Participant, Splunk Enterprise Data Administration Implementing Splunk SmartStore - Course Topics Introduction site Course Prerequisites Fundamentals 1 (Required) Splunk System Administration (Required) Splunk Data Benefits of SmartStore other than cost savings How to implement and troubleshoot Smartstore How to Migrate data SmartStore SmartStore requirements and restrictions Indexing in SmartStore Searching in SmartStore Module Dates and times displayed for each course are relative to Australian Eastern Time (AET).

Comparing Values The Splunk Education single-subject course module, Comparing Values is for power users Final module collaborative lab walkthrough on screen was particularly helpful. Filtering with where Using Fields in Searches Comparing Temporary versus Persistent Fields Enriching Data fields with the eval command Extract temporary fields with the erex and rex commands Topic 5 – Enriching Data Understand how fields from lookups, calculated fields, field aliases, and field extractions enrich data

SOAR concepts Initial configuration Apps and assets Configuring automation User management Ingesting data configure SOAR (Phantom) Configure apps, assets, access control and manage playbooks Identify and onboard data artifacts, and tags Manage investigations with actions and playbooks Use workbooks and case management Module 2 – Apps, Assets and Playbooks Add and configure apps and assets Manage playbooks Ingesting Data Labels and tags Event settings Module 3 – Customisation and Monitoring Create custom severity levels Create

Data quality Ingeniq takes reasonable steps to make certain that any personal information held is accurate Data security To ensure that personal information is protected Ingeniq have implemented industry standard Ingeniq will not manage any identified data for this purpose. A cookie is a small amount of data that is transferred to your browser by a Web server and can only be The cookies will not contain any identified data, and we do not use cookies for marketing, promotional

and apply security to Splunk objects, run different types of searches and parse its results, ingest data Splunk Credit Value: 100 Duration: 2 days Time: 11am – 3.30 pm AEST Objectives Objectives Module 1 – 8 – Using the HTTP Event Collector (HEC) Create and use HEC tokens Input data using HEC endpoints Get Introduction to Knowledge Objects Students should also have completed the following course: Splunk Enterprise Data Dates and times displayed for each course are relative to Australian Eastern Time (AET).

Participant, Splunk Enterprise Data Administration

Unlock the power of data with our exclusive Splunk Credits! Drive insights and efficiency. Training Unit Policies Training units will expire at 12:01 AM Eastern Time on the specified expiration date Instructor-led and dedicated classes paid for with training units must begin before the units' expiration date Scroll down to choose your preferred date, and click “Add to cart” when ready. Participant, Splunk Enterprise Data Administration

Participant, Splunk Enterprise Data Administration

Participant, Splunk Enterprise Data Administration

Participant, Splunk Enterprise Data Administration

Up-to-Date Training Stay current with Splunk’s newest features, tools and best practices. Splunk Enterprise & Splunk Cloud For teams responsible for searching, dashboards, data onboarding and Recommended Course Sequence: Foundational Splunk Modules View course System Administration View course Data Administration View course Architecting Splunk Deployments View course Splunk Enterprise Security View Course Dates Contact Us

Participant, Splunk Enterprise Data Administration