Search this site

Enriching Data With Lookups - Splunk Education Single Subject Course Training. Enriching Data With Lookups The Splunk Education single-subject course module, Enriching Data with Lookups is for knowledge managers who want to use lookups to enrich their search environment. Topics will introduce lookup types and cover how to upload and define lookups, create automatic lookups, and use advanced lookup options. Additionally, students will learn how to verify lookup contents in search and review lookup best practices. Splunk Credit Value : 50 Duration : 3 hours Time : 9:00 am - 12:00 pm AEST Please use the currency convertor above to check for course pricing in your local currency. The instructor was very responsive to questions and queries both private and Communal.. Final module collaborative lab walkthrough on screen was particularly helpful. Participant, Splunk Fundamentals 2 Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! Enriching Data With Lookups - Course Topics What is a Lookup? Creating Lookups Geospatial Lookups External Lookups KV Store Lookups Best Practices for Lookups Class Format Instructor-led lecture with labs. Delivered via virtual classroom or at your site Course Prerequisites To be successful, students must have completed these Splunk Education course(s) or have equivalent working knowledge: How Splunk works Knowledge objects Enriching Data With Lookups - Audience Knowledge Manager learning path. Enriching Data With Lookups - Course Objectives Topic 1 – What is a Lookup? Define a lookup ad the default lookup types Lookups and the search-time operation sequence Topic 2 – Creating Lookups Use file-based lookups at search time Create (upload, define, configure) a lookup Use an automatic lookup at search Topic 3 - Geospatial Lookups Understand geospatial lookups and KMZ/KML files Add and define a geospatial lookup Topic 4 - External Lookups Understand external lookups Explore the default lookups, external_lookup.py Configure external lookups Topic 5 - KV Store Lookups Introduce KV Store lookups Configure KV Store lookups Compare file-based CSV lookups to KV Store lookups Topic 6 - Best Practices for Lookups Various best practices for using lookups Splunk Course Schedules and Timezones Splunk Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses usually starts at AEDT 12:00pm or AEST 11:00 am and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) Enriching Data With Lookups - Upcoming Schedule We don’t have any products to show here right now.

Splunk Education, Training and Professional Services Provider Terms of Trade Ingeniq® is a registered trade mark and wholly owned business division of Bluechip Infotech. Digital Networks Australia Pty Ltd trades as Ingeniq ® using the trademark and as such all legal requirements and agreements including contracts, notices, insurances, taxes and terms of trade are matters for Digital Networks Australia Pty Ltd. It is important that Ingeniq and the Buyer agree on the terms and conditions on which business is to be transacted. These Trading Terms and Conditions apply to all sales of Goods and Services by Ingeniq to the Buyer. These Terms and Conditions are current for trading with Ingeniq at the time of issue; however they may vary from time to time. Current Trading Terms and Conditions can be seen on our website, www.Ingeniq.com.au INTERPRETATION In these conditions unless otherwise indicated by context: “Additional Charges” includes all delivery and handling charges, Goods and Services Tax, stamp duty, interest, legal and other costs of recovery of unpaid money and all other government imposts and all money, other than the Purchase Price, payable by the Buyer to Ingeniq arising out of the sale of the Goods, or provision of the Services. “Business Day” means a day that is not Saturday, Sunday, public holiday or a bank holiday in Australia. “Buyer” means an organisation or individual that agrees to buy Goods or Services for its own business purposes and/or is authorised by Ingeniq to resell some or all of the Goods or Services supplied by Ingeniq. “Collateral” means all the Buyer’s present and after-acquired property. It includes anything in respect of which the Buyer has at any time a sufficient right, interest or power to grant a security interest. “Control Event” means: In respect of any Collateral that is, or would have been, a Revolving Asset: (a) the Buyer breaches, or attempts to breach clause 8.1.1 (“Restricted dealings”) in respect of the Collateral or takes any step which would result in it doing so; or (b) a person takes a step (including signing a notice or direction) which may result in Taxes, or an amount owing to an authority, ranking ahead of the security interest in the Collateral under this document; or (c) distress is levied or a judgment, order or Security is enforced [or a creditor takes any step to levy distress or enforce a judgment, order or Security, over the Collateral; or (d) Ingeniq gives a notice to the Buyer that the Collateral is not a Revolving Asset. However, v may only give a notice if [Ingeniq reasonably considers that it is necessary to do so to protect its rights under this document or if an Event of Default is continuing; or (e) a voluntary administrator, liquidator or provisional liquidator is appointed in respect of the Buyer or the winding up of the Buyer begins; or (f) a receiver, receiver and manager or controller is appointed to any of the Buyer’s property; or (g) something having a substantially similar effect to paragraph (e) or (f) happens under any law. “Ingeniq” means Digital Networks Australia Pty Limited, ABN 66 060 294 895 trading as Ingeniq. “Goods” means the goods sold to the Buyer by Ingeniq. “GST” means goods and services tax imposed under the A New Tax System (Goods and Services Tax) Act 1999 (Cth) “Intellectual Property Rights” means patent rights (including but not limited to rights in patent applications or disclosures and rights or priority), copyright (including but not limited to rights in audiovisual works and moral rights), trade secret rights, and other intellectual property rights recognised by the law of each applicable jurisdiction, “Pre-Paid” means the Buyer is required to pay for all Goods and Services in full prior to delivery of the Goods and Services. “PPSA” means the Personal Property Securities Act 2009 (Cth); “Purchase Price” means the list price for the Goods or Services as charged by Ingeniq as at the date of delivery of the Goods or the date of provision of Services or such other price as may be agreed by Ingeniq from time to time and the Buyer prior to delivery of the Goods or provision of the Services. “Revolving Asset” means any Collateral: (1) which is: (a) inventory; (b) a negotiable instrument; (c) machinery, plant, or equipment which is not inventory and has a value of less than A$1,000 or its equivalent; (d) money (including money withdrawn or transferred to a third party from an account of the Buyer with a bank or other financial institution); and (2) in relation to which no Control Event has occurred, subject to clause 8.1.4 (“Conversion to Revolving Assets”). “Secured Money” means any money payable by the Buyer under this Agreement. “Services” means the services provided to the Buyer by Ingeniq. “Terms” means these Trading Terms and Conditions and any annexures or schedules. “Vendor” means Manufacturer/Supplier. 1. TRADE CREDIT FACILITIES 1.1. A new Buyer is required to trade on a Pre-Paid basis unless a credit facility has been agreed to in writing by Ingeniq 1.2. A Buyer with a reasonable trading history with Ingeniq may establish a credit facility upon completion and subsequent approval of an ‘Application for Credit’. Until such time as credit is approved, all purchases shall be on a Pre-Paid basis. 1.3. If Ingeniq agree to provide the Buyer with credit, the Buyer agrees that Ingeniq may 1.3.1. obtain a credit report from credit reporting agencies or other credit providers for the purpose of assessing this and any other application which the Buyer may make for commercial credit; 1.3.2. obtain information from any other credit providers from time to time for the purpose of reviewing and assessing the Buyer’s commercial credit worthiness; 1.3.3. disclose or discuss with any credit providers or any credit reporting agencies, any prospective guarantor and any person or body agreeing or considering whether to agree to be liable for any credit to be made available to the Buyer, any information in the Buyer’s possession relating to the Buyer’s application and the administration of Ingeniq's credit facilities. 1.4. If the Buyer does not purchase Goods or Services from Ingeniq within any six (6) month period, the offer of trade credit may be revoked and Buyer will be advised that payment terms will revert to a Pre-Paid arrangement. 2. ORDER FOR GOODS AND SERVICES 2.1. Orders may be submitted by the following methods: 2.1.1. electronic form via the Ingeniq website (www.Ingeniq.com.au ); or 2.1.2. by phone, facsimile, or email. 2.2 To ensure prompt processing and delivery of the Goods and Services, the following information is required by Ingeniq: Company name Contact Name Contact Phone Number Email Address Delivery Address (note: a P.O. Box address is not accepted for deliveries) Postal Address (for accounts) Product code with description, and quantity Payment or account details where applicable Whether part shipments are acceptable. 2.3 Invoices are never shipped with Goods and are always posted separately or emailed to a specified address. A purchase order given to Ingeniq is binding on Ingeniq and the Buyer, if: 2.3.1. an Order Acknowledgement is provided by Ingeniq; or 2.3.2. the Goods and/or Services are supplied by Ingeniq in accordance with the order. 2.4 An acceptance of the order by Ingeniq is then to be an acceptance of these conditions of sale to the Buyer and these Terms will override any conditions contained in the Buyer’s order. Ingeniq reserves the right to accept a part only of any order by notifying the Buyer in writing or by delivering the Goods or supplying the Services to the Buyer. No order is binding on Ingeniq until acknowledged by it. 3. CANCELLATION OF ORDERS 3.1. An order which has been accepted in whole or in part by Ingeniq by issue of an Order Acknowledgement cannot be cancelled by the Buyer without obtaining the prior written approval of Ingeniq, which it may refuse in its absolute discretion. 3.2. An order can only be cancelled before delivery. Cancellation of orders will be processed in accordance with the nature of the order and the status of the fulfillment and cannot be guaranteed to be granted. 3.3. In addition to any cancellation fee levied by the Vendor, Ingeniq reserves the right to charge an additional cancellation fee. Where such a fee shall apply the Buyer will be notified in writing 3.4. The Buyer will not be entitled to cancel the whole or part of the order or to claim compensation by reason of Ingeniq's failure to comply with the delivery requirements or minor variations to the Goods as a result of changes to the Vendor’s manufacturing process or specifications. 4. DELIVERY 4.1. Ingeniq endeavours to maintain inventory of most Goods. Purchase orders received and approved before 4:00PM on a Business Day can usually be dispatched on the same day, dependent on stock availability, quantity and freight method. 4.2. The Buyer may elect to use their own courier, if required. When using their own courier, the Buyer shall be responsible for contacting the courier company and organising for the Goods to be collected from Ingeniq's warehouse or other location as specified by Ingeniq. Before arranging a courier, a Customer Service Representative from Ingeniq should be contacted for information regarding availability of Goods to be collected. Ingeniq takes no responsibility whatsoever for freight bills or errors and problems in shipping for deliveries using the Buyer’s own courier. 4.3. The times quoted for delivery are estimates only and Ingeniq accepts no liability for failure or delay in delivery of Goods or Services. The Buyer is not relieved of any obligation to accept or pay for Goods or Services by reason of any delay in delivery. Goods and Services may be delivered by installments at the discretion of Ingeniq where the Buyer has agreed to partial shipments. 4.4. Delivery Terms for hardware Goods to the Buyer’s delivery addresses within Australia will be free in store where the order value is greater than $500 excluding GST. Where the value of the order is less than $500 excluding GST a shipping charge of $20 will be charged to the Buyer. Shipping method shall be at the discretion of Ingeniq. Buyer may change the method of delivery and pay the full cost of the alternative method. 4.5. For all export deliveries the shipping terms are EXW (ex Works). 4.6. Risk in accepting the Goods passes on point of delivery to the Buyer, or collection of the Goods by the Buyer’s Courier. 4.7. All Additional Charges are payable by the Buyer in addition to the Purchase Price for the Goods or Services. 4.8. Any claims to be made against Ingeniq for short delivery or non-received Goods must be lodged with Ingeniq in writing within forty-eight (48) hours of the scheduled delivery time AND full particulars of the claim are provided within the same period of forty-eight (48) hours. A failure to make a claim within the above time frames constitutes acceptance in full of any delivery. 5. EVALUATION PRODUCT 5.1. Ingeniq has a wide range of software and hardware Goods available for evaluation. All Goods supplied for evaluation must be returned within fourteen (14) days unless otherwise specified. 5.2. In order to request an evaluation of physical Goods, Buyers shall complete a Ingeniq Loan Evaluation form and have it signed by an authorised company officer (director / accountant / purchasing manager). 5.3. On completion of the evaluation period, Goods are to be returned to Ingeniq as detailed for Credit Return. Any Goods that are returned damaged or incomplete must be paid for in full. 6. PRICE AND PAYMENT All pricing excludes delivery charges and GST. While every effort is made to ensure accuracy of information, Ingeniq takes no responsibility for any errors and/or omissions in price list contents. Images and/or description of the goods may differ from the actual goods; images are for illustration purposes only. Ingeniq reserves the right to change the prices for Goods and Services at any time. 6.1. The Buyer must pay the Purchase Price and the Additional Charges to Ingeniq. 6.2. All payments are due within the credit terms offered on the “Credit Account Approval” sent by Ingeniq to the Buyer. 6.3. Pre-paid accounts are payable prior to delivery of the Goods or Services. 6.4. Failure to pay any account by the due date shall be deemed a breach of these terms and conditions. 6.5. If a payment is past the due date, Ingeniq may at its discretion withhold further deliveries, cancel a contract or revoke credit without prejudice to any of its existing rights. Ingeniq reserves the right to charge penalty interest on the overdue balance at the rate of 15% p.a., compounding monthly, until payment is received in full. In the event the Buyer’s Credit Account is referred to a collection agency, the Buyer shall also pay all costs incurred by Ingeniq for actions taken by the collection agency. 6.6. Payment from the Buyer within Australia may be made by way of credit card, bank cheque, company cheque or electronic funds transfer. Credit cards accepted are MasterCard, Visa and American Express. Credit card surcharges may be passed on to the Buyer. 6.7. Payment from the Buyer outside Australia can only be made by direct deposit in either USD, NZD or AUD. 6.8. Credit card payment is not accepted from international customers. Payments from all Buyers outside Australia must be made by electronic funds transfer. 6.9. Upon receipt of funds Ingeniq will release goods for shipment. 6.10. Payments by company cheque are subject to bank clearance; typically two to three working days. 7. RETENTION OF TITLE 7.1. Ownership, title and property of the Goods remains with Ingeniq until payment in full for the Goods has been made. Until the date of payment: 7.1.1. the Buyer has the right to sell the Goods in the ordinary course of business. 7.1.2. until the Goods have been sold by the Buyer in the ordinary course of the Buyer’s business, the Buyer holds the Goods as bailee for Ingeniq ; 7.1.3. Once the Goods have been sold and until such time as the Buyer has paid Ingeniq in full for the Goods the Buyer agrees that it holds the proceeds from the sale of those Goods on trust for Ingeniq. 7.2. The Buyer is deemed to be in default immediately upon the happening of any of the following events: 7.2.1. if payment to Ingeniq for the Goods is not made promptly before the due date for payment; 7.2.2. if the Buyer ceases to carry on business or stops or suspends payment or states its intention of so doing or is unable to pay its debts as they fall due or if any cheque drawn by the Buyer payable to Ingeniq is dishonoured; 7.3. In the event of a default by the Buyer, then without prejudice to any other rights which Ingeniq may have at law or under this contract: 7.3.1. Ingeniq or its agents have the right to recover the Goods at its option and the Buyer is obliged to deliver up the Goods if so directed by Ingeniq or its agents, in accordance with the enforcement procedures outlined in Chapter 4 of the Personal Property Securities Act 2009 (Cth) or any applicable legislation from time to time. 8. PPSR SECURITY 8.1. Grant of Security interest 8.1.1. The Buyer grants a security interest in the Collateral to Ingeniq to secure payment of the Secured Money. 8.1.2. To the extent any Collateral is not transferred, this security interest is a charge. If for any reason it is necessary to determine the nature of this charge, it is a floating charge over Revolving Assets and a fixed charge over all other Collateral. 8.1.3. The Buyer agrees 8.1.3.1. To execute any documents and provide all relevant information and full cooperation to Ingeniq to ensure Ingeniq has a perfected security interest in the Collateral under the PPSA;8.1.3.2. not to change the Buyer’s name or contact details (including address) without Ingeniq's prior written consent; and8.1.3.3. that Ingeniq may register any financing statement, financing change statement or other documents and do all other things which are necessary or desirable to perfect and maintain Ingeniq security interest under this document, to preserve its interest in the Collateral and to realise Ingeniq's security interest with the agreed priority, at the Buyer’s expense. 8.2. Dealings with Collateral 8.2.1. Restricted dealings The Buyer must not do, or agree to do, any of the following unless it is permitted to do so by clause 8.1.2. (“Permitted dealings”) or another provision in this document: 8.2.1.1. create or allow another interest in any Collateral; or 8.2.1.2. dispose, or part with possession, of any Collateral. 8.2.2. Permitted dealings The Buyer may do any of the following in the ordinary course of the Buyer’s ordinary business unless it is prohibited from doing so by another provision in this document: 8.2.2.1. create or allow another interest in, or dispose or part with possession of, any Collateral which is a Revolving Asset; or 8.2.2.2. withdraw or transfer money from an account with a bank or other financial institution. 8.2.3. Revolving Assets If a Control Event occurs in respect of any Collateral then automatically: 8.2.3.1. that Collateral is not (and immediately ceases to be) a Revolving Asset; 8.2.3.2. any floating charge over that Collateral immediately operates as a fixed charge; and 8.2.3.3. the Buyer may no longer deal with the Collateral under clause 8.1.2 (“Permitted dealings”). 8.2.4. Conversion to Revolving Assets If any Collateral is not, or ceases to be, a Revolving Asset, and becomes subject to a fixed charge or transfer under this clause, Ingeniq may give the Buyer a notice stating that, from a date specified in the notice, the Collateral specified in the notice is a Revolving Asset, or becomes subject to a floating charge or is transferred back to the Buyer. This may occur any number of times. 8.2.5. Inventory Any inventory which is not, or ceases to be, a Revolving Asset is specifically appropriated to a security interest under this document. The Buyer may not remove it without obtaining the specific and express authority of Ingeniq to do so. 8.3. Statutory powers and notices 8.3.1. Exclusion of PPSA provisions To the extent the law permits: 8.3.1.1. for the purposes of sections 115(1) and 115(7) of the PPSA: 8.3.1.1.1. Ingeniq need not comply with sections 95, 118, 121(4), 125, 130, 132(3)(d) or 132(4); and8.3.1.1.2. sections 142 and 143 are excluded;8.3.1.1.3. for the purposes of section 115(7) of the PPSA, Ingeniq need not comply with sections 132 and 137(3);8.3.1.1.4. if the PPSA is amended after the date of this document to permit the Buyer and Ingeniq to agree to not comply with or to exclude other provisions of the PPSA, Ingeniq may notify the Buyer that any of these provisions is excluded, or that Ingeniq need not comply with any of these provisions, as notified to the Buyer by Ingeniq ; and8.3.1.1.5. the Buyer agrees not to exercise its rights to make any request of Ingeniq under section 275 of the PPSA, to authorise the disclosure of any information under that section or to waive any duty of confidence that would otherwise permit non-disclosure under that section. 8.3.2. Exercise of rights by Ingeniq If Ingeniq exercises a right, power or remedy in connection with this document, that exercise is taken not to be an exercise of a right, power or remedy under the PPSA unless Ingeniq states otherwise at the time of exercise. However, this clause does not apply to a right, power or remedy which can only be exercised under the PPSA. 8.3.3. No notice required unless mandatory To the extent the law permits, the Buyer waives: 8.3.3.1. its rights to receive any notice that is required by: 8.3.3.1.1. any provision of the PPSA (including a notice of a verification statement); or8.3.3.1.2. any other law before a Ingeniq or Receiver exercises a right, power or remedy; and 8.3.3.2. any time period that must otherwise lapse under any law before a Ingeniq or Receiver exercises a right, power or remedy. If the law which requires a period of notice or a lapse of time cannot be excluded, but the law provides that the period of notice or lapse of time may be agreed, that period or lapse is one (1) day or the minimum period the law allows to be agreed (whichever is the longer). However, nothing in this clause prohibits Ingeniq or any Receiver from giving a notice under the PPSA or any other law. 9. GOODS AND SERVICES TAX 9.1. Goods and Services Tax (GST) will be shown separately in the tax invoice for the sale of the Goods. The amount of GST payable in respect of the supply of the Goods is payable by the Buyer. The Buyer must indemnify Ingeniq in respect of GST paid and payable by Ingeniq for the supply of the Goods to the Buyer. Any amount payable by the Buyer under this clause is payable on demand by Ingeniq whether such demand is by means of invoice or otherwise. 10. CREDIT RETURNS 10.1. The Buyer may return Goods purchased from Ingeniq and receive a credit of the Purchase Price, subject to the following: 10.1.1. the Goods for return must have been issued a Return Authorisation (RA) number; GOODS WILL NOT BE ACCEPTED WITHOUT A RA NUMBER. An RA number can only be issued once the following information is provided: • Product Code • Product Description • Serial number (if applicable) • Invoice number and purchase date • Reason for return All freight charges and insurance for goods being returned are the responsibility of the Buyer. Returned goods not clearly labelled with the allocated RA number will not be accepted, and will be returned to the Buyer at their expense. All goods to be returned must be appropriately packaged. 10.2. The Goods are returned to Ingeniq within seven (7) days of the invoice date; 10.3. The Goods are new and unused; 10.4. The Goods are in their original package which has not been damaged or altered; and 10.5. Ingeniq determines in its sole judgment that the Buyer is in good standing. 10.6. In addition to any restocking fee levied by the Vendor, Ingeniq reserves the right to charge a restocking fee of at least 25% of the sale price of the goods. 11. WARRANTY RETURNS 11.1. Ingeniq will honour the Vendor’s warranty periods beginning from the Ingeniq invoice date. Defective Goods may be returned to Ingeniq subject to: 11.1.1. the Defective Goods for return have been issued a Return Authorisation (RA) number. GOODS WILL NOT BE ACCEPTED WITHOUT A RA NUMBER. An RA number can only be issued once the following information is provided:• Product Code• Product Description• Serial number (if applicable)• Invoice number and purchase date• Fault reportAll freight charges for goods being returned are the responsibility of the customer. Returned goods not clearly labelled with the allocated RA number will not be accepted, and will be returned to the sender at the sender’s expense. All goods to be returned must be appropriately packaged. 11.2. Returned goods must first be diagnosed as faulty before warranty returns will be processed. 11.3. A fee of $185.00 excluding GST shall be charged for Goods returned for repair and tested as ‘no fault found’ (based on the Vendor’s specifications and fault determination for the Goods). 11.4. Defective Goods will be returned to Vendor as per their standard warranty and returned when repaired. 11.5. The Buyer accepts any charges levied by the Vendor to Ingeniq and freight costs associated with the return of Defective Goods 12. REPAIR RETURNS 12.1. The Defective Goods for repair must have been issued a Return Material Authorisation (RA) number. GOODS WILL NOT BE ACCEPTED WITHOUT A RA NUMBER. 12.1.1. An RA number can only be issued once the following information is provided: • Product Code• Product Description• Serial number (if applicable)• Invoice number and purchase date• Fault report 12.2. All freight charges for Goods being returned are the responsibility of the Buyer.. 12.3. Returned Goods not clearly labelled with the allocated RA number will not be accepted, and will be returned to the Buyer at the Buyer’s expense. 12.4. All Goods to be returned must be appropriately packaged to protect the Goods from damage in transit. 12.5. An initial technical inspection is made on all out of warranty goods returned for repair. The technical inspection fee is not less than $150. 12.6. Goods returned for out of warranty repair must be accompanied by an official purchase order for the initial inspection fee and the cost of the repair. Please note the value of repairs to Goods out of warranty is subject to GST. 13. CREDITS 13.1. Credit notes for Goods returned in accordance with our Returns Policy are normally issued within seven (7) days following receipt of goods. 13.2. Where a credit note is available under a then applicable policy of Ingeniq, such adjustments shall be applied against an existing Buyer’s account balances with Ingeniq or converted to a refund. 13.3. Goods suspected of being faulty that are returned for credit will require testing before credit notes can be issued. Where testing cannot be done by Ingeniq Engineers the Goods may need to be returned to the original manufacturer for testing, this may take up to twenty-eight (28) days from return shipment date to manufacturer before we can determine whether a credit note will be issued. 13.4. Requests for refunds are required in writing. For additional security we may request further company and contact information before issuing any refund. All refunds will be made either by cheque, electronic funds transfer to Buyer’s bank account or by applying a credit against the credit card used for the original purchase. The actual method of refund will be in accordance with the payment method used for the original purchase. 13.5. In some circumstances, a replacement product or repair will be offered instead of a full refund. We will consult with you and act in accordance with relevant contracts, statutes and warranties. If we choose to have a product replaced or repaired, we will do this at our cost and return the product or its replacement to you. 14. BUYER DUTIES 14.1. The Buyer will: 14.1.1. give proper consideration and weight to the interests of Ingeniq in all dealings and abide by any reasonable rules or instructions relating to the use, sale or performance of the Goods notified by Ingeniq to the Buyer. 14.1.2. not make any representations or give any warranties or other benefits to the detriment of Ingeniq beyond those contained in Ingeniq's current terms and conditions. 14.1.3. represent and warrant that it will not use the Goods or Services for unlawful purposes. Failure to do so will result in immediate termination of any Orders made by the Buyer. 15. EXPORT RESTRICTIONS 15.1. The Buyer will obtain all licenses, permits and approvals required by any government and will comply with all applicable laws, rules, policies and procedures of the Australian Government. The Buyer will indemnify and hold harmless Ingeniq for any violation or alleged violation by the Buyer of such laws, rules, policies and procedures. 15.2. For goods where the Vendor is domiciled in the United States or the European Union (EU), the Buyer understands and acknowledges that all obligations of Ingeniq to deliver and all the Buyer’s obligations to accept and sell Equipment and sublicense software at locations outside the United States or the EU are subject to applicable export control laws. The Buyer agrees to cooperate in providing the information and assistance requested by the Vendor in connection with export licences and approvals. The Buyer will comply fully with all applicable laws relating to export and re-export of the Goods and the Buyer agrees not to sell any Goods covered by this Agreement to anyone else, if the sale would constitute a violation of any laws or regulations of the United States or the EU. 16. WARRANTIES 16.1. Certain laws imply terms, conditions and warranties (“Prescribed Terms”) into contracts for the supply of goods or services and prohibit the exclusion, restriction or modification of such terms, conditions and warranties. The liability of Ingeniq in respect of a breach of a Prescribed Term is limited, to the extent permissible by law and at the option of Ingeniq: 16.2. In the case of Goods, to the: 16.2.1. replacement of the Goods; or 16.2.2. refund of the Purchase Price paid by the Buyer or issue of a credit adjustment. 16.3. In the case of Services to the: 16.3.1. Supply of the Services again. 16.4. Unless the terms and warranties are included in these Terms and Conditions, all prior discussions, quotations, warranties and Prescribed Terms, to the extent permitted by law, are excluded. 17. DISCLAIMER OF LIABILITY 17.1. The Goods and Services are sold “as is” and Ingeniq disclaims any and all other warranties, whether express or implied, including, without limitation, any implied warranties of merchantability or fitness for a particular purpose, to the extent authorized by law. Without limitation of the foregoing Ingeniq does not expressly warrant that the Goods and Services will meet the Buyer’s requirements or that the operation of the Goods and Services will be uninterrupted or error free. The Buyer assumes responsibility for selecting the Goods and Services to achieve its intended results, and for the results obtained from the Buyer’s use of the Goods and Services. The Buyer shall bear the entire risk as to the quality and the performance of the Goods and Services. 17.2. To the extent permitted by law, Ingeniq will not be liable in contract, tort (including negligence) or otherwise, for any direct, indirect, special, consequential or punitive loss or damages or any loss or damages whatsoever, including (but not limited to) loss of use, data, or profits, arising out of or in connection with: • The use, copying, or display of the contents of the Ingeniq website. • Goods or services supplied by Ingeniq under these Terms and Conditions of Trade. • A failure or omission on the part of Ingeniq to comply with its obligations under these Terms and Conditions of Trade. • Any statements, claims, representations or warranties made by the Buyer relating to the Goods other than as authorised by the Vendors own writings. 18. BUYER INDEMNITY 18.1. The Buyer agrees to indemnify, defend and hold harmless Ingeniq, its directors, managers, employees and the Vendor from and against any claims, liabilities, losses, damages causes of action or injuries, together with costs and expenses resulting from: 18.1.1. Any actions or omissions on the part of the Buyer in distributing or marketing the Goods 18.1.2. Any statements claims, representations or warranties made by the Buyer relating to the Goods other than as authorised by the Vendors own writings. 18.2 The Buyer will neither alter the Goods nor their design or packaging unless required by law and with prior written consent of Ingeniq. In particular the Buyer will not alter or remove warnings about the risks of improper use of the Goods, If the Buyer is in breach of this clause, the Buyer will indemnify Ingeniq within their internal relationship against product liability claims of third parties, provided that the Buyer is responsible for the defect causing liability. 19. VENDOR INDEMNIFICATION 19.1. Where required by the Vendor, Buyer shall also agree to the Vendor’s indemnifications as listed in a separate Vendor specific schedule 20. GENERAL 20.1. These Terms are to be construed in accordance with the laws from time to time in the State of New South Wales. 20.2. All trademarks, brand names and product names remain the property of their respective owners. 20.3. These standard Terms contain all of the terms and conditions of the contract between the parties and may only be varied by agreement in writing between the parties. 20.4. Any conditions found to be void, unenforceable or illegal may, to that extent are severed from the Terms. 20.5. No waiver of any of these Terms or failure to exercise a right or remedy by Ingeniq will be considered to imply or constitute a further waiver by Ingeniq of the same or any other term, condition, right or remedy. 20.6. The Buyer shall not (i) remove, obscure or modify any label or other indication of copyright or other Intellectual Property Rights on the Goods; (ii) duplicate or reproduce any software or written material supplied by Vendor without the explicit written consent of Vendor; nor (iii) sell Goods other than in original, unmodified, unused condition. 20.7. The Buyer shall comply with all laws and regulations, including the payment of all fees and taxes and maintaining all licenses and permits, applicable to this Agreement. 20.8. Buyer shall not use for any purpose other than as contemplated by this Agreement, or divulge to any third party, any trade secrets, processes, techniques, designs, know how or other confidential information provided to Buyer by Ingeniq or Vendor. 21. LEGISLATION 21.1. These terms and conditions are governed by the Personal Property Securities Act 2009 (Cth) as amended from time to time. Any capitalised words use in these terms and conditions but not defined herein shall take on the meaning of such defined words in the Act and if not defined in the Act, then its ordinary meaning. 22. ACCEPTANCE OF TERMS AND CONDITIONS 22.1 Submission of an order by the Buyer via the website, phone, facsimile or email is a deemed acceptance of these Trading Terms and Conditions.

Splunk Enterprise System Administration Training delivered by INGENIQ Splunk Enterprise System Administration The Splunk Enterprise System Administration (Version 9) course is designed for system administrators who are responsible for managing the Splunk Enterprise environment. The Splunk Enterprise System Administration course provides fundamental knowledge of Splunk license manager, indexers and search heads. It covers configuration, management and monitoring core Splunk Enterprise components. Splunk Credit Value : 150 Duration : 12 hours over 2 days Time : 9:00 - 4:00 pm AET *Course discounts apply for Splunk Partners. Please use the currency convertor above to check for course pricing in your local currency. Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! Splunk Enterprise System Administration - Course Topics Splunk Deployment Overview License Management Splunk Apps Splunk Configuration Files Index Management Users, Roles and Authentication Basic Forwarding Distributed Search Course Prerequisites To be successful, students must have completed these Splunk Education course(s) or have equivalent working knowledge: Intro to Splunk Using Fields Intro to Knowledge Objects Creating Knowledge Objects Creating Field Extractions Enriching Data with Lookups Data Models Related Certifications Splunk Enterprise Certified Admin Splunk Enterprise Certified Architect Splunk Certified Enterprise Security Admin Splunk IT Service Intelligence Certified Admin Splunk Enterprise System Administration - Audience Anyone within a technical role who is involved in the management of Splunk within their organisation or are looking to become Splunk certified. Previous attendees have included IT Administrators, DevOps, Security Analysts and Solution Architects. Class Format Instructor-led lecture with labs. Delivered via virtual classroom or at your site After completing Splunk Enterprise System Administration course you will be able to Build and manage a production Splunk environment Administer licences Install and configure forwarders Understand the basics of getting data into Splunk Maintain and optimise indexes Create and manage users & roles Understand Splunk scaling using distributed search and management Splunk Enterprise System Administration - Course Objectives Module 1 – Deploying Splunk Provide an overview of Splunk Identify Splunk Enterprise components Identify the types of Splunk deployments List the steps to install Splunk Use Splunk CLI commands Module 2 – Monitoring Splunk Use Splunk Health Report Enable the Monitoring Console (MC) Use Splunk Assist Use Splunk Diag Module 3 - Licensing Splunk Identify Splunk license types Describe license violations Add and remove licenses Module 4 - Using Configuration Files Describe Splunk configuration directory structure Understand configuration layering process Use btool to examine configuration settings Module 5 - Using Apps Describe Splunk apps and add-ons Install an app on a Splunk instance Manage app accessibility and permissions Module 6 – Creating Indexes Apply a data retention policy Backup data on indexers Delete data from an index Restore frozen data Module 7 – Managing Index Review Splunk Index Management basics Identify data retention recommendations Identify backup recommendations Move and delete index data Describe the use of the Fishbucket Restore a frozen bucket Module 8 – Managing Users Add Splunk users using native authentication Describe user roles in Splunk Create a custom role Manage users in Splunk Module 9 – Configuring Basic Forwarding Identify forwarder configuration steps Configure a Universal Forwarder Understand the Deployment Server Module 10 – Configuring Distributed Search Describe how distributed search works Describe the roles of the search head and search peers Splunk Course Schedules and Timezones Ingeniq Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses usually starts at AEDT 12:00pm or AEST 11:00 am and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) Splunk Enterprise System Administration - Upcoming Courses Splunk Enterprise System Administration V9: Starts December 7 and 8, 2026 Price USD 1,500.00 Splunk Enterprise System Administration V9: Starts November 9 and 10, 2026 Price USD 1,500.00 Splunk Enterprise System Administration V9: Starts October 12 and 13, 2026 Price USD 1,500.00 Splunk Enterprise System Administration V9: Starts September 14 and 15, 2026 Course Closed

Statistical Processing - Splunk Education Single Subject Course Training. Statistical Processing The Splunk Education single-subject course module, Statistical Processing is for power users who want to identify and use transforming commands and eval functions to calculate statistics on their data. Topics will cover data series types, primary transforming commands, mathematical and statistical eval functions, using eval as a function, and the rename and sort commands. Splunk Credit Value : 50 Duration : 3 hours Time : 9:00 am - 12:00 pm AEST Please use the currency convertor above to check for course pricing in your local currency. Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! The instructor was very responsive to questions and queries both private and Communal.. Final module collaborative lab walkthrough on screen was particularly helpful. Participant, Splunk Fundamentals 2 Statistical Processing - Course Topics What is Data Series Transforming Data Manipulating Data with eval Formatting Data Class Format Instructor-led lecture with labs. Delivered via virtual classroom or at your site Course Prerequisites To be successful, students must have completed these Splunk Education course(s) or have equivalent working knowledge: Intro to Splunk Using Fields Visualizations Working with Time Statistical Processing - Audience Search Expert learning path Statistical Processing - Course Objectives Topic 1 – What is a Data Series Introduce data series Explore the difference between single-series, multi-series, and time series data series Topic 2 – Transforming Data Use the chart, timechart, top, rare, and stats commands to transform events into data tables Explore search modes and their effect on search results Topic 3 - Manipulating Data with eval Command Understand the eval command Explore and perform calculations using mathematical and statistical eval functions Perform calculations and concatenations on field values Use the eval command as a function with the stats command Topic 4 – Formatting Data Use the rename command Use the sort command Splunk Course Schedules and Timezones Splunk Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses usually starts at AEDT 12:00pm or AEST 11:00 am and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) Statistical Processing - Upcoming Schedule We don’t have any products to show here right now.

Administering Splunk Enterprise Security Training delivered by INGENIQ Administering Splunk Enterprise Security The Administering Splunk Enterprise Security course prepares architects and systems administrators to install, configure and manage Splunk Enterprise Security. The Administering Splunk Enterprise Security covers ES event processing and normalization, deployment requirements, technology add-ons, settings, risk analysis settings, threat intelligence and protocol intelligence configuration, and customizations. Splunk Credit Value : 150 Duration : 13.5 hours over 3 days Time : 9:00 am - 1:30 pm AEST *Course discounts apply for Splunk Partners. Please use the currency convertor above to check for course pricing in your local currency. Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! Excellent Trainer, Have had the same instructor twice now & he is one of the best i have had. Thank you! Participant, Splunk Fundamentals 3 Administering Splunk Enterprise Security - Course Topics Monitoring and Investigation Security Intelligence Forensics, Glass Tables and Navigation Control ES Deployment Installation and Configuration Validating ES Data Custom Add-ons Tuning Correlation Searches Creating Correlation Searches Lookups and Identity Management Threat Intelligence Framework Course Prerequisites To be successful, students must have completed these Splunk Education course(s) or have equivalent working knowledge: Using Splunk Enterprise Security What is Splunk? Intro to Splunk Using Fields Introduction to Knowledge Objects Creating Knowledge Objects Creating Field Extractions Enriching Data with Lookups Data Models Splunk Enterprise System Administration Splunk Enterprise Data Administration Administering Splunk Enterprise Security - Audience Anyone whose role includes deploying or configuring the Splunk App for Enterprise Security. Previous attendees have included IT Operations, Security Operations Centre (SOC) staff, Pre-Sales Consultants, Security Sales Engineers and Security Architects. Class Format Instructor-led lecture with labs. Delivered via virtual classroom or at your site Related Certifications Splunk Certified Enterprise Security Admin Splunk Core Certified Consultant After completing Administering Splunk Enterprise Security course you will be able to Examine deployment topologies, requirements and checklist. Generate configurations and test new installations. Validate data against the Common Information Model. Configure ES inputs and Technology Add-ons. Describe and customize correlations searches. Configure asset/identify lookups and new threat feeds. Create your own add on for custom data sources. Audit an ES installation for completeness. Administering Splunk Enterprise Security - Course Objectives Module 1 – ES Introduction Overview of ES features and concepts Module 2 – Monitoring and Investigation Security Posture Incident Review Notable events management Module 3 – Security Intelligence Overview of security intel tools Module 4 – Forensics, Glass Tables and Navigation Control Explore forensics dashboards Examine glass tables Configure navigation and dashboard permissions Module 5 – ES Deployment Identify deployment topologies Examine the deployment checklist Understand indexing strategy for ES Understand ES Data Models Module 6 – Installation and Configuration Prepare a Splunk environment for installation Download and install ES on a search head Test a new install Understand ES Splunk user accounts and roles Post-install configuration tasks Module 7 – Validating ES Data Plan ES inputs Configure technology add-ons Module 8 – Custom Add-ons Design a new add-on for custom data Use the Add-on Builder to build a new add-on Module 9 – Tuning Correlation Searches Configure correlation search scheduling and sensitivity Tune ES correlation searches Module 10 – Creating Correlation Searches Create a custom correlation search Configuring adaptive responses Search export/import Module 11 – Lookups and Identity Management Identify ES-specific lookups Understand and configure lookup lists Module 12–Threat Intelligence Framework Understand and configure threat intelligence Configure user activity analysis Splunk Course Schedules and Timezones Ingeniq Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses usually starts at AEDT 12:00pm or AEST 11:00 am and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) Administering Splunk Enterprise Security - Upcoming Courses Administering Splunk Enterprise Security : Starts November 18 to 20, 2026 Price USD 1,500.00 Administering Splunk Enterprise Security : Starts October 21 to 23, 2026 Price USD 1,500.00 Administering Splunk Enterprise Security : Starts September 16 to 18, 2026 Course Closed

Splunk Education, Training and Professional Services Provider Manual Instrumentation with Splunk APM Summary This single subject course targeted to developers enables you to manually instrument your applications to send traces to Splunk APM. Through in-person discussions and hands-on activities, learn to manually instrument applications to create spans and add metadata to spans. This course assumes familiarity with navigating Splunk APM which is covered in the course Using Splunk Application Performance Monitoring. This lab-oriented class is designed to help you learn the fundamentals of instrumenting your code to send in traces and trace metadata. All hands-on labs are in Python and Java. Description Instrumentation Overview Manually Instrument Applications to Send Traces Add Metadata to your Traces Instrumentation Interoperability Enjoyable presenter and easy to understand for an intermediate Splunk user pursuing Admin certification. Thanks from Massachusetts! Participant, Splunk Fundamentals 2 Splunk Credit Value: 50 Duration: 3 hours Time: 11am - 2 pm AEST Objectives Topic 1 – Instrumentation Overview Describe what instrumentation is Describe what traces and spans are Topic 2 – Manually Instrument Applications to Send Traces Describe instrumentation options Manually create spans Add span tags Topic 3 – Instrumentation Interoperability Describe interoperability Enable interoperability between applications Prerequisites To be successful, students must have completed these Splunk Education course(s) or have equivalent working knowledge: Using Splunk Application Performance Monitoring Familiarity with using the command line terminal Additional courses and/or knowledge in these areas are also highly recommended: Basic knowledge of programming languages (e.g. Python, Java, Node.js) Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! Splunk Course Schedules and Timezones Ingeniq Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm (4.5 hour sessions over 1 or more days) and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses start at AEDT 12:00pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West)

Splunk Education, Training and Professional Services Provider Advanced SOAR Implementation Summary This 13.5 hour course is intended for experienced SOAR consultants who will be responsible for complex SOAR solution development, and will prepare the attendee to integrate SOAR with Splunk as well as develop playbooks requiring custom coding and REST API usage. Potential attendees have received a passing grade in all prerequisite courses, and must ensure they can devote all of their attention to the class, as the course work is very challenging. Students will develop a custom solution with SOAR, Splunk and custom Python code. The labs provide requirements for the solution; the student must plan and execute the development. This will require thoughtful focus, experimentation and problem-solving skills. Description Using external search in SOAR Sending events from Splunk to SOAR Updating Splunk events from SOAR Running SOAR reports on Splunk Executing SOAR playbooks from Splunk Searching Splunk from SOAR playbooks Writing custom code in SOAR playbooks Using the SOAR REST API in Phantom playbooks Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! Enjoyable presenter and easy to understand for an intermediate Splunk user pursuing Admin certification. Thanks from Massachusetts! Participant, Splunk Fundamentals 2 Splunk Credit Value: 150 Duration: 3 days Time: 11am – 3.30pm AEST Objectives Module 1 – Implementing Splunk and SOAR Review of SOAR UI and concepts Describe interactions between Splunk and SOAR Identify key concepts and data flows Pre-requisites for integration Module 2 – Configuring External Splunk Search Describe the benefits of externalizing search to Splunk Configure the SOAR instance for externalization Configure the Splunk instance for externalization Use the Splunk app for SOAR Reporting Module 3 – Sending Splunk Events to SOAR Configure the SOAR Add-on for Splunk Map CIM fields to CEF Send Enterprise Security notables to SOAR Automatically trigger SOAR playbooks for Splunk notables Module 4 – Accessing Splunk from SOAR Install and configure the SOAR App for Splunk Ingest Splunk events into SOAR Use Splunk search from playbooks Update Splunk notable events Module 5 – Custom Coding in Playbooks SOAR coding best practices Writing, using and managing custom functions Using the SOAR API in custom code Store and retrieve persistent data Module 6 – Using SOAR REST Use Django queries to search for data in SOAR Use REST to access SOAR data Use the HTTP app to execute REST from playbooks Prerequisites Attendees for this class must ensure that they meet all course prerequisites. This is a challenging, advanced class that draws on technical knowledge from many areas in Splunk and SOAR, and the demanding labs and course schedule leave little time to learn the basics. To be successful, students should have a solid understanding of the following: Experience with Python programming Administering Splunk SOAR Developing Splunk SOAR Playbooks Enterprise Splunk Data Administration Enterprise Splunk System Administration Either Using or Administering Splunk Enterprise Security Splunk Course Schedules and Timezones Ingeniq Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm (4.5 hour sessions over 1 or more days) and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses start at AEDT 12:00pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West)

Leveraging Lookups and Subsearches - Splunk Education Single Subject Course Training. Leveraging Lookups and Subsearches The Splunk Education single-subject course module, Leveraging Lookups and Subsearches is designed for power users who want to learn how to use lookups and subsearches to enrich their results. Topics will focus on lookup commands and explore how to use subsearches to correlate and filter data from multiple sources. Splunk Credit Value : 50 Duration : 3 hours Time : 9:00 am - 12:00 pm AEST Please use the currency convertor above to check for course pricing in your local currency. Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! The instructor was very responsive to questions and queries both private and Communal.. Final module collaborative lab walkthrough on screen was particularly helpful. Participant, Splunk Fundamentals 2 Leveraging Lookups and Subsearches - Course Topics Using Lookup Commands Adding a Subsearch Using the return Command Class Format Instructor-led lecture with labs. Delivered via virtual classroom or at your site Course Prerequisites To be successful, students must have completed these Splunk Education course(s) or have equivalent working knowledge: Intro to Splunk Using Fields Visualizations Working with Time Statistical Processing Comparing Values Result Modification Scheduling Reports and Alerts Introduction to Dashboards Leveraging Lookups and Subsearches - Audience Search Expert learning path Leveraging Lookups and Subsearches - Course Objectives Topic 1 – Using Lookup Commands Understand lookups Use the inputlookup command to search lookup files Use the lookup command to invoke field value lookups Invoke geospatial lookups in search Topic 2 – Adding a Subsearch Define subsearch Use subsearch to filter results Identify when to use subsearch Understand subsearch limitations and alternatives Topic 3 - Using the return Command Use the return command to pass values from a subsearch Compare the return and fields commands Splunk Course Schedules and Timezones Splunk Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses usually starts at AEDT 12:00pm or AEST 11:00 am and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) Leveraging Lookups and Subsearches - Upcoming Schedule We don’t have any products to show here right now.

Splunk Education, Training and Professional Services Provider Developing with Splunk's REST API 8.2 Summary This nine hour course teaches you how to use the Splunk REST API to accomplish tasks interacting with Splunk servers. In this course, you will use curl and Python to send requests to Splunk REST endpoints and will learn how to parse and use the results. The course will show you how to create a variety of objects in Splunk, how to change properties, work with and apply security to Splunk objects, run different types of searches and parse its results, ingest data using the HTTP Event Collector and manipulate collections and KV Stores. Description Introduction to the Splunk REST API Namespaces and Object Management Parsing Output Oneshot Searching Normal and Export Searching Advanced Searching and Job Management Working with KV Stores Using the HTTP Event Collector Enjoyable presenter and easy to understand for an intermediate Splunk user pursuing Admin certification. Thanks from Massachusetts! Participant, Splunk Fundamentals 2 Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! Splunk Credit Value: 100 Duration: 2 days Time: 11am – 3.30 pm AEST Objectives Objectives Module 1 – Introduction to the Splunk REST API Use the proper case in searches Introduce the Splunk development environment and its REST endpoints Know to which Splunk server you should be connected to accomplish a desired task Authenticate with a Splunk server, with and without a session Module 2 – Namespaces and Object Managemen t Understand general CRUD with the REST API Understand how a namespace affects access to objects Use the servicesNS node and a namespace to access objects Understand how the sharing level and access control lists affect access to objects Modify the sharing level and the permissions on an object Using the rest command Module 3 – Parsing Output Understand the general structure of Atom-based output Format Atom-based JSON output Write code that uses the API and parse responses Module 4 – Oneshot Searches Review search language syntax and search best practices Execute a oneshot search Execute an export search Get search results Module 5–Normal and Export Searching Identify types of searches Create normal and export sea rches Get:Search results Search job status and other search job properties Module 6 – Advanced Searching and Job Management Executing a real time search Working with large results sets Working with saved searches Managing search jobs Module 7 – Working with the KV Store Define the function of a KV Store Perform CRUD operation s on collections and records Define collections and records Module 8 – Using the HTTP Event Collector (HEC) Create and use HEC tokens Input data using HEC endpoints Get indexer event acknowledgements Prerequisites To be successful, students should have a solid understanding of the following courses: Splunk Fundamentals 1 Splunk Fundamental s 2 OR the following single-subject courses: What Is Splunk? Intro to Splunk Using Fields Working with Time Statistical Processing Search Under the Hood Introduction to Knowledge Objects Students should also have completed the following course: Splunk Enterprise Data Administration (recommended) Splunk Course Schedules and Timezones Ingeniq Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm (4.5 hour sessions over 1 or more days) and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses start at AEDT 12:00pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West)

Using Splunk IT Service Intelligence Training delivered by INGENIQ Using Splunk IT Service Intelligence The Using Splunk IT Service Intelligence course prepares analyst users who want to use Splunk IT Service Intelligence to manage, analyze, and optimize their IT services. The content of this course is included in the 4 day Implementing Splunk IT Service Intelligence Course. Splunk Credit Value : 50 Duration : 4.5 hours over 1 day Time : 9:00 am – 1:30 pm AEST (GMT +10) *Course discounts apply for Splunk Partners. Please use the currency convertor above to check for course pricing in your local currency. Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! Great attitude to the students, encourage questions. always attempt his best to answer them. there is a lot of material but he strive through it. willingness to go beyond to do his job, well done. Participant, Cluster Administration Using Splunk IT Service Intelligence - Course Topics ITSI features and User Interface Creating Glass Tables Managing Notable Events Investigating with Deep Dives Course Prerequisites To be successful, students must have completed these Splunk Education course(s) or have equivalent working knowledge: Intro to Splunk Optionally: Using Fields Visualizations Working with Time Introduction to Dashboards Related Certifications None Using Splunk IT Service Intelligence - Audience Anyone who wants to use Splunk IT Service Intelligence to manage, analyze, and optimize their IT services. Those who will implement Splunk IT Service Intelligence, please enroll in Implementing Splunk IT Service Intelligence instead. Class Format Instructor-led lecture with labs. Delivered via virtual classroom or at your site After completing Using Splunk IT Service Intelligence course you will be able to Using Splunk IT Service Intelligence - Course Objectives Module 1 - Introducing ITSI Identify what ITSI does Describe reasons for using ITSI Examine the ITSI user interface Module 2 - Glass Tables Describe glass tables Use glass tables Design glass tables Configure glass tables Module 3 - Managing Notable Events Define key notable events terms and their relationships Describe examples of multi – KPI Alerts Describe the notable events workflow Work with notable events Module 4 - Investigating Issues with Deep Dives Describe deep dive concepts and their relationships Use default deep dives Create and customize new custom deep dives Add and configure swim lanes Custom views Describe effective workflows for troubleshooting Splunk Course Schedules and Timezones Ingeniq Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses usually starts at AEDT 12:00pm or AEST 11:00 am and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) Using Splunk IT Service Intelligence - Upcoming Courses We don’t have any products to show here right now.

Splunk Enterprise Cluster Administration Training delivered by INGENIQ Splunk Enterprise Cluster Administration The Splunk Enterprise Cluster Administration course is for an experienced Splunk Enterprise administrator who is new to Splunk Clusters. The course provides the fundamental knowledge of deploying and managing Splunk Enterprise in a clustered environment. The Splunk Enterprise Cluster Administration course covers installation, configuration, management and monitoring of Splunk clusters. While Splunk Clusters are supported in Windows environments, the class lab environment is running on Linux instances only. Splunk Credit Value : 150 Duration : 13.5 hours over 3 days Time : 9:00 am - 1:30 pm AEST *Course discounts apply for Splunk Partners. Please use the currency convertor above to check for course pricing in your local currency. Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! This course was very interactive . Logging into Splunk and showing how to do it, giving examples and showing the ins and outs of ES actually makes a huge difference. Well done to the instructor. Participant, Using Splunk Enterprise Security Splunk Enterprise Cluster Administration - Course Topics Large-scale Splunk Deployment Overview Single-site (high-availability) Indexer Cluster Multisite (disaster-recovery) Indexer Cluster Indexer Cluster Management and Administration Indexer Discovery Forwarder Configuration Search Head Cluster Search Head Cluster Management and Administration KV Store Collection and Lookup Management Course Prerequisites To be successful, students must have completed these Splunk Education course(s) or have equivalent working knowledge: Intro to Splunk Using Fields Introduction to Knowledge Objects Creating Knowledge Objects Creating Field Extractions Splunk Enterprise System Administration Splunk Enterprise Data Administration Troubleshooting Splunk Enterprise Additional courses and/or knowledge in these areas are also highly recommended: Enriching Data with Lookups Data Models Splunk Enterprise Cluster Administration - Audience Anyone involved in the design, deployment and administration of Splunk within organisations. Previous attendees have included Consultants, IT Administrators, Pre-Sales Engineers and Solution Architects. Class Format Instructor-led lecture with labs. Delivered via virtual classroom or at your site Related Certifications Splunk Enterprise Certified Architect After completing Splunk Enterprise Cluster Administration course you will be able to Configure Splunk for High Availability and Disaster Recovery Set up search head clustering Configure and manage clusters Identify troubles within a clustered environment Add and remove cluster nodes Module 1 – Large-scale Splunk Deployment Overview Factors that affecting deployment design Splunk cluster overview License Master Module 2 – Single-site Indexer Cluster Splunk single-site indexer cluster configuration Optional single-site indexer cluster configurations Module 3 – Multisite Indexer Cluster Splunk multi-site indexer cluster overview Multi-site indexer cluster configuration Optional multi-site indexer cluster configurations Cluster migration and upgrade considerations Module 4 – Indexer Cluster Management and Administration Indexer cluster storage utilization options Peer offline and decommission Master app bundles Monitoring Console for indexer cluster environment Module 5 – Forwarder Management Indexer discovery Optional indexer discovery configurations Module 6 – Search Head Cluster Splunk search head cluster overview Search head cluster configuration Module 7 – Search Head Cluster Management and Administration Search head cluster deployer Captaincy transfer Search head member addition and decommissioning Monitoring Console for Search Head Cluster Module 8 – KV Store Collection and Lookup Management KV Store collection in Splunk clusters KV Store monitoring with Monitoring Console Splunk Enterprise Cluster Administration - Course Objectives Splunk Course Schedules and Timezones Ingeniq Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses usually starts at AEDT 12:00pm or AEST 11:00 am and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) Splunk Enterprise Cluster Administration - Upcoming Courses Splunk Enterprise Cluster Administration: Starts November 23 to 25, 2026 Price USD 1,500.00 Splunk Enterprise Cluster Administration: Starts October 26 to 28, 2026 Price USD 1,500.00 Splunk Enterprise Cluster Administration: Starts September 21 to 23, 2026 Course Closed

Splunk Education Single Subject Course Training. Ingeniq is the Authorised Splunk Training Provider for Australia and New Zealand and is certified to deliver the complete range of Splunk courses and offer both Instructor led public and dedicated virtual and face-to-face courses. Splunk Education - Single Subject Courses Splunk single-subject courses are available for registration. Splunk Education single-subject Instructor led courses are smaller portions of Splunk training courses and take approx. 3 hours. These will help you ramp your Splunk Learning quickly and efficiently and they are available as live Instructor-Led Training (ILT) or self-paced eLearning. Splunk Education single-subject training courses contribute to Splunk certifications. If you have started your Splunk training journey with the multi-subject courses and would like help defining the next steps our Education Consultants can help - call us or email at sales@ingeniq.com.au and we'll be in touch. Call us on 1300 245 802 To see the Single-subject to Multi-subject course mapping relationship, please refer to the Mapping column on the far right. Course Name Price Buy Now Learning Path Course Mapping What is Splunk? Free video eLearning Free eLearning Knowledge Manager , Search Expert Splunk Fundamentals 1 Intro to Splunk Free video eLearning Free eLearning Knowledge Manager , Search Expert Splunk Fundamentals 1 Scheduling Reports and Alerts Free video eLearning $500 or 1 credit Free eLearning , eLearning with Labs Search Expert Splunk Fundamentals 1 Using Fields $500 or 1 credit View Schedule Knowledge Manager , Search Expert Splunk Fundamentals 1 , Splunk Fundamentals 3 Visualisations Free video eLearning $500 or 1 credit Free eLearning , eLearning with Labs Search Expert Splunk Fundamentals 1 , Splunk Fundamentals 2 Working with Time $500 or 1 credit View Schedule Search Expert Splunk Fundamentals 2 , Splunk Fundamentals 3 , Advanced Searching and Reporting Statistical Processing $500 or 1 credit View Schedule Search Expert Splunk Fundamentals 2 Comparing Values $500 or 1 credit View Schedule Search Expert Splunk Fundamentals 3 Result Modification $500 or 1 credit View Schedule Search Expert Splunk Fundamentals 3 , Advanced Searching & Reporting Leveraging Lookups and Subsearches $500 or 1 credit View Schedule Search Expert Splunk Fundamentals 3 , Advanced Searching & Reporting Correlation Analysis $500 or 1 credit View Schedule Search Expert Splunk Fundamentals 2 , Advanced Searching & Reporting Search Under the Hood Free video eLearning $500 or 1 credit Free eLearning , eLearning with Labs Search Expert Splunk Fundamentals 2 , Splunk Fundamentals 3 , Advanced Searching & Reporting Multivalue Fields $500 or 1 credit View Schedule Search Expert Splunk Fundamentals 3 , Advanced Searching & Reporting Introduction to Knowledge Objects Free video eLearning Free eLearning Knowledge Manager Splunk Fundamentals 2 Creating Knowledge Objects $500 or 1 credit View Schedule Knowledge Manager Splunk Fundamentals 2 Creating Field Extractions $500 or 1 credit View Schedule Knowledge Manager Splunk Fundamentals 2 , Splunk Fundamentals 3 Enriching Data with Lookups $500 or 1 credit View Schedule Knowledge Manager Splunk Fundamentals 3 Data Models $500 or 1 credit View Schedule Knowledge Manager Splunk Fundamentals 2 , Splunk Fundamentals 3 Introduction to Dashboards $500 or 1 credit View Schedule Knowledge Manager Creating Dashboards Dynamic Dashboards $500 or 1 credit View Schedule Knowledge Manager Creating Dashboards Creating Maps $500 or 1 credit View Schedule Knowledge Manager Creating Dashboards Search Optimisation $500 or 1 credit View Schedule Knowledge Expert, Search Expert Splunk Fundamentals 3 Click on Read more to learn more about each Single Subject Course Training module and the course objectives. What is Splunk? This Splunk training course introduces students to what machine data is and how Splunk can leverage operational intelligence to investigate and respond to incidents in their organizations. Visit Splunk Website Intro to Splunk This Splunk training course teaches students how to use Splunk to create reports and dashboards and explore events using Splunk's Search Processing Language. Students will learn the basics of Splunk's architecture, user roles, and how to navigate the Splunk Web interface to create robust searches, reports, visualizations, and dashboards Visit Splunk Website Using Fields This Splunk training course is for power users who want to learn about fields and how to use fields in searches. Topics will focus on explaining the role of fields in searches, field discovery, using fields in searches, and the difference between persistent and temporary fields. The last topic will introduce how fields from other data sources can be used to enrich search results. Read More Intro to Knowledge Objects This Splunk training course teaches students about how different types of knowledge objects to extract additional insights from their data. Students will learn the basics of how to create knowledge objects, define their settings, edit, and manage existing knowledge objects. Visit Splunk Website Creating Knowledge Objects This Splunk training course is for knowledge managers who want to learn how to create knowledge objects for their search environment using the Splunk web interface. Topics will cover types of knowledge objects, the search-time operation sequence, and the processes for creating event types, workflow actions, tags, aliases, search macros, and calculated fields. Read More Creating Field Extractions This Splunk training course is for knowledge managers who want to learn about field extraction and the Field Extractor (FX) utility. Topics will cover when certain fields are extracted and how to use the FX to create regex and delimited field extractions. Read More Enriching Data with Lookups This Splunk training course is for knowledge managers who want to use lookups to enrich their search environment. Topics will introduce lookup types and cover how to upload and define lookups, create automatic lookups, and use advanced lookup options. Additionally, students will learn how to verify lookup contents in search and review lookup best practices. Read More Data Models This Splunk training course is for knowledge managers who want to learn how to create and accelerate data models. Topics will cover datasets, designing data models, using the Pivot editor, and accelerating data models. Read More Introduction to Dashboards This Splunk training course is designed for power users who want to learn best practices for building dashboards in the Dashboard Studio. It focuses on dashboard creation, including prototyping, the dashboard definition, layout types, adding visualizations, and dynamic coloring. Read More Dynamic Dashboards This Splunk training course module is designed for power users who want to learn best practices for building dashboards in the Dashboard Studio. It focuses on creating inputs, chain searches, event annotations, and improving dashboard performance. Read More Creating Maps This Splunk training Course helps you understand more about Choropleth maps. These maps have specific data and component requirements. A search uses the data and components to generate a choropleth map. Read More Scheduling Reports and Alerts This Splunk training course teaches students how to use scheduled reports and alerts to automate processes in their organization. Students will create, manage, and schedule reports and alerts, and use alert actions to further respond to incidents as they occur. Visit Splunk Website Visualisations This Splunk training course teaches students how to use scheduled reports and alerts to automate processes in their organization. Students will create, manage, and schedule reports and alerts, and use alert actions to further respond to incidents as they occur. Visit Splunk Website Working with Time This Splunk training course is for power users who want to become experts at using time in searches. Topics will focus on searching and formatting time in addition to using time commands and working with time zones. Read More Statistical Processing This Splunk training course is for power users who want to identify and use transforming commands and eval functions to calculate statistics on their data. Topics will cover data series types, primary transforming commands, mathematical and statistical eval functions, using eval as a function, and the rename and sort commands. Read More Comparing Values This Splunk training course is for power users who want to learn how to compare field values using eval functions and eval expressions. Topics will focus on using the comparison and conditional functions of the eval command, and using eval expressions with the field format and where commands. Read More Result Modification This Splunk training course is for power users who want to use commands to manipulate output and normalize data. Topics will focus on specific commands for manipulating fields and field values, modifying result sets, and managing missing data. Additionally, students will learn how to use specific eval command functions to normalize fields and field values across multiple data sources. Read More Leveraging Lookups and Subsearches This Splunk training course is designed for power users who want to learn how to use lookups and sub searches to enrich their results. Topics will focus on lookup commands and explore how to use sub searches to correlate and filter data from multiple sources. Read More Correlation Analysis This Splunk training course is for power users who want to learn how to calculate co-occurrence between fields and analyze data from multiple datasets. Topics will focus on the transaction, append, appendcols, union, and join commands. Read More Search Under the Hood This Splunk training course gives students additional insight into how Splunk processes searches. Students will learn about Splunk architecture, how components of a search are broken down and distributed across the pipeline, and how to troubleshoot searches when results are not returning as expected. Visit Splunk Website Multivalue Fields This Splunk training course is for power users who want to become experts on searching and manipulating multivalue data. Topics will focus on using multivalue eval functions and multivalue commands to create, evaluate, and analyze multivalue data. Read More Search Optimisation This Splunk training course is for power users who want to improve search performance. Topics will cover how search modes affect performance, how to create an efficient basic search, how to accelerate reports and data models, and how to use the tstats command to quickly query data. Read More One of the best trainers I've had - keeps content relevant & explains the tasks in easily understood language. Extremely knowledgeable in all fields relating to the content. Well paced & accommodated to everyone's questions & progress. Participant, Splunk Enterprise Data Administration