Search this site

Splunk Education, Training and Professional Services Provider Kubernetes Monitoring with Splunk Observability Cloud Summary This virtual course targeted to SREs and DevOps enables you to monitor and troubleshoot your Kubernetes clusters with Splunk Observability Cloud. Through discussions and hands-on activities, learn to explore and use the Kubernetes Navigator, built-in dashboards, and AutoDetect to monitor the health of your cluster. Create custom dashboards and detectors to monitor and troubleshoot common Kubernetes trouble conditions. This course assumes basic knowledge of Kubernetes and familiarity with navigating Splunk IM. This lab-oriented class is designed to help you learn best practices and tips to use Splunk Observability Cloud to monitor and troubleshoot Kubernetes clusters. All hands-on labs are performed in the Observability Cloud UI. Description Describe common scenarios for monitoring Kubernetes Use Splunk Observability Cloud's built-in tools to monitor Kubernetes Create custom dashboards and detectors to monitor Kubernetes Troubleshoot common Kubernetes issues Enjoyable presenter and easy to understand for an intermediate Splunk user pursuing Admin certification. Thanks from Massachusetts! Participant, Splunk Fundamentals 2 Splunk Credit Value: 50 Duration: 3 hours Time: 9am – 12pm AET Objectives Topic 1: Exploring Kubernetes Clusters with Splunk Observability Cloud Describe common scenarios for monitoring Kubernetes Describe how to send Kubernetes data Use the Kubernetes Navigator to view cluster data Use Kubernetes Dashboard to view cluster data Topic 2: Monitoring Kubernetes with Built-in Content Use the Kubernetes Navigator to investigate problems with nodes, pods, and containers Use the Cluster Analyzer to pinpoint the root of some problems Use built-in Kubernetes Dashboards to investigate and troubleshoot Use AutoDetect to investigate and troubleshoot Topic 3: Monitor Kubernetes with Custom Dashboards and Detectors Use the Metrics Finder to research Kubernetes metrics Create custom charts, dashboards, and dashboard groups to monitor Kubernetes Create custom detectors to monitor Kubernetes metrics Customize alert messages Prerequisites Required: Splunk Infrastructure Monitoring Fundamentals (ILT) Introduction to Splunk IM (eLearning) Basic knowledge of Kubernetes Strongly recommended Experience managing a Kubernetes cluster and using it in a production environment Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! Splunk Course Schedules and Timezones Ingeniq Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm (4.5 hour sessions over 1 or more days) and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses start at AEDT 12:00pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West)

Splunk Enterprise Security Administrator | Splunk Training Pack delivered by INGENIQ Splunk Enterprise Security Administrator Splunk Training Pack#5 Splunk Enterprise Security Admin Learn more, for less.. Ingeniq Splunk Training Packs are a collections of courses that when purchased together qualify for discounts of up to 25%. Splunk Training Packs apply to all Training Tracks and Certifications – in fact to any combination of courses purchased together from Ingeniq. Buy Splunk Training Pack#5 and you’ll sit all the courses you need to be certified as a Splunk Enterprise Security Admin. A Splunk Certified Enterprise Security Admin manages a Splunk Enterprise Security environment, including ES event processing and normalisation, deployment requirements, technology add-ons, settings, risk analysis settings, threat intelligence, protocol intelligence configuration and customisations. Call our Training Consultants now on 1300 245 802 or email sales@ingeniq.com.au to have this training pack tailored to you or your team' s requirements. Splunk Training Pack Courses Splunk Enterprise System Administration This virtual 9 hour course is designed for system administrators who are responsible for managing the Splunk Enterprise environment. The course provides fundamental knowledge of Splunk license manager, indexers and search heads. It covers configuration, management and monitoring core Splunk Enterprise components. Splunk Enterprise Data Administration This virtual 13.5 hour course is designed for system administrators who are responsible for getting data into Splunk Indexers. Administering Splunk Enterprise Security This 13.5 hour course prepares architects and systems administrators to install, configure and manage Splunk Enterprise Security. It covers ES event processing and normalization, deployment requirements, technology add-ons, settings, risk analysis settings, threat intelligence and protocol intelligence configuration, and customizations. Cert Exam - Splunk Enterprise Security Admin [USD 125] There are three ways to purchase a PearsonVUE registration voucher: Directly from PearsonVUE From Splunk (as an individual) From Splunk (as an account) Full instructions below. Addon & Save!! Splunk Fundamentals 2 This course focuses on searching and reporting commands as well as on the creation of knowledge objects. Major topics include using transforming commands and visualizations, filtering and formatting results, correlating events, creating knowledge objects, using field aliases and calculated fields, creating tags and event types, using macros, creating workflow actions and data models, and normalising data with the Common Interface Model (CIM). This course runs over 4 days and focuses on additional search commands as well as advanced use of knowledge objects. Major topics include advanced statistics and eval commands, advanced lookup topics, advanced alert actions, using regex and erex to extract fields, using spath to work with self-referencing data, creating nested macros and macros with event types, accelerating reports and data models. Splunk Fundamentals 3 Architecting Splunk Enterprise Deployments This 9 hour Splunk course focuses on large enterprise deployments. Students will learn steps and best practices for planning, data collection and sizing for a distributed deployment. Workshop-style labs challenge students to make design decisions about an example enterprise deployment. Advanced Searching and Reporting This 13.5 hour Splunk course focuses on more advanced search and reporting commands. Scenario-based examples and hands-on challenges enable users to create robust searches, reports, and charts. Students are coached step by step through complex searches to produce final results. Splunk Certifications Exam When you’re ready to take a Splunk Certification exam, please view the Exam-Registration-Tutorial for registration assistance. As a reminder, each exam attempt costs US$125. Bulk registration vouchers can be purchased at a discounted price of five registrations for US$500. How to register for your exam There are three ways to purchase a PearsonVUE registration voucher: 1) Directly from PearsonVUE This is the most streamlined approach. Follow the steps for account creation and exam registration provided at www.pearsonvue.com/splunk Payment will be collected at the time of registration. You can also visit the Pearson VUE voucher store for direct purchase. 2) From Splunk (as an individual) Log into your existing account at Splunk.com/Education to purchase a registration code. Payment can be made via credit card or existing Splunk Education credits. Splunk will email you a unique registration code, which can be used for registration at www.pearsonvue.com/splunk . 3) From Splunk (as an account) Your Splunk Sales Rep can add certification exams to any deal. Once the number of vouchers has been requested, Splunk will email your unique registration codes, which can be used for registration at www.pearsonvue.com/splunk All scheduled exams are subject to a minimum 24-hour cancellation and/or rescheduling policy. Failure to cancel or reschedule an exam within this timeframe results in forfeiture of registration fee. One of the best trainers I've had - keeps content relevant & explains the tasks in easily understood language. Extremely knowledgeable in all fields relating to the content. Well paced & accommodated to everyone's questions & progress. Participant, Splunk Enterprise Data Administration

Splunk Education, Training and Professional Services Provider Architects Learn concepts and best practices for sizing, scaling, and deploying Splunk across your organisation. Architects Track Courses Splunk Fundamentals 1 Splunk Fundamentals 2 Creating Dashboards with Splunk Splunk Fundamentals 3 Advanced Searching and Reporting Splunk Enterprise System Administration Splunk Enterprise Data Administration Troubleshooting Splunk Enterprise Splunk Enterprise Cluster Administration Architecting Splunk Enterprise Deployments Administering Splunk Enterprise Security Architect Certification Lab Exam The lab is facilitated by a live instructor via virtual classroom. Participants are allowed 24 hours continuous access to the servers to complete the requirements. A live instructor is available for the first 4 hours for direct facilitation. The lab exam is run by Splunk Education, registration for the lab exam needs to be completed through the Splunk website using the link below: https://www.splunk.com/view/SP-CAAAH9R One of the best trainers I've had - keeps content relevant & explains the tasks in easily understood language. Extremely knowledgeable in all fields relating to the content. Well paced & accommodated to everyone's questions & progress. Participant, Splunk Enterprise Data Administration

Implementing Splunk SmartStore Training delivered by INGENIQ Implementing Splunk SmartStore The Implementing Splunk SmartStore course is designed for the experienced Splunk system administrators. This hands-on class is designed to provide the essential knowledge for deploying and managing Splunk SmartStore. It covers SmartStore deployment options, cache manager configurations, monitoring, and troubleshooting of SmartStore implementation. Units : 1 Duration : 4.5 hours over 1 day Time : 9:00 am – 1:30 pm AEST (GMT +11) *Course discounts apply for Splunk Partners. Please use the currency convertor above to check for course pricing in your local currency. Extremely proficient at controlling the pace of training. Great explanation of answers & not just reading the content. Very knowledgeable about all content. Looking forward to completing the rest of the of the class. Highly recommended. Participant, Splunk Enterprise Data Administration Implementing Splunk SmartStore - Course Topics Introduction to SmartStore Standalone SmartStore Implementation SmartStore in Indexer Cluster Monitoring and managing SmartStore Class Format Instructor-led lecture with labs. Delivered via virtual classroom or at your site Course Prerequisites Fundamentals 1 (Required) Splunk System Administration (Required) Splunk Data Administration (Required) Troubleshooting Splunk Enterprise (Recommended) Working knowledge of: (Recommended) o Linux OS commands o Editing files with vi or nano o Splunk index life-cycle and bucket transitions o Splunk Indexer cluster concept Related Certifications None Implementing Splunk SmartStore - Audience Splunk Admins and Architects managing large Splunk environments on premise or in private cloud who are interested in learning to cut cost and improve performance on storage. After completing Implementing Splunk SmartStore course you will be able to Learn Benefits of SmartStore other than cost savings How to implement and troubleshoot Smartstore How to Migrate data from onboard storage to Smartstore How to Monitor and manage Storage in Indexer clusters using SmartStore Module 1 – Introduction to SmartStore Benefits of SmartStore SmartStore requirements and restrictions Indexing in SmartStore Searching in SmartStore Module 2 – Standalone SmartStore Implementation Enabling SmartStore indexes Bootstrapping SmartStore indexes Validating the implementation Implementing Splunk SmartStore - Course Objectives Module 3– SmartStore in Indexer Cluster Implementation differences between deployments SmartStore in an indexer cluster SmartStore migration in indexer clusters Module 4 – Monitoring and managing SmartStore Monitoring SmartStore activities Cache manager settings & Optimizing eviction policies Splunk Course Schedules and Timezones Ingeniq Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses start at AET 2:00pm and finish at AET 6:30pm (4.5 hour sessions over 1 or more days) and are optimal for customers in the following countries and areas; UTC+9 including Japan, Korea UTC+8 including Australia (West Coast), Singapore, Hong Kong, China, Philippines, Brunei, Thailand UTC +5/+6 including India and Sri Lanka Implementing Splunk SmartStore - Upcoming Courses We don’t have any products to show here right now.

Splunk Education, Training and Professional Services Provider Explore our services and get in touch Our Services 01. Custom Project This service is designed to tackle unique and complex challenges tailored to your specific needs. We collaborate closely with you to understand your requirements and develop a bespoke solution from the ground up. Let us help you bring your innovative ideas to life with personalized end-to-end support. Show more 02. Personal Solution Planning Navigate your personal goals and challenges with our dedicated support. Through focused one-on-one sessions, we help you explore your situation, identify key objectives, and map out a practical, actionable plan. Achieve clarity and purposeful direction with our expert guidance. Show more 03. Expert Guidance Package Gain insightful direction for your endeavors with our comprehensive guidance package. We delve into your specific situation to provide expert advice and strategic recommendations. Empower yourself with the knowledge to make informed decisions and achieve optimal outcomes. Show more

Working with Time - Splunk Education Single Subject Course Training. Working with Time The Splunk Education single-subject course module, Working with Time is for power users who want to become experts at using time in searches. Topics will focus on searching and formatting time in addition to using time commands and working with time zones. Splunk Credit Value : 50 Duration : 3 hours Time : 9:00 am - 12:00 pm AEST Please use the currency convertor above to check for course pricing in your local currency. The instructor was very responsive to questions and queries both private and Communal.. Final module collaborative lab walkthrough on screen was particularly helpful. Participant, Splunk Fundamentals 2 Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! Working with Time - Course Topics Searching with Time Formatting Time Comparing Index Time versus Search Time Using Time Commands Working with Time Zones Class Format Instructor-led lecture with labs. Delivered via virtual classroom or at your site Course Prerequisites To be successful, students must have completed these Splunk Education course(s) or have equivalent working knowledge: Intro to Splunk Using Fields Visualizations Working with Time - Audience Search Experts and Knowledge Managers Working with Time - Course Objectives Topic 1 – Searching with Time Understand the_time field and timestamps View and interact with the event Timeline Use the earliest and latest time modifiers Use the bin command with the _time field Topic 2 – Formatting Time Use various date and time eval functions to format time Topic 3 - Using Time Commands Use the timechart command Use the timewrap command Topic 4 – Working with Time Zones Understand how time and timezones are represented in your data Determine the time zone of your server Use strftime to correct timezones in results Splunk Course Schedules and Timezones Splunk Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses usually starts at AEDT 12:00pm or AEST 11:00 am and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) Working with Time - Upcoming Schedule We don’t have any products to show here right now.

Discover Splunk Observability products with Ingeniq—empowering businesses with real-time insights, performance monitoring, and seamless troubleshooting solutions. Observability Unlock the power of Splunk Observability with Ingeniq. Our cutting-edge solutions offer unparalleled visibility into your systems, enabling proactive issue detection and rapid resolution. With real-time metrics, logs, and traces, we empower your team to optimise performance, enhance system reliability, and ensure seamless user experiences. Want to Improve your digital resilience by building a leading observability practice? Our Education Consultants are here to help. Feel free to call us or email sales@ingeniq.com.au , and we'll get in touch with you. Call us on +612 8705 1505 Visualizing and Alerting in Splunk Infrastructure Monitoring This course assumes that you have completed the course Splunk Infrastructure Monitoring Fundamentals. It is targeted towards DevOps/SRE/Observability teams, Senior On-call Engineers, Onboarding and Monitoring Strategists and Developers Read More Fundamentals of Metrics Monitoring in Splunk Observability This course serves as the foundation for all other Splunk Observability courses. It is targeted towards DevOps/SRE/Observability teams, Senior On-call Engineers, Onboarding and Monitoring Strategists and Developers. Read More Kubernetes Monitoring with Splunk Observability Cloud This virtual course targeted to SREs and DevOps enables you to monitor and troubleshoot your Kubernetes clusters with Splunk Observability Cloud. Read More Unlock Real-Time Insights with Splunk Observability Our Splunk observability course is designed to help you improve your digital resilience by building a leading observability practice within your organisation. In this course, you'll learn how to unify visibility across ITOps and engineering teams, ensuring shared data, context, and workflows for complete digital visibility. Splunk empowers your teams to accelerate troubleshooting by providing the tools to diagnose issues accurately across any environment. By reducing time spent in war rooms, you'll boost your operational efficiency and response times. Additionally, our course covers how Splunk allows you to have complete control over your data and costs. With its flexible data architecture, Splunk lets you instrument everything, paying only for the resources you need—maximising both data control and cost efficiency. By the end of the course, you’ll be equipped with the knowledge and skills to leverage Splunk's powerful observability solutions, driving faster resolutions, reducing operational friction, and ensuring a more resilient digital infrastructure. Sign up for our Splunk Observability training course today! The Benefits of Splunk Observability In today’s fast-paced digital landscape, organisations rely on robust tools to maintain seamless operations across distributed systems. Ingeniq, a leading authorised training provider for Splunk, empowers enterprises to unlock the full potential of Splunk observability to drive efficiency and resilience. Here’s how embracing Splunk observability best practices can transform your workflow: Enhanced Visibility: Splunk observability empowers DevOps developers to achieve real-time insights into distributed systems, ensuring seamless application performance and simplified service ownership tracking. Improved Alerting: Detect and resolve issues faster with deeper visibility into system changes, enabling swift debugging and issue resolution. Optimised Workflows: With contextualised data, gain end-to-end insights into a request’s journey, reducing the complexity of troubleshooting and boosting efficiency. Streamlined Collaboration: By providing critical information at developers’ fingertips, Splunk observability reduces reliance on third-party resources, minimising time spent in meetings and improving productivity. Accelerated Innovation: Observability eliminates bottlenecks, allowing developers to focus on delivering faster, more innovative solutions for your business. At Ingeniq, we help you harness Splunk’s full capabilities, providing expert training and support to maximise your investment. Transform your approach to system monitoring and troubleshooting with Splunk today! Splunk Data Observability Tool Splunk observability tool is designed to revolutionise how organisations monitor, manage, and optimise their digital environments. This advanced data observability tool empowers enterprises to gain deep insights into their systems, enabling swift issue detection and resolution, seamless integration with existing frameworks, and enhanced decision-making capabilities. Here are the key features of our tools: Comprehensive Integration: Seamlessly integrates with your existing tech stack, supporting various frameworks, container platforms, and critical software for a unified observability effort. Real-Time Insights: Access actionable, real-time data through intuitive dashboards, reports, and visualisations to address issues promptly and effectively. Context-Rich Visualisations: These aggregate and display insights in digestible formats, offering clarity into system performance, changes, and interdependencies. AI-Powered Intelligence: Utilises machine learning to automate data processing, detect anomalies, and strengthen security measures for faster incident responses. Business-Centric Value: Aligns with your organisation’s goals by improving system stability, deployment speed, and overall customer experience. With our observability data solutions, you can optimise resources, tackle disruptions head-on, and gain a strategic advantage in today’s digital landscape. Contact us today to discuss your needs for observability. How to Implement Observability In today’s complex software landscape, understanding and managing system behaviour is more critical than ever. This is where applied observability becomes a game-changer. Unlike traditional monitoring, which focuses on predefined metrics, observability delves deeper into “unknown unknowns,” empowering teams to troubleshoot issues in real time. To implement application observability effectively, start by leveraging robust tools like Splunk. Splunk's cutting-edge analytics not only provide unparalleled insights into system performance but also ensure enterprise resilience. With the Splunk observability certification, your team can unlock the full potential of this platform, enabling faster detection, smarter investigation, and optimised resources. At Ingeniq, we simplify the journey to observability excellence. We equip your team with the skills to harness Splunk for cybersecurity, network operations, and system reliability. With our guidance, your organisation will gain comprehensive visibility, reduce downtime, and build a future-ready infrastructure. Why Ingeniq Is Your Trusted Partner for Observability Solutions At Ingeniq, we’re dedicated to empowering organisations with cutting-edge observability solutions, ensuring seamless operations and enhanced digital resilience. As authorised training and certification providers for Splunk, we bring unparalleled expertise to help you unlock the full potential of this transformative platform. Here’s why Ingeniq stands out: Tailored Expertise: We provide customised solutions to optimise your use of Splunk’s big data capabilities for cybersecurity, observability, and network operations. Comprehensive Training: Our certified courses equip your team with the skills to leverage Splunk efficiently. Transparent Pricing: We offer clear guidance on Splunk observability pricing, ensuring value for every investment. Optimised Resources: We use the fundamentals of data observability to ensure that you can optimise your resources for greater efficiency and performance. With Ingeniq, you’re not just adopting a tool; you’re gaining a partner committed to delivering actionable insights and robust solutions. From achieving comprehensive visibility to enabling rapid detection and investigation, our services ensure you remain resilient against digital disruptions. Explore how Ingeniq can help you maximise your Splunk investment and drive measurable success in observability. Let’s transform your operations together. Frequently Asked Questions How does observability benefit developers? It provides visibility into system performance, enabling developers to quickly identify and resolve issues, improving workflow and accelerating development. How does observability improve incident response? By providing context and visibility into system behaviour, Splunk observability helps teams pinpoint issues, prioritise responses, and resolve incidents faster. Why is observability important in distributed systems? It helps teams identify and resolve issues in complex environments where traditional monitoring techniques may fail due to interdependencies and unpredictability. What are the three pillars of observability? Logs, metrics, and traces are the primary data classes used to achieve observability and gain insights into system performance. How do logs help in observability? Logs provide a text record of events with timestamps, offering context for troubleshooting issues when they arise in a system. What are the key components of an observability strategy? Key components include instrumentation, data correlation, incident response, and AIOps, which work together to enable real-time monitoring and faster issue resolution. One of the best trainers I've had - keeps content relevant & explains the tasks in easily understood language. Extremely knowledgeable in all fields relating to the content. Well paced & accommodated to everyone's questions & progress. Participant, Splunk Enterprise Data Administration

Splunk Fundamentals 3 Training Legacy Course Information delivered by INGENIQ Splunk Fundamentals 3 - Legacy Course Information The Splunk Fundamentals 3 course focuses on additional search commands as well as advanced use of knowledge objects. Major topics include advanced statistics and eval commands, advanced lookup topics, advanced alert actions, using regex and erex to extract fields, using spath to work with self-referencing data, creating nested macros and macros with event types, and accelerating reports and data models. This Fundamentals 3 Splunk Courses have been replaced by shorter Splunk single-subject course modules , this page have been retained to assist customers. To see which courses have replaced Splunk Fundamentals 3 and book the equivalent course click here Single-subject to Multi-subject course mapping. Alternatively contact one of our Training Consultants on 1300 245 802 or email sales@ingeniq.com.au Excellent Trainer, Have had the same instructor twice now & he is one of the best i have had. Thank you! Participant, Splunk Fundamentals 3 Splunk Fundamentals 3 - Course Topics Advanced Statistical Commands Advanced eval Commands Advanced Lookups Alert Actions Advanced Field Creation and Management Working with self-Describing Data and Files Advanced Macros Using Acceleration Options Class Format Instructor-led lecture with labs. Delivered via virtual classroom or at your site Course Prerequisites Splunk Fundamentals 1 Splunk Fundamentals 2 Related Certifications Splunk Core Certified Advanced Power User Splunk Core Certified Consultant Splunk Fundamentals 3 - Audience Anyone whose role requires them to create complex search queries, advanced data models and reports with Splunk who have limited exposure to regular expressions. Previous attendees have included Consultants, IT Administrators and Business Intelligence/Business Analysts. After completing Splunk Fundamentals 3 course you will be able to Learn about and use KV store collections and scripted lookups in search and alerts. Inline extractions best practices using regex Working with structured data sources eg JSON and XML and table formatted events. Learn how and when to use report acceleration and summary indexing Learn how to seriously improve performance using tstats and data model acceleration. Splunk Fundamentals 3 - Course Objectives Module 1: Exploring Statistical Commands Performing statistical analysis with functions of the stat command Using fieldsummary Using appendpipe Using eventstats Using streamstats Module 2: Exploring eval Command Functions Using conversion functions Using data and time functions Using string functions Using comparison and conditional functions Using informational functions Using statistical functions Using mathematical functions Using cryptographic functions Module 3: Exploring Lookups Including and excluding events based on lookup values Using KV Store lookups Using external lookups Using geospatial lookups Using database lookups Understanding best practices for lookups Module 4: Exploring Alerts Referencing lookups in alerts Outputting alert results to a lookup Logging and indexing searchable alert events Using a webhook alert action Module 5: Advanced Field Creation and Management Using regex Using the erex command Using the rex command Identifying regex best practices Module 6: Working with Self-Describing Data and Files Using the spath command Using the eval command with the spath function Extracting fields from table-formatted events with multikv Module 7: Advanced Search Macros Using nested search Macros Previewing search macros before executing Using Tags and event types in search macros Module 8: Using Acceleration Options: Reports and Summary Indexing Using report acceleration Using Summary indexing Module 9: Using Acceleration Options: Data Models and tsidx Files Exploring data models using datamodel command Using data model acceleration Working with tsidx files using the tstats command Splunk Course Schedules and Timezones Ingeniq Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses usually starts at AEDT 12:00pm or AEST 11:00 am and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West)

Using Splunk APM to Monitor Microservices-based Applications Training delivered by INGENIQ Using Splunk APM to Monitor Microservices-based Applications The Using Splunk APM to Monitor Microservices-based Applications is a one day virtual course targeted to developers and DevOps that enables you to use Splunk APM to analyze traces, troubleshoot and monitor your microservices-based applications. Through in-person discussions and hands-on activities, deep dive into uses of distributed tracing, navigating the Splunk APM app to analyze traces, visualize and alert on APM metrics. All concepts and taught through discussions and hands-on activities. . Units : 1 Duration : 4.5 hours over 1 day Time : 9:00 am – 1:30 pm AEST (GMT +11) *Course discounts apply for Splunk Partners. Please use the currency convertor above to check for course pricing in your local currency. Extremely proficient at controlling the pace of training. Great explanation of answers & not just reading the content. Very knowledgeable about all content. Looking forward to completing the rest of the of the class. Highly recommended. Participant, Splunk Enterprise Data Administration Using Splunk APM to Monitor Microservices-based Applications - Course Topics When to use Splunk APM View and Analyse End-to-end Collected Traces Find the root cause of a problem Class Format Instructor-led lecture with hands-on activities. Delivered via virtual classroom. Course Prerequisites Required: Familiarity with Splunk IM Strongly Recommended: Basic knowledge of Visualisation and alerting on Splunk IM Metrics Related Certifications None Using Splunk APM to Monitor Microservices-based Applications - Audience The Using Splunk APM class is most suitable for Developers and DevOps to become proficient at working with the Splunk's Observability solutions. After completing Using Splunk APM to Monitor Microservices-based Applications course you will be able to ... Using Splunk APM to Monitor Microservices-based Applications - Course Objectives Module 1 – Overview of Splunk APM Describe the Splunk IM and APM solution Identify the key elements of the Splunk APM Differentiate between metrics, traces and log Module 2 – Navigating Splunk APM Define Splunk APM-based terminology Navigate the Splunk APM pages Module 3– Troubleshooting Using Splunk APM Create detectors to alert on APM metrics Create custom dashboards Troubleshoot an issue after an alert triggers Splunk Course Schedules and Timezones Ingeniq Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses start at AET 2:00pm and finish at AET 6:30pm (4.5 hour sessions over 1 or more days) and are optimal for customers in the following countries and areas; UTC+9 including Japan, Korea UTC+8 including Australia (West Coast), Singapore, Hong Kong, China, Philippines, Brunei, Thailand UTC +5/+6 including India and Sri Lanka Using Splunk APM to Monitor Microservices-based Applications - Upcoming Courses We don’t have any products to show here right now.

Splunk Certified Developer Splunk Certification | INGENIQ Splunk Certified Developer As part of Splunk Certification, a Splunk Certified Developer builds apps using the Splunk Web Framework. This Splunk certification demonstrates an individual’s expertise in drilldowns, advanced behaviors and visualizations, planning, creating, and packaging apps, and REST endpoints. Please Note: You must already hold the Splunk Enterprise Certified Admin Certification. Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! Learning Path Paid Training Paid Cert Exam Cert Exam - Splunk Core Certified Power User Cert Exam - Splunk Certified Admin [ Enterprise or Cloud ] Advanced Dashboards and Visualisations Building Splunk Apps Developing with Splunk's REST API Cert Exam - Splunk Certified Developer Splunk Certifications Exam How to register for your exam There are three ways to purchase a PearsonVUE registration voucher: 1) Directly from PearsonVUE This is the most streamlined approach. Follow the steps for account creation and exam registration provided at www.pearsonvue.com/splunk Payment will be collected at the time of registration. 2) From Splunk (as an individual) *COMING SOON* Log into your existing account at Splunk.com/Education to purchase a registration code. Payment can be made via credit card or existing Splunk Education credits. Splunk will email you a unique registration code, which can be used for registration at www.pearsonvue.com/splunk . * Note – this feature has not yet been launched. Individual candidates should purchase vouchers via Option 1 until further notice. 3) From Splunk (as an account) Your Splunk Sales Rep can add certification exams to any deal. Once the number of vouchers has been requested, Splunk will email your unique registration codes, which can be used for registration at www.pearsonvue.com/splunk All scheduled exams are subject to a minimum 24-hour cancellation and/or rescheduling policy. Failure to cancel or reschedule an exam within this timeframe results in forfeiture of registration fee. One of the best trainers I've had - keeps content relevant & explains the tasks in easily understood language. Extremely knowledgeable in all fields relating to the content. Well paced & accommodated to everyone's questions & progress. Participant, Splunk Enterprise Data Administration

Splunk Education, Training and Professional Services Provider Using SignalFlow in Splunk Observability Cloud Summary This 2-day (virtual days) course is targeted towards SREs, ITOps, and DevOps Engineers who are responsible for implementing and maintaining an observability solution for infrastructure and application monitoring. In this advanced technical course, you will learn to use SignalFlow – the analytics language used in Splunk Observability Cloud. SignalFlow is a programming language used to define Charts, Navigators and Detectors, and for more complicated data manipulation. Use SignalFlow to develop visualizations and detectors that are more specific and reusable than what is possible using the user interface alone. You will create functions to analyze data and to incorporate elements from the Observability Cloud code library. The content covered in this course is essential to managing Observability Cloud resources as code using the REST API, Terraform or another content as-code solution. Learn the concepts and apply the knowledge through demonstrations, discussions and hands-on activities. Course Topics Writing your first SignalFlow program Working with Data Streams in Splunk Observability Cloud Stream aggregations, transformations, and calculations Detecting and alerting in SignalFlow Advanced detecting and stream manipulation The SignalFlow REST API Prerequisite Knowledge Visualizing and Alerting Splunk Observability Cloud Experience working with programming languages such as Python (preferred), JavaScript, or Go. Note: If you have not worked extensively with Splunk Observability Cloud you should take another course first before continuing with this one. Course Format Instructor-led lecture with labs, delivered via live virtual classroom Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! Enjoyable presenter and easy to understand for an intermediate Splunk user pursuing Admin certification. Thanks from Massachusetts! Participant, Splunk Fundamentals 2 Splunk Credit Value: 100 Duration: 9 hours Time: 9am – 1.30pm AET Objectives Module 1 - Writing Your First SignalFlow Program Identify where SignalFlow is used in Splunk Observability Cloud Create plots using SignalFlow instead of the Plot Builder Query streaming data § Add filters to streaming data queries Combine filters with and, or, not Module 2 – Working with Data Streams in Splunk Observability Cloud Describe the fundamentals of Data Stream objects Use aggregation functions to analyze streaming data Apply transformations to streaming data Change resolutions, rollups, and extrapolation policies when querying streaming data Module 3 – Stream aggregations, transformations, and calculations Use combining operators on streams Operate on data streams with missing data Use the map() method to modify or exclude values in a stream Describe variable assignment in SignalFlow Differentiate between SignalFlow functions and methods Describe and use SignalFlow functions that have equivalent methods Module 4 – Detecting and Alerting in SignalFlow Use the detect() function to monitor a stream Use comparisons to create Boolean streams Create constant streams and use them appropriately Specify different "on" and "off" conditions for a detect block Identify durations of an occurrence in streaming data Compare streams using different thresholds for different MTSs Create alerts rules that align with detectors Module 5 – Advanced Detecting and Stream Manipulation Work with properties and dimensions in SignalFlow Compare values using multiple thresholds and a default Use built-in library functions Use conditional, list, and other Python-like functionality Write reusable functions in SignalFlow Module – The SignalFlow REST API Explain the SignalFlow APIs available and common use cases Execute a SignalFlow program using the HTTP API Describe the data format returned by the HTTP API Explain how Terraform is used to manage Infrastructure Monitoring resources in Splunk Observability Cloud Create detectors and alert rules using the REST API Prerequisite Knowledge Visualizing and Alerting Splunk Observability Cloud Experience working with programming languages such as Python (preferred), JavaScript, or Go. Note: If you have not worked extensively with Splunk Observability Cloud you should take another course first before continuing with this one. Course Format Instructor-led lecture with labs, delivered via live virtual classroom Splunk Course Schedules and Timezones Ingeniq Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm (4.5 hour sessions over 1 or more days) and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses start at AEDT 12:00pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) Using SignalFlow in Splunk Observability Cloud - Upcoming Courses We don’t have any products to show here right now.

Creating Knowledge Objects - Splunk Education Single Subject Course Training. Creating Knowledge Objects The Splunk Education single-subject course module, Creating Knowledge Objects is a three-hour course for knowledge managers who want to learn how to create knowledge objects for their search environment using the Splunk web interface. Topics will cover types of knowledge objects, the search-time operation sequence, and the processes for creating event types, workflow actions, tags, aliases, search macros, and calculated fields. Splunk Credit Value : 50 Duration : 3 hours Time : 9:00 am - 12:00 pm AEST Please use the currency convertor above to check for course pricing in your local currency. The instructor was very responsive to questions and queries both private and Communal.. Final module collaborative lab walkthrough on screen was particularly helpful. Participant, Splunk Fundamentals 2 Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! Creating Knowledge Objects - Course Topics Knowledge Objects and Search-time Operations Creating Event Types Using Event Type Builder Creating Workflow Actions Creating Tags and Aliases Creating Search Macros Class Format Instructor-led lecture with labs. Delivered via virtual classroom or at your site Course Prerequisites To be successful, students must have completed these Splunk Education course(s) or have equivalent working knowledge: How Splunk works Knowledge objects Creating Knowledge Objects - Audience Knowledge Manager learning path. Creating Knowledge Objects - Course Objectives Topic 1 – Knowledge Objects & Search-time Operations Understand role of knowledge objects for enriching data Define search-time operation sequence Topic 2 – Creating Event Types Define event types Create event types using three methods Tag event types Compare event types and reports Topic 3 - Creating Workflow Actions Identify what are workflow actions Create a GET, POST, and search workflow action Test workflow actions Topic 4 - Creating Tags and Aliases Describe field aliases and tags Create field aliases and tags Search with field aliases and tags Topic 5 - Creating Search Macros Explain search macros Create macros with and without arguments Validate macro arguments Use and preview macros at search time Create and use nested macros Use macros with other knowledge objects Topic 6 - Creating Calculated Fields Explain calculated fields Create a calculated field Use a calculated field in search Splunk Course Schedules and Timezones Splunk Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses usually starts at AEDT 12:00pm or AEST 11:00 am and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) Creating Knowledge Objects - Upcoming Schedule We don’t have any products to show here right now.