Search this site

Splunk Education, Training and Professional Services Provider Learning Tracks Certification Tracks provide comprehensive education for Splunk customer and partner personnel according to their areas of responsibility. Classes are designed for specific roles such as User, Splunk Administrator, Application Developer or Architect. Power Users The Ingeniq learning path for power users will not only help you to search, create alerts, rich reports and visualisations but also be able to create and manage knowledge objects used across your organisation. Explore Track App Developers Harness the power of Splunk’s Web Framework. Create rich, interactive dashboards and forms and package Splunk knowledge objects for distribution across your organisation. Explore Track Enterprise Security End Users This path prepares security practitioners to use splunk Enterprise Security (ES). Attendees will use ES to identify and track security incidents, analyse security risks, use predictive analytics and threat discovery. Explore Track Architects Learn concepts and best practices for sizing, scaling, and deploying Splunk across your organisation. These classes prepare you to design and implement a Splunk distributed deployment. Explore Track Splunk Enterprise Administrators Whether you’re responsible for a single Splunk instance or a massive distributed deployment, our Administrator curriculum teaches you the concepts, tasks, and best practices to keep your Splunk easy. Explore Track Enterprise Security Administrators Learn to install, configure, manage, and use the Splunk App for Enterprise Security. This path is intended for Splunk Administrators that manage Splunk Enterprise Security deployments. Explore Track One of the best trainers I've had - keeps content relevant & explains the tasks in easily understood language. Extremely knowledgeable in all fields relating to the content. Well paced & accommodated to everyone's questions & progress. Participant, Splunk Enterprise Data Administration

Creating Field Extractions - Splunk Education Single Subject Course Training. Creating Field Extractions The Splunk Education single-subject course module, Creating Field Extractions is for knowledge managers who want to learn about field extraction and the Field Extractor (FX) utility. Topics will cover when certain fields are extracted and how to use the FX to create regex and delimited field extractions. Splunk Credit Value : 50 Duration : 3 hours Time : 9:00 am - 12:00 pm AEST Please use the currency convertor above to check for course pricing in your local currency. Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! The instructor was very responsive to questions and queries both private and Communal.. Final module collaborative lab walkthrough on screen was particularly helpful. Participant, Splunk Fundamentals 2 Creating Field Extractions - Course Topics Using the Field Extractor Creating Regex Field Extractions Creating Delimited Field Extractions Class Format Instructor-led lecture with labs. Delivered via virtual classroom or at your site Course Prerequisites To be successful, students must have completed these Splunk Education course(s) or have equivalent working knowledge: How Splunk works Knowledge objects Creating Field Extractions - Audience Knowledge Manager learning path. Creating Field Extractions - Course Objectives Topic 1 – Using the Field Extractor Understand types of extracted fields and when they are extracted Explore the Splunk Web Field Extractor (FX) Topic 2 – Creating Regex Field Extractions Identify basics of regular expressions (regex) Understand the regex field extraction workflow Edit regex for field extractions Topic 3 - Creating Delimited Field Extractions Identify delimited field values in event data Understand the delimited field extraction workflow Splunk Course Schedules and Timezones Splunk Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses usually starts at AEDT 12:00pm or AEST 11:00 am and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) Creating Field Extractions - Upcoming Schedule We don’t have any products to show here right now.

Advanced Power User | Splunk Training Pack delivered by INGENIQ Splunk Advanced Power User Splunk Training Pack#1 Splunk Advanced Power User Learn more, for less.. Ingeniq Splunk Training Packs are a collections of courses that when purchased together qualify for discounts of up to 25%. Splunk Training Packs apply to all Training Tracks and Certifications – in fact to any combination of courses purchased together from Ingeniq. Buy Splunk Training Pack#1 and you’ll sit all the courses you need to be certified as a Splunk Advanced Power User. Splunk Core Certified Advanced Power Users have greater depths of knowledge and skills in complex searching and reporting commands, advanced use cases of knowledge objects, and best practices for building dashboards and forms. Add-On any combination of courses to your Splunk training pack purchase and they’ll qualify for discounts too. Call our Training Consultants now on 1300 245 802 or email sales@ingeniq.com.au to have this training pack tailored to you or your team's requirements. Splunk Training Pack Courses Splunk Fundamentals 3 This course runs over 4 days and focuses on additional search commands as well as advanced use of knowledge objects. Major topics include advanced statistics and eval commands, advanced lookup topics, advanced alert actions, using regex and erex to extract fields, using spath to work with self-referencing data, creating nested macros and macros with event types, accelerating reports and data models. Advanced Searching and Reporting This 13.5 hour Splunk course focuses on more advanced search and reporting commands. Scenario-based examples and hands-on challenges enable users to create robust searches, reports, and charts. Students are coached step by step through complex searches to produce final results. Cert Exam - Splunk Advanced Power User [USD125] There are three ways to purchase a PearsonVUE registration voucher: Directly from PearsonVUE From Splunk (as an individual) From Splunk (as an account) Full instructions below. Addon & Save!! Splunk Fundamentals 2 This course focuses on searching and reporting commands as well as on the creation of knowledge objects. Major topics include using transforming commands and visualizations, filtering and formatting results, correlating events, creating knowledge objects, using field aliases and calculated fields, creating tags and event types, using macros, creating workflow actions and data models, and normalizing data with the Common Interface Model (CIM). Splunk Certifications Exam When you’re ready to take a Splunk Certification exam, please view the Exam-Registration-Tutorial for registration assistance. As a reminder, each exam attempt costs US$125. Bulk registration vouchers can be purchased at a discounted price of five registrations for US$500. How to register for your exam There are three ways to purchase a PearsonVUE registration voucher: 1) Directly from PearsonVUE This is the most streamlined approach. Follow the steps for account creation and exam registration provided at www.pearsonvue.com/splunk Payment will be collected at the time of registration. You can also visit the Pearson VUE voucher store for direct purchase. 2) From Splunk (as an individual) Log into your existing account at Splunk.com/Education to purchase a registration code. Payment can be made via credit card or existing Splunk Education credits. Splunk will email you a unique registration code, which can be used for registration at www.pearsonvue.com/splunk . 3) From Splunk (as an account) Your Splunk Sales Rep can add certification exams to any deal. Once the number of vouchers has been requested, Splunk will email your unique registration codes, which can be used for registration at www.pearsonvue.com/splunk All scheduled exams are subject to a minimum 24-hour cancellation and/or rescheduling policy. Failure to cancel or reschedule an exam within this timeframe results in forfeiture of registration fee. One of the best trainers I've had - keeps content relevant & explains the tasks in easily understood language. Extremely knowledgeable in all fields relating to the content. Well paced & accommodated to everyone's questions & progress. Participant, Splunk Enterprise Data Administration

Result Modification - Splunk Education Single Subject Course Training. Result Modification The Splunk Education single-subject course module, Result Modification is for power users who want to use commands to manipulate output and normalise data. Topics will focus on specific commands for manipulating fields and field values, modifying result sets, and managing missing data. Additionally, students will learn how to use specific eval command functions to normalise fields and field values across multiple data sources. Splunk Credit Value : 50 Duration : 3 hours Time : 9:00 am - 12:00 pm AEST Please use the currency convertor above to check for course pricing in your local currency. Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! The instructor was very responsive to questions and queries both private and Communal.. Final module collaborative lab walkthrough on screen was particularly helpful. Participant, Splunk Fundamentals 2 Result Modification - Course Topics Manipulating Output Modifying Result Sets Managing Missing Data Modifying Field Values Normalizing with eval Class Format Instructor-led lecture with labs. Delivered via virtual classroom or at your site Course Prerequisites To be successful, students must have completed these Splunk Education course(s) or have equivalent working knowledge: Intro to Splunk Using Fields Visualizations Working with Time Statistical Processing Comparing Values Result Modification - Audience Search Expert learning path Result Modification - Course Objectives Topic 1 – Manipulating Output Convert a 2-D table into a flat table with the untable command Convert a flat table into a 2-D table with thexyseries command Topic 2 – Modifying Result Sets Append data to search results with the appendpipe command Calculate event statistics with the eventstats command Calculate "streaming" statistics with the streamstats command Modify values to segregate events with the bin command Topic 3 - Managing Missing Data Find missing and null values with the fillnull command Topic 4 – Modifying Field Values Understand the eval command Use conversion and text eval functions to modify field values Reformat fields with the foreach command Topic 5 – Normalising with eval Normalise data with eval functions Identify eval functions to use for data and field normalization Splunk Course Schedules and Timezones Splunk Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses usually starts at AEDT 12:00pm or AEST 11:00 am and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) Result Modification - Upcoming Schedule We don’t have any products to show here right now.

Implementing Splunk IT Service Intelligence Training delivered by INGENIQ Implementing Splunk IT Service Intelligence The Implementing Splunk IT Service Intelligence course prepares consultants to install and configure Splunk’s app for IT Service Intelligence (ITSI). Students will learn to use ITSI to monitor mission-critical services. Topics include ITSI architecture, deployment planning, installation, service design and implementation, configuring entities, notable events, and developing glass tables and deep dives. Splunk Credit Value : 200 Duration : 18 hours over 4 days Time : 9:00 am - 1:30 pm AEST *Course discounts apply for Splunk Partners. Please use the currency convertor above to check for course pricing in your local currency. Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! Great attitude to the students, encourage questions. always attempt his best to answer them. there is a lot of material but he strive through it. willingness to go beyond to do his job, well done. Participant, Cluster Administration Implementing Splunk IT Service Intelligence - Course Topics ITSI architecture and deployment Installing ITSI Designing Services – Discovery and best practices Implementing services and entities Configuring correlation searches and multi KPI alerts Managing aggregration policies and anomaly detection Troubleshooting and maintenance Course Prerequisites To be successful, students must have completed these Splunk Education course(s) or have equivalent working knowledge: Either ONE of these completed Certification Paths Splunk Enterprise System Administration Splunk Enterprise Data Administration Splunk Cloud Administration Or all of these Courses Intro to Splunk Using Fields Visualizations Introduction to Knowledge Objects Creating Knowledge Objects Creating Field Extraction Implementing Splunk IT Service Intelligence - Audience Anyone whose role requires them to create complex search queries, advanced data models and reports with Splunk who have limited exposure to regular expressions. Previous attendees have included Consultants, IT Administrators and Business Intelligence/Business Analysts. Class Format Instructor-led lecture with labs. Delivered via virtual classroom or at your site Related Certifications Splunk IT Service Intelligence Certified Admin After completing Implementing Splunk IT Service Intelligence course you will be able to Identify and design ITSI Services and KPI’s Understand customer requirements, and translate into an ITSI implementation Design and Implement Glass Tables Create and Manage Notable Events Configure Adaptive Thresholds and Anomaly Detection Customize Deep Dive views Work with Entities and Dependencies. Implementing Splunk IT Service Intelligence - Course Objectives Module 1 - Introducing ITSI Identify ITSI features Describe reasons for using ITSI Examine the ITSI user interface Module 2 - Glass Tables Describe glass tables Use glass tables Design glass tables Configure glass tables Module 3 - Managing Notable Events Define key notable events terms and their relationships Describe examples of multi – KPI Alerts Describe the notable events workflow Work with notable events Module 4 - Investigating Issues with Deep Dives Describe deep dive concepts and their relationships Use default deep dives Create and customize new custom deep dives Add and configure swim lanes Custom views Describe effective workflows for troubleshooting Module 5 - Installing and Configuring ITSI List ITSI hardware recommendations Describe ITSI deployment options Identify ITSI components Describe the installation procedure Identify data input options for ITSI Add custom data to an ITSI deployment Module 6 - Designing Services Given customer requirements, plan an ITSI Implementation Identify site entities Module 7 - Data Audit and Base Searches Use a data audit to identify service key performance indicators Design base searches Module 8 – Implementing Services Use a service design to implement services in ITSI Module 9 – Thresholds and Time Policies Create KPI’s with static and adaptive thresholds Use Time policies to define flexible thresholds Module 10 – Entities and Dependencies Using entities in KPI Searches Defining dependencies Module 11 – Correlation and Multi KPI Searches Define new correlation searches Define Multi KPI Alerts Manage notable event storage Module 12 – Aggregation Policies Create new aggregation policies Use smart mode Module 13 – Anomaly Detection Enable anomaly detection Work with generated anomaly events Module 14 – Access Control Configure user access control Create services level teams Module 15 - Troubleshooting ITSI Backup and restore Maintenance mode Splunk Course Schedules and Timezones Ingeniq Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses usually starts at AEDT 12:00pm or AEST 11:00 am and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) Implementing Splunk IT Service Intelligence - Upcoming Courses Implementing Splunk IT Service Intelligence: Starts November 10 to 13, 2026 Price USD 2,000.00 Implementing Splunk IT Service Intelligence: Starts October 13 to 16, 2026 Course Closed

Splunk Core Certified Consultant Splunk Certification | INGENIQ Splunk Core Certified Consultant As part of Splunk Certification, a Splunk Core Certified Consultant has a thorough understanding of Splunk Deployment Methodology and implementation in large Splunk installations and has expert-level knowledge of multi-tier Splunk architectures, clustering, and scalability topics. This certification demonstrates a Consultant’s ability to properly size, install, and implement Splunk environments and to advise others on how to utilize the product and maximize its value for their needs. You can download the Splunk Certification Candidate Handbook to learn more about the changes. Learning Path Paid Cert Exam Paid Training Labs Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! Cert Exam - Splunk Core Certified Power User Cert Exam - Splunk Enterprise Certified Admin Splunk Enterprise Practical Lab Cert Exam - Splunk Enterprise Certified Architect Core Consultant Labs Services Core Implementation Cert Exam - Splunk Core Certified Consultant Splunk Certifications Exam When you’re ready to take a Splunk Certification exam, please view the Exam-Registration-Tutorial for registration assistance. As a reminder, each exam attempt costs US$125. Bulk registration vouchers can be purchased at a discounted price of five registrations for US$500. How to register for your exam There are three ways to purchase a PearsonVUE registration voucher: 1) Directly from PearsonVUE This is the most streamlined approach. Follow the steps for account creation and exam registration provided at www.pearsonvue.com/splunk Payment will be collected at the time of registration. You can also visit the Pearson VUE voucher store for direct purchase. 2) From Splunk (as an individual) Log into your existing account at Splunk.com/Education to purchase a registration code. Payment can be made via credit card or existing Splunk Education credits. Splunk will email you a unique registration code, which can be used for registration at www.pearsonvue.com/splunk . 3) From Splunk (as an account) Your Splunk Sales Rep can add certification exams to any deal. Once the number of vouchers has been requested, Splunk will email your unique registration codes, which can be used for registration at www.pearsonvue.com/splunk All scheduled exams are subject to a minimum 24-hour cancellation and/or rescheduling policy. Failure to cancel or reschedule an exam within this timeframe results in forfeiture of registration fee. One of the best trainers I've had - keeps content relevant & explains the tasks in easily understood language. Extremely knowledgeable in all fields relating to the content. Well paced & accommodated to everyone's questions & progress. Participant, Splunk Enterprise Data Administration

Using Fields - Splunk Education Single Subject Course Training. Using Fields The Splunk Education single-subject course module, Using Fields is a three-hour course and for power users who want to learn about fields and how to use fields in searches. Topics will focus on explaining the role of fields in searches, field discovery, using fields in searches, and the difference between persistent and temporary fields. The last topic will introduce how fields from other data sources can be used to enrich search results. Splunk Credit Value : 50 Duration : 3 hours Time : 9:00 am - 12:00 pm AEST Please use the currency convertor above to check for course pricing in your local currency. The instructor was very responsive to questions and queries both private and Communal.. Final module collaborative lab walkthrough on screen was particularly helpful. Participant, Splunk Fundamentals 2 Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! Using Fields - Course Topics What are Fields What is Field Discovery Using Fields in Searches Comparing Temporary versus Persistent Fields Enriching Data Class Format Instructor-led lecture with labs. Delivered via virtual classroom or at your site Course Prerequisites To be successful, students must have completed these Splunk Education course(s) or have equivalent working knowledge: How Splunk works Creating search queries Knowledge objects Using Fields - Audience Search Experts and Knowledge Managers Using Fields - Course Objectives Topic 1 – What are Fields? Understand fields and field auto-extraction Explore the Fields sidebar Add fields to the Selected Fields list Explore and generate reports from the Fields window Topic 2 – What is Field Discovery? Understand Field Discovery Explore search modes and their effect on search results Topic 3 - Using Fields in Searches Use fields correctly in basic searches Use fields with operators Use the rename command Use the fields command to improve search performance Topic 4 - Comparing Temporary versus Persistent Fields Differentiate between temporary and persistent fields Create temporary fields with the eval command Extract temporary fields with the erex and rex commands Topic 5 - Enriching Data Understand how fields from lookups, calculated fields, field aliases, and field extractions enrich data Splunk Course Schedules and Timezones Splunk Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses usually starts at AEDT 12:00pm or AEST 11:00 am and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) Using Fields - Upcoming Schedule We don’t have any products to show here right now.

Splunk Cloud Administration Training delivered by INGENIQ Splunk Cloud Administration This 18-hour (4 day) hands-on Splunk Cloud Administration course prepares administrators to manage users and get data in Splunk Cloud. Modules include data inputs and forwarder configuration, data management, user accounts, and basic monitoring and problem isolation. Splunk Cloud Administration course provides administrators with the skills, knowledge and best practices for data management and system configuration for data collection and ingestion in a Splunk Cloud environment to maintain a productive Splunk SaaS deployment. Splunk Credit Value : 200 Duration : 18 hours over 4 days Time : 9:00 am - 1:30 pm AEST *Course discounts apply for Splunk Partners. Please use the currency convertor above to check for course pricing in your local currency. Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit The instructor was very responsive to questions and queries both private and Communal.. Final module collaborative lab walkthrough on screen was particularly helpful. Participant, Splunk Fundamentals 2 Splunk Cloud Administration - Course Topics Splunk Cloud overview User Authentication and Authorization Index Management and Data Retention Splunk configuration files Cloud Ingestion – Using Splunk forwarders Forwarder management Data inputs in detail Cloud Ingestion – Use API, Scripted, HEC and Applications Event Parsing with data preview Manipulating raw data Installing and managing applications Problem isolation and working with Splunk Cloud support Class Format Instructor-led lecture with labs. Delivered via virtual classroom or at your site Course Prerequisites To be successful, students must have completed these Splunk Education course(s) or have equivalent working knowledge: Intro to Splunk Using Fields Introduction to Knowledge Objects Creating Knowledge Objects Creating Field Extractions Additional courses and/or knowledge in these areas are also highly recommended: Enriching Data with Lookups Data Models Splunk Cloud Administration - Audience Splunk Partners having a Professional Services Practice Splunk Cloud Customers Related Certifications Splunk Cloud Certified Admin After completing Splunk Cloud Administration course you will be able to Deploy and manage on premise components for data collection Create and configure indexes in Splunk Cloud including archiving and restoration. Manage data and input configuration using OnPrem and Cloud IDM Manage Apps and Configs in Splunk Cloud Splunk Cloud Administration - Course Objectives Module 1 -Splunk Cloud Overview Describe Cloud topology Describe tasks managed by the Splunk cloud administrator List the primary differences between Splunk Cloud and Splunk Enterprise List differences between Self-Service Cloud and Managed Cloud Module 2 - Index Management Define a Splunk Index Create indexes in cloud Delete data from an index Monitor indexing activities Module 3 - User Authentication and Authorization Administer Splunk user roles Integrate Splunk with LDAP, Active Directory, or SAML Module 4 -Splunk Configuration Files Review Splunk configuration files and directories Review configuration file precedence Review index and search time processes Module 5 – Cloud Ingestion – Using Splunk Forwarders Review cloud ingestion strategies Understand the role of forwarders in GDI Configure forwarding to Splunk Cloud Monitoring forwarder connectivity Explore optional forwarder settings Module 6 – Forwarder Management Describe Splunk Deployment Server Explain the use of forwarder management Configure forwarders to be deployment clients Managing forwarders using deployment apps Module 7 – Monitor Inputs Describe the Splunk process for inputting data Create file and directory monitor inputs Use optional settings for monitor inputs Module 8 – Cloud Ingestion – Using API, Scripted and HEC Inputs Understand how data is ingested using API Know how to deploy scripted inputs Describe how to use HEC for ingestion Module 9 – Cloud Ingestion – Application Based Inputs Understand how inputs are managed using in apps or add-ons Describe how customers may use Splunk Stream app Deploy Cloud inputs for use on an IDM Module 10 – Fine-tuning Inputs Describe the default processing that occurs during the input phase Configure input phase options, such as source type fine-tuning and character set encoding Module 11 – Parsing Phase and Data Preview Describe the default processing that occurs during parsing Optimize and configure event line breaking Explain how timestamps and time zones are extracted or assigned to events Use Data Preview to validate event creation during the parsing phase Module 12 – Manipulating Raw Data Explain how data transformations are defined and invoked Use transformations with props.conf and transforms.conf to modify raw data Use SECCMD to modify raw data Module 13 – Installing and Managing Apps Understand how apps and add-ons are vetted and installed in Cloud Create apps to managing and distribute configurations Module 14 – Splunk Cloud Support and Troubleshooting Troubleshooting Splunk Deployments Collecting data and use diagnostics or monitoring to investigate Overview of how to collect the relevant data for support to troubleshoot Splunk Course Schedules and Timezones Ingeniq Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses usually starts at AEDT 12:00pm or AEST 11:00 am and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) Splunk Cloud Administration - Upcoming Courses Splunk Cloud Administration : Starts November 3 to 6, 2026, 12:00pm AEDT Price USD 2,000.00 Splunk Cloud Administration : Starts October 6 to 9, 2026, 9:00am AEST Course Closed

Splunk Core Certified Power User Splunk Certification | INGENIQ Splunk Core Certified Power User As a part of Splunk Certification, a Splunk Core Certified Power User has a basic understanding of SPL searching and reporting commands and can create knowledge objects, use field aliases and calculated fields, create tags and event types, use macros, create workflow actions, create data models and normalise data with the Common Information Model in either the Splunk Enterprise or Splunk Cloud platforms. This certification demonstrates an individual’s foundational competence of Splunk’s core software. The prerequisites listed below (including both coursework and Splunk Core Certified User exam) are highly recommended, but not required for candidates to register for the Splunk certification exam. Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! Learning Path Paid Training Paid Cert Exam We strongly suggest candidates looking to prepare for this exam complete the following Single subject courses: Working with Time Statistical Processing Comparing Values Result Modification Correlation Analysis Creating Knowledge Objects Creating Field Extractions Data Models Cert Exam - Splunk Core Certified Power User Splunk Certifications Exam When you’re ready to take a Splunk Certification exam, please view the Exam-Registration-Tutorial for registration assistance. As a reminder, each exam attempt costs US$125. Bulk registration vouchers can be purchased at a discounted price of five registrations for US$500. How to register for your exam There are three ways to purchase a PearsonVUE registration voucher: 1) Directly from PearsonVUE This is the most streamlined approach. Follow the steps for account creation and exam registration provided at www.pearsonvue.com/splunk Payment will be collected at the time of registration. You can also visit the Pearson VUE voucher store for direct purchase. 2) From Splunk (as an individual) Log into your existing account at Splunk.com/Education to purchase a registration code. Payment can be made via credit card or existing Splunk Education credits. Splunk will email you a unique registration code, which can be used for registration at www.pearsonvue.com/splunk . 3) From Splunk (as an account) Your Splunk Sales Rep can add certification exams to any deal. Once the number of vouchers has been requested, Splunk will email your unique registration codes, which can be used for registration at www.pearsonvue.com/splunk All scheduled exams are subject to a minimum 24-hour cancellation and/or rescheduling policy. Failure to cancel or reschedule an exam within this timeframe results in forfeiture of registration fee. One of the best trainers I've had - keeps content relevant & explains the tasks in easily understood language. Extremely knowledgeable in all fields relating to the content. Well paced & accommodated to everyone's questions & progress. Participant, Splunk Enterprise Data Administration

Splunk Core Certified Enterprise Security Administrator Splunk Certification | INGENIQ Splunk Certified Enterprise Security Administrator As part of Splunk Certification, a Splunk Certified Enterprise Security Admin manages a Splunk Enterprise Security environment, including ES event processing and normalisation, deployment requirements, technology add-ons, settings, risk analysis settings, threat intelligence, protocol intelligence configuration and customisations. This Splunk Certification demonstrates an individual’s ability to install, configure and manage a Splunk Enterprise Security deployment. Please note: There are two approved coursework paths for this Splunk Certification track. Candidates may complete either Splunk Enterprise System Administration and Splunk Enterprise Data Administration or Splunk Cloud Administration as part of this Splunk Certification track. Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! Learning Path Paid Training Paid Cert Exam Splunk Enterprise System Administration Splunk Enterprise Data Administration Splunk Cloud Administration Administering Splunk Enterprise Security Cert Exam - Splunk Core Certified Enterprise Security Admin Splunk Certifications Exam When you’re ready to take a Splunk Certification exam, please view the Exam-Registration-Tutorial for registration assistance. As a reminder, each exam attempt costs US$125. Bulk registration vouchers can be purchased at a discounted price of five registrations for US$500. How to register for your exam There are three ways to purchase a PearsonVUE registration voucher: 1) Directly from PearsonVUE This is the most streamlined approach. Follow the steps for account creation and exam registration provided at www.pearsonvue.com/splunk Payment will be collected at the time of registration. You can also visit the Pearson VUE voucher store for direct purchase. 2) From Splunk (as an individual) Log into your existing account at Splunk.com/Education to purchase a registration code. Payment can be made via credit card or existing Splunk Education credits. Splunk will email you a unique registration code, which can be used for registration at www.pearsonvue.com/splunk . 3) From Splunk (as an account) Your Splunk Sales Rep can add certification exams to any deal. Once the number of vouchers has been requested, Splunk will email your unique registration codes, which can be used for registration at www.pearsonvue.com/splunk All scheduled exams are subject to a minimum 24-hour cancellation and/or rescheduling policy. Failure to cancel or reschedule an exam within this timeframe results in forfeiture of registration fee. One of the best trainers I've had - keeps content relevant & explains the tasks in easily understood language. Extremely knowledgeable in all fields relating to the content. Well paced & accommodated to everyone's questions & progress. Participant, Splunk Enterprise Data Administration

Enhance your troubleshooting skills with our Splunk observability training. Master dashboards and alerts with expert guidance. Visualizing and Alerting in Splunk Observability Cloud Summary This course assumes that you have completed the Fundamentals of Metrics Monitoring course. It is targeted towards DevOps/SRE/Observability teams and Developers. This 4.5-hour virtual course describes ways to enhance dashboards and alerts to help with troubleshooting. Find insights using analytics in charts and detectors. Create detectors for common use cases. All concepts are taught using lectures and scenario-based hands-on activities. Course topics: Add information to dashboards and alerts for better troubleshooting Find insights using analytics and appropriate rollups in charts and detectors Create detectors for common use cases Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! Enjoyable presenter and easy to understand for an intermediate Splunk user pursuing Admin certification. Thanks from Massachusetts! Participant, Splunk Fundamentals 2 Splunk Credit Value: 50 Duration: 4.5 hours Time: 9am – 1.30 pm AET Objectives Module 1 - Creating efficient Dashboards and Alerts Add instructions to dashboards Create single-instance dashboards View events on dashboards Configure local data links Customize alert messages Troubleshoot charts and alerts Module 2 – Finding Insights Using Analytics Finding total value across all sources Combining plots in charts View and alert on weekly, daily or hourly comparisons Use percentages and ratios to understand trends Apply analytic functions over moving and calendar time windows Apply analytics functions to a subset of MTS in a signal Module 3 – Detectors for Common Use Cases Identify common issues with detectors Troubleshoot a detector Create detectors to monitor populations Create non-flapping detectors Monitor metrics with cyclic patterns Monitor large number of sources Monitor an ephemeral infrastructure Prerequisites Splunk Infrastructure Monitoring Fundamentals Splunk Course Schedules and Timezones Ingeniq Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm (4.5 hour sessions over 1 or more days) and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses start at AEDT 12:00pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West)

Splunk SOAR Certified Automation Developer Splunk SOAR Certified Automation Developer This certification demonstrates an individual's ability to install and configure a SOAR server, integrate it with Splunk, and plan, design, create, and debug playbooks. Formerly referred to as Splunk Phantom Certified Admin. Please note: There are no pre-requisite courses or certifications required to attempt this exam but all candidates are expected to have working knowledge and experience as either Splunk Cloud or Splunk Enterprise Administrators. Learning Path We suggest candidates looking to prepare for this exam complete Splunk Fundamentals 1 or the following Single subject courses: Paid Training Paid Cert Exam Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! Administering Splunk SOAR Investigating Splunk Incidents with SOAR Developing SOAR Playbooks Advanced SOAR Implementation Splunk SOAR Certified Automation Developer Splunk Certifications Exam How to register for your exam There are two ways to purchase a PearsonVUE registration voucher: 1. Directly from PearsonVUE. This is the most streamlined approach. Follow the steps for account creation and exam registration provided at home.pearsonvue.com/splunk . Payment will be collected at the time of registration. You can also visit the Pearson VUE voucher store for direct purchase. 2. From Splunk. Individuals or companies could use Splunk Education Training Units and convert them to certification vouchers. 50 Education training units can be converted to 5 certification vouchers or 13 Education training units can be converted to 1 certification voucher. Education training units can only be converted within 1 year of purchase. Email certification@splunk.com with the TUA number to begin the process of confirming eligibility and converting. Voucher codes will be emailed and distribution and management is at the sole discretion of the customer. Vouchers expire approximately one year from the date of issue. Exams must take place on or before Voucher expiration date. All scheduled exams are subject to a minimum 48-hour cancellation and/or rescheduling policy. Failure to cancel or reschedule an exam within this timeframe results in forfeiture of registration fee. One of the best trainers I've had - keeps content relevant & explains the tasks in easily understood language. Extremely knowledgeable in all fields relating to the content. Well paced & accommodated to everyone's questions & progress. Participant, Splunk Enterprise Data Administration