Search this site

Splunk Cloud Administration Training delivered by INGENIQ Splunk Cloud Administration This 18-hour (4 day) hands-on Splunk Cloud Administration course prepares administrators to manage users and get data in Splunk Cloud. Modules include data inputs and forwarder configuration, data management, user accounts, and basic monitoring and problem isolation. Splunk Cloud Administration course provides administrators with the skills, knowledge and best practices for data management and system configuration for data collection and ingestion in a Splunk Cloud environment to maintain a productive Splunk SaaS deployment. Splunk Credit Value : 200 Duration : 18 hours over 4 days Time : 9:00 am - 1:30 pm AEST *Course discounts apply for Splunk Partners. Please use the currency convertor above to check for course pricing in your local currency. Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit The instructor was very responsive to questions and queries both private and Communal.. Final module collaborative lab walkthrough on screen was particularly helpful. Participant, Splunk Fundamentals 2 Splunk Cloud Administration - Course Topics Splunk Cloud overview User Authentication and Authorization Index Management and Data Retention Splunk configuration files Cloud Ingestion – Using Splunk forwarders Forwarder management Data inputs in detail Cloud Ingestion – Use API, Scripted, HEC and Applications Event Parsing with data preview Manipulating raw data Installing and managing applications Problem isolation and working with Splunk Cloud support Class Format Instructor-led lecture with labs. Delivered via virtual classroom or at your site Course Prerequisites To be successful, students must have completed these Splunk Education course(s) or have equivalent working knowledge: Intro to Splunk Using Fields Introduction to Knowledge Objects Creating Knowledge Objects Creating Field Extractions Additional courses and/or knowledge in these areas are also highly recommended: Enriching Data with Lookups Data Models Splunk Cloud Administration - Audience Splunk Partners having a Professional Services Practice Splunk Cloud Customers Related Certifications Splunk Cloud Certified Admin After completing Splunk Cloud Administration course you will be able to Deploy and manage on premise components for data collection Create and configure indexes in Splunk Cloud including archiving and restoration. Manage data and input configuration using OnPrem and Cloud IDM Manage Apps and Configs in Splunk Cloud Splunk Cloud Administration - Course Objectives Module 1 -Splunk Cloud Overview Describe Cloud topology Describe tasks managed by the Splunk cloud administrator List the primary differences between Splunk Cloud and Splunk Enterprise List differences between Self-Service Cloud and Managed Cloud Module 2 - Index Management Define a Splunk Index Create indexes in cloud Delete data from an index Monitor indexing activities Module 3 - User Authentication and Authorization Administer Splunk user roles Integrate Splunk with LDAP, Active Directory, or SAML Module 4 -Splunk Configuration Files Review Splunk configuration files and directories Review configuration file precedence Review index and search time processes Module 5 – Cloud Ingestion – Using Splunk Forwarders Review cloud ingestion strategies Understand the role of forwarders in GDI Configure forwarding to Splunk Cloud Monitoring forwarder connectivity Explore optional forwarder settings Module 6 – Forwarder Management Describe Splunk Deployment Server Explain the use of forwarder management Configure forwarders to be deployment clients Managing forwarders using deployment apps Module 7 – Monitor Inputs Describe the Splunk process for inputting data Create file and directory monitor inputs Use optional settings for monitor inputs Module 8 – Cloud Ingestion – Using API, Scripted and HEC Inputs Understand how data is ingested using API Know how to deploy scripted inputs Describe how to use HEC for ingestion Module 9 – Cloud Ingestion – Application Based Inputs Understand how inputs are managed using in apps or add-ons Describe how customers may use Splunk Stream app Deploy Cloud inputs for use on an IDM Module 10 – Fine-tuning Inputs Describe the default processing that occurs during the input phase Configure input phase options, such as source type fine-tuning and character set encoding Module 11 – Parsing Phase and Data Preview Describe the default processing that occurs during parsing Optimize and configure event line breaking Explain how timestamps and time zones are extracted or assigned to events Use Data Preview to validate event creation during the parsing phase Module 12 – Manipulating Raw Data Explain how data transformations are defined and invoked Use transformations with props.conf and transforms.conf to modify raw data Use SECCMD to modify raw data Module 13 – Installing and Managing Apps Understand how apps and add-ons are vetted and installed in Cloud Create apps to managing and distribute configurations Module 14 – Splunk Cloud Support and Troubleshooting Troubleshooting Splunk Deployments Collecting data and use diagnostics or monitoring to investigate Overview of how to collect the relevant data for support to troubleshoot Splunk Course Schedules and Timezones Ingeniq Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses usually starts at AEDT 12:00pm or AEST 11:00 am and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) Splunk Cloud Administration - Upcoming Courses Splunk Cloud Administration : Starts September 1 to 4, 2026, 9:00am AEST Price USD 2,000.00 Splunk Cloud Administration : Starts July 28 to 31, 2026, 9:00am AEST Course Closed

Introduction to Dashboards - Splunk Education Single Subject Course Training. Introduction to Dashboards The Splunk Education single-subject course module, Introduction to Dashboards is designed for power users who want to learn best practices for building dashboards in the Dashboard Studio. This course focuses on dashboard creation, including prototyping, the dashboard definition, layouts types, adding visualizations, and dynamic coloring. Splunk Credit Value : 50 Duration : 3 hours Time : 9:00 am - 12:00 pm AEST Please use the currency convertor above to check for course pricing in your local currency. Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! The instructor was very responsive to questions and queries both private and Communal.. Final module collaborative lab walkthrough on screen was particularly helpful. Participant, Splunk Fundamentals 2 Introduction to Dashboards - Course Topics Dashboard Framework Prototyping Visualization Types Modifying the Source Code Dynamic Coloring Class Format Instructor-led lecture with labs. Delivered via virtual classroom or at your site Course Prerequisites To be successful, students must have a solid understanding of these courses: Intro to Splunk Using Fields Search Optimization Introduction to Dashboards - Audience Knowledge Manager learning path Introduction to Dashboards- Course Objectives Topic 1 – Dashboard Framework Describe the dashboard definition Compare classic and dashboard studio dashboards Use dashboard best practices Manage views Use dashboard best practices Topic 2 – Create a Prototype Describe dashboard workflows Compare layout types Identify layout fields Add visualizations Topic 3 - Use Dynamic Coloring Describe dynamic coloring Contrast visualization types Set global time range parameters Apply dynamic coloring Splunk Course Schedules and Timezones Splunk Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses usually starts at AEDT 12:00pm or AEST 11:00 am and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) Introduction to Dashboards - Upcoming Schedule We don’t have any products to show here right now.

Splunk Core Certified Advanced Power User Splunk Certification | INGENIQ Splunk Core Certified Advanced Power User As a part of Splunk Certifications, a Splunk Core Certified Advanced Power User has greater depth of knowledge and skills in complex searching and reporting commands, advanced use cases of knowledge objects, and best practices for building dashboards and forms. This certification demonstrates an individual’s ability to generate complex searches, reports, and dashboards with Splunk’s core software to get the most out of their data. The prerequisite courses listed below are highly recommended, but not required for candidates to register for the certification exam. You must however have achieved your Splunk Core Certified Power User exam complete your Splunk certification. Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! Learning Path Paid Training Paid Cert Exam Cert Exam - Splunk Core Certified Power User We suggest candidates looking to prepare for this exam complete the following Single subject courses : Using Fields Working with Time Comparing Values Result Modification Leveraging Lookups and Subsearches Correlation Analysis Multivalue Fields Search Optimisation Creating Knowledge Objects Creating Field Extractions Enriching Data with Lookups Data Models Introduction to Dashboards Dynamic Dashboards Cert Exam - Splunk Core Certified Advanced Power User Splunk Certifications Exam When you’re ready to take a Splunk Certification exam, please view the Exam-Registration-Tutorial for registration assistance. As a reminder, each exam attempt costs US$125. Bulk registration vouchers can be purchased at a discounted price of five registrations for US$500. How to register for your exam There are three ways to purchase a PearsonVUE registration voucher: 1) Directly from PearsonVUE This is the most streamlined approach. Follow the steps for account creation and exam registration provided at www.pearsonvue.com/splunk Payment will be collected at the time of registration. You can also visit the Pearson VUE voucher store for direct purchase. 2) From Splunk (as an individual) Log into your existing account at Splunk.com/Education to purchase a registration code. Payment can be made via credit card or existing Splunk Education credits. Splunk will email you a unique registration code, which can be used for registration at www.pearsonvue.com/splunk . 3) From Splunk (as an account) Your Splunk Sales Rep can add certification exams to any deal. Once the number of vouchers has been requested, Splunk will email your unique registration codes, which can be used for registration at www.pearsonvue.com/splunk All scheduled exams are subject to a minimum 24-hour cancellation and/or rescheduling policy. Failure to cancel or reschedule an exam within this timeframe results in forfeiture of registration fee. One of the best trainers I've had - keeps content relevant & explains the tasks in easily understood language. Extremely knowledgeable in all fields relating to the content. Well paced & accommodated to everyone's questions & progress. Participant, Splunk Enterprise Data Administration

Dynamic Dashboards - Splunk Education Single Subject Course Training. Dynamic Dashboards The Splunk Education single-subject course module, Dynamic Dashboards is designed for power users who want to learn best practices for building dashboards in the Dashboard Studio. This course focuses on creating inputs, chain searches, event annotations, and improving dashboard performance. Splunk Credit Value : 50 Duration : 4.5 hours Time : 9:00 am - 1:30 pm AEST Please use the currency convertor above to check for course pricing in your local currency. Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! The instructor was very responsive to questions and queries both private and Communal.. Final module collaborative lab walkthrough on screen was particularly helpful. Participant, Splunk Fundamentals 2 Dynamic Dashboards - Course Topics Data Source Types Mock Data Event Annotations Adding Inputs Chain Searches Class Format Instructor-led lecture with labs. Delivered via virtual classroom or at your site Course Prerequisites To be successful, students should have completed these courses: Intro to Splunk Using Fields Search Optimization Introduction to Dashboards Dynamic Dashboards - Audience Knowledge Manager learning path Dynamic Dashboards- Course Objectives Topic 1 – Selecting a Data Source Identify dataSources stanza fields Name search types Use a secondary data source Topic 2 – Adding Inputs Identify types of inputs Describe how inputs work Create a dynamic input Add cascading inputs Topic 3 - Improving Performance Identify performance improvement methods Use tstats and accelerated data models Create chain searches Set defaults Topic 4 – Comparing Temporary versus Persistent Fields Differentiate between temporary and persistent fields Create temporary fields with the eval command Extract temporary fields with the erex and rex commands Topic 5 - Enriching Data Understand how fields from lookups, calculated fields, field aliases, and field extractions enrich data Splunk Course Schedules and Timezones Splunk Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses usually starts at AEDT 12:00pm or AEST 11:00 am and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) Dynamic Dashboards - Upcoming Schedule We don’t have any products to show here right now.

Splunk Education, Training and Professional Services Provider Privacy Ingeniq is a privacy conscious company and is fully committed to the protection of your personal privacy rights. Privacy Policy Statement Ingeniq is a privacy conscious company and is fully committed to the protection of your personal privacy rights. As part of this commitment, we have aligned our business practices and web site environments to comply with the Privacy Amendment (Enhancing Privacy Protection) Act 2012, which amends the Privacy Act 1988, which takes effect on the 12th March 2014. Our privacy compliance practices offer the assurance that personal information is collected, managed and used strictly for the purposes declared in this Privacy Policy. If you have any questions on this document or would like any information on the handling of your personal information, please contact the Privacy Officer via email on privacy.officer@ingeniq.com.au or directly on +61 2 9094 3555. Purpose of this Privacy Policy The purpose of this Privacy Policy is to provide a statement of the privacy practices adopted within Ingeniq. Australian Privacy Principles (APPs) contained in the new Privacy Amendment (Enhancing Privacy Protection) Act 2012 set out how private sector organisations should collect, use, keep secure and disclose personal information. This policy serves as an indication of which APPs directly apply to our organisation and how our privacy program achieves these compliance requirements. Australian Privacy Principles 1. Collection When interacting with Ingeniq or www.ingeniq.com.au for commercial activities as ordering or registering for product, training, software downloads or product evaluation, Ingeniq will ask you to provide certain information about yourself. It is completely optional for you to engage in these activities. If you elect to engage in these activities, however, Ingeniq may ask that you provide us personal information, such as your first and last name, mailing address, postcode, e-mail address, employer, job title and department, telephone and facsimile numbers, and other personal identifying information. 2. Use and disclosure We use the information provided by you and may save your transaction information in order to fulfill the orders you placed for goods and/or services. We may disclose your personal information to suppliers, contractors, such as financial institutions or delivery companies, as a part of product or service delivery. Ingeniq is committed to offer a safe business environment to customers and reduce fraud transactions it faces. We may contract third-party providers to verify transaction information and report usage of the web site. Ingeniq will not sell, trade, or rent your personal information collected. We may use the information we collect to notify you about important new product and service releases and offers we think you'll find valuable. By registering you agree to allow us to contact you for typical direct marketing and promotional purposes. If you do not wish to be contacted in relation to any future marketing or promotional activities, please reply to any Ingeniq promotional material by sending an email to remove@ingeniq.com.au . For email related activity, reply with the word "REMOVE" either in the Subject field of the email or in the first lines of the email body. Your personal information will not be used in future related marketing activities. Ingeniq may disclose your information to relevant authorities where it is necessary to: (1) conform to legal requirements or comply with legal process; (2) protect and defend the rights or property of Ingeniq; or (3) enforce the agreements with you. 3. Data quality Ingeniq takes reasonable steps to make certain that any personal information held is accurate. When practicable Ingeniq will endeavor to ensure that that your personal information is accurate, complete and up-to-date during the course of its use and during its initial collection. The accuracy of personal information often depends on the information initially provided by you or by the organisation provided this information. Please refer to APP 13 for further information on correction of personal information. 4. Data security To ensure that personal information is protected Ingeniq have implemented industry standard security mechanisms to protect from loss, misuse and unauthorized access, disclosure, alteration and destruction. 5. Openness Under the compliance framework set out in the Privacy Amendment (Enhancing Privacy Protection) Act 2012, Ingeniq is required to provide a clearly expressed and up to date APP privacy policy stating: The kinds of personal information Ingeniq collects and holds. How Ingeniq collect and hold personal information. The purpose for which Ingeniq collect, holds, uses and discloses personal information. How an individual may access personal information is held by Ingeniq and seek the correction of such information. How an individual may complain about a breach of the Australian Privacy Principles, or a registered APP code (if any) that binds Ingeniq, and how Ingeniq will deal with such a complaint. Whether Ingeniq is likely to disclose personal information to overseas recipients. If Ingeniq is likely to disclose personal information to overseas recipients, the countries in which such recipients are likely to be located if it is practicable to specify those countries in the policy. This Privacy Policy meets this APP requirement. 6. Access and correction Under the Privacy Amendment (Enhancing Privacy Protection) Act 2012 you have the right to access your personal information, subject to some criteria and exceptions. On formal request to the Privacy Officer, Ingeniq will provide you with personal information which is readily accessible and which may lawfully be provided to you under this principle. Specific examples of where Ingeniq may not be able to provide information may include: Where you are employed or contracted or engaged by Ingeniq Circumstances where gathering access would disclose information of a third party without their expressed consent and is not possible to remove their identifying information If the information has been prepared for the purpose of actual or potential legal proceedings; and To protect commercial confidentiality To enable Ingeniq to verify your identity and entitlement to the relevant personal information, general access or correction requests are initiated by forwarding to Ingeniq a completed 'Ingeniq Privacy Request for Access or Correction' form. The applicant must provide proof of their identity to the satisfaction of Ingeniq. There will be no charge for logging a request for access or correction, although Ingeniq reserves the right to levy a reasonable charge for the administration effort involved in complying with your request. 7. Identifiers Ingeniq does not use or intend to use government issued identifiers (such as tax file numbers or drivers license numbers) unless required under a contract basis (such as a government issue or request for works) or authorized by law to do so (for example, tax file numbers are required for the purpose of complying with taxation obligations). 8. Anonymity Wherever lawful and practical, Ingeniq will take all reasonable steps to offer the option to dealing with our organisation anonymously. If dealing with Ingeniq for commercial purposes, personal information is typically requested and requests to deal with us anonymously may affect the quality of the service or transaction that we provide. 9. Transborder data flow Ingeniq will not send, either electronically or hard copy format, personal information to another country unless it has taken the steps to ensure that the information has been collected in a compliant manner (i.e. that the individual has given consent or understands within reasonable acknowledgment) and that the information is being transferred for the purpose of fulfilling a commercial transaction. Ingeniq will attempt at all times to ensure that the information will be protected to the same standard as that required by the Privacy Amendment (Enhancing Privacy Protection) Act 2012 10. Sensitive information Ingeniq does not normally collect sensitive information about you. If it has a requirement to do so, this information will be requested formally (via written consent) prior to collection. Web Site Terms and Conditions of Use Statement By using the Ingeniq web site (www.Ingeniq.com.au ), you (the individual) consent to the collection and use of this information as outlined in the online privacy statement and this Privacy Policy. We may change our privacy statement at any time and without notice. If we decide to change our privacy statement we will post those changes on this page so that you are aware of what information we collect, how we use it, and under what circumstances we disclose it. Ingeniq may also use products or services to analyse traffic and usage to its web site in order to improve its services. Ingeniq will not manage any identified data for this purpose. The information collected is used in aggregate to analyse and improve our web sites performance and usability. In addition Ingeniq may use cookies to track your visit to our web sites. A cookie is a small amount of data that is transferred to your browser by a Web server and can only be read by the server that gave it to you. The cookies will not contain any identified data, and we do not use cookies for marketing, promotional or advertising purposes, nor do we use cookies to track your Internet activity before or after you leave Ingeniq online business. We may also use the information we collect to notify you about important new releases, new Ingeniq services, and offers we think you'll find valuable. By registering you agree to allow us to contact you for promotional purposes. You may have your name removed from our e-mailing list at any time by either replying to any Ingeniq promotional email with the word "REMOVE" either in the Subject field of the email or in the first lines of the email body, or simply by sending an email to remove@ingeniq.com.au . Ingeniq customers and web site users may choose that some information collected is not to be used for certain purposes. To do this, or to change account or contact information collected at Ingeniq, please call a Ingeniq customer service representative on +61 2 8436 9600. What is personal information? 'Personal information is information or an opinion and whether recorded in material form or not, about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion. It includes all personal information regardless of its source. Summary Ingeniq is committed to preserving your trust and confidence. We use the information we collect to better understand your preferences and enhance your overall experience on our commercial practices and dealings. We do not sell, trade or rent your personal information to others. If for some reason you believe that we have not adhered to these principles, please notify us by via the Ingeniq Privacy Officer (as per contact details above) and we will do our best to determine and correct the problem in a prompt and professional manner. QF3027.1.14 Your Privacy and Ingeniq 12 March 2014

Correlation Analysis - Splunk Education Single Subject Course Training. Correlation Analysis The Splunk Education single-subject course module, Correlation Analysis is for power users who want to learn how to calculate co-occurrence between fields and analyze data from multiple datasets. Topics will focus on the transaction, append, appendcols, union, and join commands. Splunk Credit Value : 50 Duration : 3 hours Time : 9:00 am - 12:00 pm AEST Please use the currency convertor above to check for course pricing in your local currency. Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! The instructor was very responsive to questions and queries both private and Communal.. Final module collaborative lab walkthrough on screen was particularly helpful. Participant, Splunk Fundamentals 2 Correlation Analysis - Course Topics Calculate Co-Occurences Between Fields Analyze Multiple Datasets Class Format Instructor-led lecture with labs. Delivered via virtual classroom or at your site Course Prerequisites To be successful, students must have completed these Splunk Education course(s) or have equivalent working knowledge: Intro to Splunk Using Fields Visualizations Working with Time Statistical Processing Comparing Values Result Modification Scheduling Reports and Alerts Introduction to Dashboards Correlation Analysis - Audience Search Expert learning path Correlation Analysis - Course Objectives Topic 1 – Calculate Co-Occurrence Between Fields Understand transactions Explore the transaction command Topic 2 – Analyze Multiple Data Source Understand subsearch Use the append, appendcols, union, and join commands to combine, analyze, and compare multiple data sources Splunk Course Schedules and Timezones Splunk Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses usually starts at AEDT 12:00pm or AEST 11:00 am and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) Correlation Analysis - Upcoming Schedule We don’t have any products to show here right now.

Splunk Training Packs delivered by INGENIQ Splunk Training Packs Learn more, for less... Splunk Training Packs are a collection of courses that can be purchased together to complete a certification and save upto to 15%. Splunk Training Packs apply to both Certifications, Roles and Personas. If any of our Splunk Training packs don’t quite fit your requirements then simply build your own Splunk Training Pack! Call or email our Training Consultants on 1300 245 802 or sales@ingeniq.com.au Team Training Packs Ingeniq Training Packs can be purchased for Teams for significant discounts. Licensed for up to 12 person Teams any student after number 6 gets free training. Team Training Packs apply to both Certifications, Roles and Personas. If any of the packs don’t quite fit your team’s requirements then simply build your own Splunk Training Pack! Call or email our Training Consultants on 1300 245 802 or sales@ingeniq.com.au Please note that the discounted prices indicated below is for one student. Splunk Training Pack #1 1700 USD Splunk Core Certified User This certification demonstrates an individual's ability to perform basic searches, uses fields, creates alerts, uses look-ups, and creates basic statistical reports and dashboards. Courses Working with Time Statistical Processing Leveraging Lookups and Subsearches Search Optimisation Original Price : 2000 USD Splunk Training Pack #2 3400 USD Splunk Core Certified Power User This certification demonstrates an individual's ability to do SPL searching and reporting, create knowledge objects, use field aliases and calculated fields, create tags and event types. Courses Working with Time Statistical Processing Comparing Values Result Modification Correlation Analysis Creating Knowledge Objects Creating Field Extractions Data Models Original Price : 4000 USD Splunk Training Pack #3 1700 USD Splunk Core Certified Advanced Power User Original Price : 2000 USD This certification demonstrates an individual's ability to generate complex searches, reports, and dashboards with Splunk’s core software to get the most out of their data. Courses Multivalue Fields Enriching Data with Lookups Introduction to Dashboards Dynamic Dashboards Pre-requisite Splunk Core Certified Power User Splunk Training Pack #4 3188 USD Splunk Enterprise Certified Admin Original Price : 3750 USD This certification demonstrates an individual's ability to build and manage a production Splunk environment, administer licences, Install and configure forwarders and understand the basics of getting data into Splunk. Courses Pre-requisite Splunk Core Certified Power User Splunk Enterprise System Administration Splunk Enterprise Data Administration Splunk Training Pack #5 3400 USD Splunk Enterprise Certified Architect Original Price : 4000 USD This certification demonstrates an individual's ability to understand the Splunk Support Model and its resources, Identify the best practices for troubleshooting Splunk Enterprise, list ways to gather useful Splunk diagnostic information and use Splunk diagnostic tools Courses Troubleshooting Splunk Enterprise Cluster Administration Architecting Enterprise Deployments Pre-requisite Splunk Core Certified Power User Splunk Enterprise Certified Admin Splunk Training Pack #6 3400 USD Search Expert Faststart Original Price : 4000 USD Instructor-Led Training, covers over 60 commands and functions. Learn to compare, manipulate, and normalise data. Enrich search results with lookups and subsearches and analyze data from multiple datasets. Courses Working with Time Statistical Processing Comparing Values Result Modification Leveraging Lookups and Subsearches Correlation Analysis Multivalue Fields Search Optimization Splunk Training Pack #7 Build my Own Pack If any of our Splunk Training packs don’t quite fit your requirements then simply build your own Splunk Training Pack! You can build custom training packs for Individuals or for a team upto 12 people. Call or email our Training Consultants on 1300 245 802 or sales@ingeniq.com.au Register Your Interest First Name Last Name Email Phone Company Who is this training for * Required An Individual A Team Please choose a Training Pack * Required Splunk Core Certified User Splunk Core Certified Power User Splunk Advanced Power User Splunk Enterprise Certified Admin Splunk Enterprise Certified Architect Search Expert Faststart I would like to build a Training pack of my own Message Submit One of the best trainers I've had - keeps content relevant & explains the tasks in easily understood language. Extremely knowledgeable in all fields relating to the content. Well paced & accommodated to everyone's questions & progress. Participant, Splunk Enterprise Data Administration

Splunk Education, Training and Professional Services Provider Investigating Incidents with Splunk SOAR Summary This 3 hour course prepares security practitioners to use SOAR to respond to security incidents, investigate vulnerabilities, and take action to mitigate and prevent security problems. Description SOAR concepts Investigations Running actions and playbooks Case management & workflows Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! Enjoyable presenter and easy to understand for an intermediate Splunk user pursuing Admin certification. Thanks from Massachusetts! Participant, Splunk Fundamentals 2 Splunk Credit Value: 50 Duration: 3 hours Time: 11am – 2pm AEST Objectives Topic 1 – Starting Investigations SOAR investigation concepts ROI view Using the Analyst Queue Using indicators Using search Topic 2 – Working on Events Using the investigation page to work on events Use the heads-up display Set event status and other fields Use notes and comments How SLA affects event workflow Using artifacts and files Exporting events Executing actions and playbooks Managing approvals Topic 3 – Cases: Complex Events Use case management for complex investigations Use case workflows Mark evidence Running reports Pre-requisites Basic security operations knowledge Splunk Course Schedules and Timezones Ingeniq Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm (4.5 hour sessions over 1 or more days) and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses start at AEDT 12:00pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) Investigating Incidents with Splunk SOAR - Upcoming Courses Investigating Incidents with Splunk SOAR : Starts August 6, 2026 Price USD 500.00 Investigating Incidents with Splunk SOAR : Starts July 9, 2026 Course Closed

Splunk Education Multi Subject Legacy Course Information delivered by INGENIQ. Ingeniq is the Authorised Splunk Training Provider for Australia and New Zealand and is certified to deliver the complete range of Splunk courses and offer both Instructor led public and dedicated virtual and face-to-face courses. Splunk Legacy Courses A number of Splunk Courses have been replaced by shorter Splunk single-subject course modules, these pages have been retained to assist customers. To see which courses have been replaced and book the equivalent course click here Single-subject to Multi-subject course mapping. Have a question? Our Education Consultants can help - call us or email at sales@ingeniq.com.au and we'll be in touch. Call us on 1300 245 802 Splunk Fundamentals 1 Read More This self-paced e-learning or Instructor-led version teaches you how to search and navigate in Splunk, use fields, get statistics from your data, create reports, dashboards, lookups, and alerts. It will also introduce you to Splunk’s datasets features and Pivot interface. Splunk Fundamentals 2 This course focuses on searching and reporting commands and creation of knowledge objects. Major topics include using transforming commands and visualisations, filtering and formatting results, creating workflow actions and data models, and normalizing data with the CIM. Read More Splunk Fundamentals 3 This course focuses on searching and reporting commands and creation of knowledge objects. Major topics include using transforming commands and visualisations, filtering and formatting results, creating workflow actions and data models, and normalizing data with the CIM. Read More Creating Dashboards with Splunk This course is designed for power users who want to create fast and efficient views that include customized charts, drilldowns, advanced behaviors and visualizations. Major topics include using tokens, global searches, event handlers, dynamic drilldowns and simple XML extensions for JavaScript and CSS. Read More Advanced Searching and Reporting This course focuses on more advanced search and reporting commands. Main topics discussed are scenario-based examples and hands-on challenges enable users to create robust searches, reports and charts. Read More One of the best trainers I've had - keeps content relevant & explains the tasks in easily understood language. Extremely knowledgeable in all fields relating to the content. Well paced & accommodated to everyone's questions & progress. Participant, Splunk Enterprise Data Administration

Architecting Splunk Enterprise Deployments Training delivered by INGENIQ Architecting Splunk Enterprise Deployments The Architecting Splunk Enterprise Deployments course focuses on large enterprise deployments. Students will learn steps and best practices for planning, data collection and sizing for a distributed deployment. Workshop-style labs challenge students to make design decisions about an example enterprise deployments. Splunk Credit Value : 150 Duration : 9 hours over 2 days Time : 9:00 am - 1:30 pm AEST *Course discounts apply for Splunk Partners. Please use the currency convertor above to check for course pricing in your local currency. Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! Instructor is good in his domain, knows what he is talking about, are very experienced as well. he is also willing to share his personal work that he gathers over the years with us. Great attitude. Participant, Troubleshooting Splunk Architecting Splunk Enterprise Deployments - Course Topics Requirements definition Index and infrastructure planning Data collection Forwarders and managing deployments Data comprehension Search considerations Development tools and external integration concepts Operations and management Course Prerequisites To be successful, students must have completed these Splunk Education course(s) or have equivalent working knowledge: Intro to Splunk Using Fields Introduction to Knowledge Objects Creating Knowledge Objects Creating Field Extractions Splunk Enterprise System Administration Splunk Enterprise Data Administration Troubleshooting Splunk Enterprise Additional courses and/or knowledge in these areas are also highly recommended: Enriching Data with Lookups Data Models Splunk Enterprise Cluster Administration Architecting Splunk Enterprise Deployments - Audience Anyone involved in the design and deployment of Splunk within their organisation or are looking to become Splunk certified. Previous attendees have included Consultants, IT Administrators, Pre-Sales Engineers and Solution Architects. Class Format Instructor-led lecture with labs. Delivered via virtual classroom or at your site Related Certifications Splunk Enterprise Certified Architect After completing Architecting Splunk Enterprise Deployments course you will be able to Understand high availability concepts Know how to estimate storage requirements Compare remote collection methods Understand search performance Identify onboarding processes Utilise monitoring tools Architecting Splunk Enterprise Deployments - Course Objectives Module 1 – Introduction Overview of the Splunk deployment planning process and associated tools Module 2 – Planning Identify critical information about environment, volume, users, and requirements Review checklists and resources to aid in collecting requirements Module 3 – Apps and Index Design Design and size indexes Plan app deployment Module 4 – Infrastructure Learn sizing factors for servers Understand how reference hardware is used to scale deployments Identify the impact of clustering for index replication and for search heads Identify best practices for authentication, authorization and access control Module 5- Data Collection Compare agent-based and agentless data collection methods Discuss data inputs Compare remote collection methods Module 6 – Forwarders and Deployment Management Review types of forwarders Understand how to manage forwarder installation Understand configuration management for all Splunk components, using Splunk deployment tools Module 7 – Data Comprehension and Enrichment Identify the six things you must get correct at index time Discuss Common Information Model Discuss Data Models and data model design Discuss data enrichment, including lookups and KV Store Module 8 – Querying Discuss search performance Discuss differences between summarization methods Module 9 – Integration Describe integration methods Identify common integration points Module 10 – Operations and Management Identify ongoing tasks in a Splunk deployment Identify backup and archiving methods Discuss onboarding processes Review monitoring tools and apps Splunk Course Schedules and Timezones Ingeniq Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses usually starts at AEDT 12:00pm or AEST 11:00 am and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) Architecting Splunk Enterprise Deployments - Upcoming Courses Architecting Splunk Enterprise Deployments : Starts August 20 and 21, 2026 Price USD 1,500.00 Architecting Splunk Enterprise Deployments : Starts July 2 and 3, 2026 Course Closed

Splunk Education, Training and Professional Services Provider Advanced SOAR Implementation Summary This 13.5 hour course is intended for experienced SOAR consultants who will be responsible for complex SOAR solution development, and will prepare the attendee to integrate SOAR with Splunk as well as develop playbooks requiring custom coding and REST API usage. Potential attendees have received a passing grade in all prerequisite courses, and must ensure they can devote all of their attention to the class, as the course work is very challenging. Students will develop a custom solution with SOAR, Splunk and custom Python code. The labs provide requirements for the solution; the student must plan and execute the development. This will require thoughtful focus, experimentation and problem-solving skills. Description Using external search in SOAR Sending events from Splunk to SOAR Updating Splunk events from SOAR Running SOAR reports on Splunk Executing SOAR playbooks from Splunk Searching Splunk from SOAR playbooks Writing custom code in SOAR playbooks Using the SOAR REST API in Phantom playbooks Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! Enjoyable presenter and easy to understand for an intermediate Splunk user pursuing Admin certification. Thanks from Massachusetts! Participant, Splunk Fundamentals 2 Splunk Credit Value: 150 Duration: 3 days Time: 11am – 3.30pm AEST Objectives Module 1 – Implementing Splunk and SOAR Review of SOAR UI and concepts Describe interactions between Splunk and SOAR Identify key concepts and data flows Pre-requisites for integration Module 2 – Configuring External Splunk Search Describe the benefits of externalizing search to Splunk Configure the SOAR instance for externalization Configure the Splunk instance for externalization Use the Splunk app for SOAR Reporting Module 3 – Sending Splunk Events to SOAR Configure the SOAR Add-on for Splunk Map CIM fields to CEF Send Enterprise Security notables to SOAR Automatically trigger SOAR playbooks for Splunk notables Module 4 – Accessing Splunk from SOAR Install and configure the SOAR App for Splunk Ingest Splunk events into SOAR Use Splunk search from playbooks Update Splunk notable events Module 5 – Custom Coding in Playbooks SOAR coding best practices Writing, using and managing custom functions Using the SOAR API in custom code Store and retrieve persistent data Module 6 – Using SOAR REST Use Django queries to search for data in SOAR Use REST to access SOAR data Use the HTTP app to execute REST from playbooks Prerequisites Attendees for this class must ensure that they meet all course prerequisites. This is a challenging, advanced class that draws on technical knowledge from many areas in Splunk and SOAR, and the demanding labs and course schedule leave little time to learn the basics. To be successful, students should have a solid understanding of the following: Experience with Python programming Administering Splunk SOAR Developing Splunk SOAR Playbooks Enterprise Splunk Data Administration Enterprise Splunk System Administration Either Using or Administering Splunk Enterprise Security Splunk Course Schedules and Timezones Ingeniq Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm (4.5 hour sessions over 1 or more days) and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses start at AEDT 12:00pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West)

Start your Splunk certification journey with Ingeniq. Learn from experts, build Splunk dashboards, and gain hands-on experience through guided Splunk learning. Splunk Certification Path & Training with Ingeniq How Ingeniq Guides You to Splunk Certification (Your training journey with us, step by step) Start your certification journey with confidence. This page walks you through how Ingeniq supports every phase, from selecting courses to passing the exam and beyond. Learn more about the certification paths and available training options today. Explore Splunk Training with Ingeniq Contact Us Today 1. Discovery & Goal Mapping 🔎 Your journey begins with understanding where you are, and where you want to go. Ingeniq helps you identify your starting point and design a certification path tailored to your goals. Needs assessment call / questionnaire: We start by understanding your existing experience, career goals, and Splunk ambitions (e.g. admin, security, SOAR). Path recommendation: Based on your answers, we recommend a certification route (e.g., Core → Power User → Admin → ES) that matches your skill level and objectives. 2. Course Selection & Enrolment 📅 Once your pathway is defined, we’ll help you choose the right official Splunk courses and set up your enrolment. Tailored course bundle: We recommend the specific Splunk training modules you’ll need, from foundational to advanced. Flexible scheduling: Choose from available instructor-led classes to fit your schedule. Account setup: You’ll receive guidance on creating your Splunk account to access your training sessions and materials. 3. Learn from Certified Splunk Experts 🎓 Gain valuable insights from instructors who use Splunk in real enterprise environments every day. Certified Splunk practitioners: Our trainers bring hands-on expertise and share real-world applications that go beyond theory. Interactive sessions & Q&A: Engage with instructors, ask questions, and get instant feedback during live or virtual lessons. 4. Hands-On Practice & Labs 💻 Practical experience is key to mastering Splunk. Every Ingeniq course includes real lab exercises to help you apply what you learn. Sandbox environments: Work in a safe, Splunk-configured environment to build dashboards, alerts, and reports. Guided exercises & mini-projects: Tackle real-world scenarios that reinforce classroom concepts. Instructor feedback: Receive personalised input and corrections to strengthen your skills before the exam. 5. Exam-Focused Preparation 📝 When you’re ready to certify, we’ll guide you on what to expect. Ingeniq ensures you’re aligned with Splunk’s official exam objectives and resources. Official exam blueprints: Splunk provides detailed exam blueprints and objectives to help you prepare. Practice recommendations: We’ll help you identify practice exercises to test your readiness before sitting the exam. Note: Ingeniq does not conduct live review or mock exam sessions. All certification exam materials, blueprints, and resources are provided directly by Splunk. 6. Certification Exam Support 🏆 Certification exams are administered externally by Pearson VUE on behalf of Splunk. Ingeniq does not sell or manage certification exams but can guide you on where to register. Exam registration guidance: You’ll find official Splunk tutorials and Pearson VUE registration links to schedule your test. Independent exam process: Exams are purchased and taken directly through Pearson VUE or using Splunk credits. 7. Post-Certification & Continued Growth 📈 Earning your Splunk certification is just the beginning. Ingeniq continues to support your professional development through advanced training and ongoing learning opportunities. Training completion & validation: Access your Splunk course completion certificates through your Splunk learning account. Next-level guidance: Our team can help you plan your next Splunk learning milestone, such as progressing from Admin to Architect, or branching into Security Admin or ITSI. Continued learning: Stay engaged through new Splunk course releases, upcoming classes, and updates from the Splunk learning ecosystem. Splunk Certification Tracks Splunk offers a progression of certifications, and Ingeniq aligns its training courses to help you prepare effectively, whether your goal is to master Splunk dashboards, develop apps, or manage enterprise environments. Foundational Certifications Administrator & Architect Certifications Developer Certification Security & Observability Certifications Ready to Take the Next Step? Turn your Splunk skills into globally recognised certifications with expert guidance from Ingeniq Start Your Splunk Certification Journey Splunk Training Packs Simplify your journey and save on course costs with Ingeniq Training Packs, bundled courses aligned with certification paths. Save up to 15% compared to single-course enrolments Choose pre-built packs for roles like Core User, Power User, Admin, or Architect Build a custom pack to fit your learning Splunk goals Team discounts available for group enrolments Explore Training Packs Splunk Training Credits Already have Splunk training units or credits from your organisation? Ingeniq makes redemption simple. Apply credits directly toward any Ingeniq-delivered Splunk course We’ll verify balances and manage registration before credits expire Ideal for corporate learners using pre-purchased Splunk education units Learn How to Use Splunk Credits Your Splunk Journey Starts Here Turn your curiosity into expertise with guided Splunk learning, hands-on labs, and real certification results. Begin Your Splunk Training with Ingeniq One of the best trainers I've had - keeps content relevant & explains the tasks in easily understood language. Extremely knowledgeable in all fields relating to the content. Well paced & accommodated to everyone's questions & progress. Participant, Splunk Enterprise Data Administration