steps You must register for each individual course you are interested in. Please be sure to review the prerequisite knowledge required for each course. You can register directly on the Ingeniq website or log in to STEP to explore available training courses. You’ll need to log in to Splunk Education using your splunk.com account credentials. If you don’t already have an account, you can create one on the login page. To find courses, use the search bar at the top right or apply filters on the left. Click on the course title you’re interested in to view the schedule. If you want to attend a course offered by Ingeniq, avoid clicking the “Buy Now” button next to the session. Instead, click on the pink-highlighted text labeled Click HERE to Enrol, which will redirect you to the Ingeniq website for that specific course. Scroll down to choose your preferred date, and click “Add to cart” when ready. If you want to use Splunk credits, select the “add a note” option and mention that you wish to pay with Splunk Education credits. Include the Splunk Sales Agreement number as well. Proceed to the checkout page, select “Manual Payment ,” and complete the attendee details to finalise the registration process. Once your order is processed, you’ll receive a confirmation email from the Ingeniq education team. You will also get a confirmation email from STEP. Read more for further information: How Can You Effectively Maximise Your Splunk Training Credits? One of the best trainers I've had - keeps content relevant & explains the tasks in easily understood language. Extremely knowledgeable in all fields relating to the content. Well paced & accommodated to everyone's questions & progress. Participant, Splunk Enterprise Data Administration

Troubleshooting Splunk Enterprise Training delivered by INGENIQ Troubleshooting Splunk Enterprise The Troubleshooting Splunk Enterprise course is designed for Splunk administrators. It covers topics and techniques for troubleshooting a standard Splunk distributed deployment using the tools available on Splunk Enterprise. Troubleshooting Splunk Enterprise course is a lab-oriented class designed to help you gain troubleshooting experience before attending more advanced courses. You will debug a distributed Splunk Enterprise environment using the live system and simulated case logs. This course does not cover the issues surrounding Splunk Cloud, Splunk Clusters, or Splunk premium apps. Splunk Credit Value : 100 Duration : 9 hours over 2 days Time : 9:00 am - 1:30 pm AEST *Course discounts apply for Splunk Partners. Please use the currency convertor above to check for course pricing in your local currency. Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! This course was very interactive . Logging into Splunk and showing how to do it, giving examples and showing the ins and outs of ES actually makes a huge difference. Well done to the instructor. Participant, Using Splunk Enterprise Security Troubleshooting Splunk Enterprise - Course Topics Splunk Support Model Splunk Troubleshooting Methods and Tools Clarifying the Problem Installation, Licensing, and Crash Problems UI and Search Problems Configuration Problems Deployment Problems User Management Problems Course Prerequisites To be successful, students must have completed these Splunk Education course(s) or have equivalent working knowledge: Intro to Splunk Using Fields Introduction to Knowledge Objects Creating Knowledge Objects Creating Field Extractions Splunk Enterprise System Administration Splunk Enterprise Data Administration Troubleshooting Splunk Enterprise Additional courses and/or knowledge in these areas are also highly recommended: Enriching Data with Lookups Data Models Splunk Enterprise Cluster Administration Troubleshooting Splunk Enterprise - Audience Anyone within a technical role who is involved in the Administration of Splunk within their organisation or are looking to become Architect II certified. Previous Attendees have included IT Administrators, DevOps, Security Analysts and Solution Architects Class Format Instructor-led lecture with labs. Delivered via virtual classroom or at your site Related Certifications Splunk Enterprise Certified Architect After completing Troubleshooting Splunk Enterprise course you will be able to Understand the Splunk Support Model and its resources Identify the best practices for troubleshooting Splunk Enterprise List ways to gather useful Splunk diagnostic information Use Splunk diagnostic tools Identify common Splunk technical issues and solutions Splunk Course Schedules and Timezones Module 1 – Splunk Support Model Splunk support resources Module 2 – Splunk Troubleshooting Methods and Tools Splunk troubleshooting methodology Splunk diagnostic tools Module 3 – Clarifying the problem Splunk Topology Index-time pipeline Search-time pipeline Module 4 – Installation, Licensing and Crash problems Installation issues License issues Crash issues Module 5 – Configuration problems Input issues Configuration Precedence Module 6 – UI and Search problems Search issues Dashboard issues Module 7 – Deployment problems Forwarding issues Distributed search issues Deployment server issues Module 8 – User Management problems Splunk users and role capabilities Directory integration issues Splunk Course Schedules and Timezones Ingeniq Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses usually starts at AEDT 12:00pm or AEST 11:00 am and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) Troubleshooting Splunk Enterprise - Upcoming Courses Troubleshooting Splunk Enterprise : Starts August 3 and 4, 2026 Price USD 1,000.00

Splunk Core Certified Power User Splunk Certification | INGENIQ Splunk Core Certified Power User As a part of Splunk Certification, a Splunk Core Certified Power User has a basic understanding of SPL searching and reporting commands and can create knowledge objects, use field aliases and calculated fields, create tags and event types, use macros, create workflow actions, create data models and normalise data with the Common Information Model in either the Splunk Enterprise or Splunk Cloud platforms. This certification demonstrates an individual’s foundational competence of Splunk’s core software. The prerequisites listed below (including both coursework and Splunk Core Certified User exam) are highly recommended, but not required for candidates to register for the Splunk certification exam. Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! Learning Path Paid Training Paid Cert Exam We strongly suggest candidates looking to prepare for this exam complete the following Single subject courses: Working with Time Statistical Processing Comparing Values Result Modification Correlation Analysis Creating Knowledge Objects Creating Field Extractions Data Models Cert Exam - Splunk Core Certified Power User Splunk Certifications Exam When you’re ready to take a Splunk Certification exam, please view the Exam-Registration-Tutorial for registration assistance. As a reminder, each exam attempt costs US$125. Bulk registration vouchers can be purchased at a discounted price of five registrations for US$500. How to register for your exam There are three ways to purchase a PearsonVUE registration voucher: 1) Directly from PearsonVUE This is the most streamlined approach. Follow the steps for account creation and exam registration provided at www.pearsonvue.com/splunk Payment will be collected at the time of registration. You can also visit the Pearson VUE voucher store for direct purchase. 2) From Splunk (as an individual) Log into your existing account at Splunk.com/Education to purchase a registration code. Payment can be made via credit card or existing Splunk Education credits. Splunk will email you a unique registration code, which can be used for registration at www.pearsonvue.com/splunk . 3) From Splunk (as an account) Your Splunk Sales Rep can add certification exams to any deal. Once the number of vouchers has been requested, Splunk will email your unique registration codes, which can be used for registration at www.pearsonvue.com/splunk All scheduled exams are subject to a minimum 24-hour cancellation and/or rescheduling policy. Failure to cancel or reschedule an exam within this timeframe results in forfeiture of registration fee. One of the best trainers I've had - keeps content relevant & explains the tasks in easily understood language. Extremely knowledgeable in all fields relating to the content. Well paced & accommodated to everyone's questions & progress. Participant, Splunk Enterprise Data Administration