Ingeniq delivers authorised Splunk training with role-based paths for Analysts, Admins, Architects, ES and SOAR teams. Build real, job-ready Splunk skills. Your Role-Based Splunk Learning Starts Here Train with Australia’s authorised Splunk training provider — with live instructors, hands-on labs and product-specific paths designed for real Splunk environments. Start building capability across the Splunk products your team uses today. View Course Dates Explore Courses Available ● Authorised Splunk Training Provider Since 2010 ● Thousands Trained Across Australia & New Zealand Plan Your Splunk Certification Speak with an Ingeniq expert about your certification goals — for individuals or teams. Full Name* Work Email* Company / Organisation* Course for: Notes: Send Enquiry Our team will contact you within one business day Why Choose Ingeniq for Splunk Certification Training Ingeniq delivers official Splunk training aligned to real operational roles — analysts, administrators, architects, security teams and SOAR engineers. Our certified instructors help learners build practical, job-ready Splunk skills that support Splunk certifications and day-to-day operational excellence. Why people choose Ingeniq: Authorised Splunk Training Provider Access Splunk-approved content for every product area. Certified, Industry-Experienced Instructors Learn from instructors active in real Splunk environments. Hands-On, Lab-Driven Learning Develop skills through real Splunk labs, not theory-only. Product-Specific Paths Follow structured journeys tailored to your daily tasks. Up-to-Date Training Stay current with Splunk features, tools and best practices. Your Role-Based Splunk Learning Starts Here A simple overview of how Ingeniq helps you build role-based Splunk skills with paths that support both Splunk learning and Splunk certification goals. Choose Your Product Path Select the role that matches your responsibilities. Enroll in a Course Use Splunk Credits or standard payment. Train Live With Experts Learn through instructor-led labs and demos. Apply Product-Specific Skills Apply Splunk skills directly in real work. See how your role path connects to Splunk certifications. View Certification Training Guide Role-Based Learning Paths Choose the role that matches your day-to-day responsibilities. Each learning path includes official Splunk courses grouped into structured sequences to build capability step-by-step. Splunk User / Analyst Path Ideal for users who need to run searches, build dashboards, and share insights with the business. Introduction to Dashboards View course Dynamic Dashboards View course Search Optimisation View course Splunk Administrator Path For administrators responsible for data onboarding, user management, and overall platform health. System Administration View course Data Administration View course Troubleshooting Splunk View course Cluster Administration (Optional) View course Splunk Architect Path For engineers designing and optimising distributed Splunk deployments across the organisation. System Administration (revision) View course Data Administration (revision) View course Architecting Splunk Deployment View course Security (ES) Analyst Path For SOC analysts working with notable events, investigations, and security incidents. Using Splunk Enterprise Security View course Recommended for new users Searching & Reporting, Using Fields, Creating Alerts View course Enterprise Security Admin Path For admins responsible for maintaining and tuning Splunk Enterprise Security. System & Data Administration View course | View course Using Splunk Enterprise Security View course Administering Splunk ES View course SOAR Automation Path For engineers designing and optimizing distributed Splunk deployments. Investigating Incidents with SOAR View course Administering Splunk SOAR View course Developing SOAR Playbooks View course Which Role Path Should You Start With? Use this guide to match your day-to-day responsibilities with the role-based learning path that fits best. Analyst / Business User Administrator Architect Security (ES) Analyst ES Administrator SOAR Engineer Best for Users running searches, dashboards and reports Core Focus Searching Reporting Visualisations Key Courses Power User Fast Track Best for IT & platform teams managing Splunk environments Core Focus Deployment Data onboarding System health Key Courses Power User Fast Track Admin Data Admin Troubleshooting Cluster Admin Best for Senior engineers designing distributed deployments Core Focus Architecture Scaling Clustering Key Courses Architecting Splunk Deployments (plus System & Data Admin revision) Best for SOC teams working with detections & investigations Core Focus Notable events Triage Investigations Key Courses Using Enterprise Security Best for Automation engineers building SOAR workflows Core Focus Playbooks Integrations Orchestration Key Courses Using SOAR Admin SOAR Playbook Development Best for Security & platform teams maintaining Splunk ES Core Focus ES Configuration Tuning Correlation Searches Key Courses Using ES Administering ES System & Data Admin (revision) Talk to a Training Advisor Which Certification Path Is Right for You? Choose a path based on your role and how you use Splunk. If you're unsure, Ingeniq experts can help you map the right certification journey. Official Splunk Curriculum Every role path follows Splunk’s authorised training sequences. Hands-On Labs Practice in real lab environments — not simulations. Team-Ready Delivery Run private training sessions aligned to your team’s roles. Splunk Education Credits Accepted Practice in real lab environments — not simulations. What Our Participants Say “Clear guidance and hands-on labs made it easy to build the core skills needed for my role as an analyst.” Participant, Splunk User / Analyst Path — Australia Frequently Asked Questions (FAQs) Do we need to complete the core platform path first? Recommended for most teams new to Splunk, but not required. We can tailor the path based on your experience. Can we mix products in private training? Yes. Many teams combine core admin with ES, ITSI or SOAR. Are these the same as certification paths? They align with Splunk’s official training but are organised by product, not exam. Can we use Splunk Training Credit? Yes. Splunk Credits and training packs can be applied to product-based paths. Start Your Product-Based Splunk Training Talk to us about the Splunk products your team uses today. Choose your product path, enrol in your courses and build the skills you need to operate Splunk confidently across your environment. View Course Dates Contact Us

Enhance your troubleshooting skills with our Splunk observability training. Master dashboards and alerts with expert guidance. Visualizing and Alerting in Splunk Observability Cloud Summary This course assumes that you have completed the Fundamentals of Metrics Monitoring course. It is targeted towards DevOps/SRE/Observability teams and Developers. This 4.5-hour virtual course describes ways to enhance dashboards and alerts to help with troubleshooting. Find insights using analytics in charts and detectors. Create detectors for common use cases. All concepts are taught using lectures and scenario-based hands-on activities. Course topics: Add information to dashboards and alerts for better troubleshooting Find insights using analytics and appropriate rollups in charts and detectors Create detectors for common use cases Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! Enjoyable presenter and easy to understand for an intermediate Splunk user pursuing Admin certification. Thanks from Massachusetts! Participant, Splunk Fundamentals 2 Splunk Credit Value: 50 Duration: 4.5 hours Time: 9am – 1.30 pm AET Objectives Module 1 - Creating efficient Dashboards and Alerts Add instructions to dashboards Create single-instance dashboards View events on dashboards Configure local data links Customize alert messages Troubleshoot charts and alerts Module 2 – Finding Insights Using Analytics Finding total value across all sources Combining plots in charts View and alert on weekly, daily or hourly comparisons Use percentages and ratios to understand trends Apply analytic functions over moving and calendar time windows Apply analytics functions to a subset of MTS in a signal Module 3 – Detectors for Common Use Cases Identify common issues with detectors Troubleshoot a detector Create detectors to monitor populations Create non-flapping detectors Monitor metrics with cyclic patterns Monitor large number of sources Monitor an ephemeral infrastructure Prerequisites Splunk Infrastructure Monitoring Fundamentals Splunk Course Schedules and Timezones Ingeniq Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm (4.5 hour sessions over 1 or more days) and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses start at AEDT 12:00pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West)

Splunk Core Certified User Splunk Certification | INGENIQ Splunk Certification Exams Sample Certifcation exam questions (where available) are provided to give candidates a general idea of the formatting and type of questions for each of the exams. The test blueprints provide much more detailed information regarding exam content. Candidate performance on these questions in no way guarantees performance or passing marks on the certification exam(s). Available Splunk Certification exams Splunk Core Certified User Splunk Core Certified Power User Splunk Core Certified Advanced Power User Splunk Cloud Certified Admin Splunk Enterprise Certified Admin Splunk Enterprise Certified Architect Splunk Core Certified Consultant Splunk Certified Developer Splunk ES Certified Admin Splunk ITSI Certified Admin Splunk SOAR Certified Automation Developer Splunk Core Certified User What’s on the Exam This entry-level certification exam is a 57-minute, 60-question assessment which evaluates a candidate’s knowledge and skills to search, use fields, create alerts, use lookups, and create basic statistical reports and dashboards. Candidates can expect an additional 3 minutes to review the exam agreement, for a total seat time of 60 minutes. Splunk Core Certified User is a recommended entry-level certification track for all candidates. Splunk Certifications Exam When you’re ready to take a Splunk Certification exam, please view the Exam-Registration-Tutorial for registration assistance. As a reminder, each exam attempt costs US$125. Bulk registration vouchers can be purchased at a discounted price of five registrations for US$500. How to register for your exam There are three ways to purchase a PearsonVUE registration voucher: 1) Directly from PearsonVUE This is the most streamlined approach. Follow the steps for account creation and exam registration provided at www.pearsonvue.com/splunk Payment will be collected at the time of registration. You can also visit the Pearson VUE voucher store for direct purchase. 2) From Splunk (as an individual) Log into your existing account at Splunk.com/Education to purchase a registration code. Payment can be made via credit card or existing Splunk Education credits. Splunk will email you a unique registration code, which can be used for registration at www.pearsonvue.com/splunk . 3) From Splunk (as an account) Your Splunk Sales Rep can add certification exams to any deal. Once the number of vouchers has been requested, Splunk will email your unique registration codes, which can be used for registration at www.pearsonvue.com/splunk All scheduled exams are subject to a minimum 24-hour cancellation and/or rescheduling policy. Failure to cancel or reschedule an exam within this timeframe results in forfeiture of registration fee. One of the best trainers I've had - keeps content relevant & explains the tasks in easily understood language. Extremely knowledgeable in all fields relating to the content. Well paced & accommodated to everyone's questions & progress. Participant, Splunk Enterprise Data Administration

Splunk Education, Training and Professional Services Provider Using Splunk Application Performance Monitoring Summary This 1-virtual day course targeted to developers and DevOps enables you to use Splunk APM to analyze traces, troubleshoot and monitor your microservices-based applications. Through in-person discussions and hands-on activities, deep dive into uses of distributed tracing, navigating the Splunk APM app to analyze traces, visualize and alert on APM metrics. All concepts and taught through discussions and hands-on activities. Description When to use Splunk APM View and Analyze End-to-end Collected Traces Find the Root Cause of a Problem Enjoyable presenter and easy to understand for an intermediate Splunk user pursuing Admin certification. Thanks from Massachusetts! Participant, Splunk Fundamentals 2 Splunk Credit Value: 50 Duration: 4.5 hours Time: 11:00 am - 2:30 pm AEST Objectives - Overview of Splunk APM Module 1 – Overview of Splunk APM Describe Splunk Observability Cloud Identify the key elements of the Splunk APM Differentiate between metrics, traces and logs. Module 2 – Navigating Splunk APM Define Splunk APM-based terminology Navigate the Splunk APM pages Module 3 – Troubleshooting Using Splunk APM Create detectors to alert on APM metrics Create custom dashboards Troubleshoot an issue after an alert triggers Prerequisites To be successful, students must have completed these Splunk Education course(s) or have equivalent working knowledge: Introduction to Splunk Infrastructure Monitoring (eLearning) Introduction to Splunk Application Performance Monitoring (eLearning) Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! Splunk Course Schedules and Timezones Ingeniq Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm (4.5 hour sessions over 1 or more days) and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses start at AEDT 12:00pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West)

Discover Splunk Observability products with Ingeniq—empowering businesses with real-time insights, performance monitoring, and seamless troubleshooting solutions. Observability Unlock the power of Splunk Observability with Ingeniq. Our cutting-edge solutions offer unparalleled visibility into your systems, enabling proactive issue detection and rapid resolution. With real-time metrics, logs, and traces, we empower your team to optimise performance, enhance system reliability, and ensure seamless user experiences. Want to Improve your digital resilience by building a leading observability practice? Our Education Consultants are here to help. Feel free to call us or email sales@ingeniq.com.au , and we'll get in touch with you. Call us on +612 8705 1505 Visualizing and Alerting in Splunk Infrastructure Monitoring This course assumes that you have completed the course Splunk Infrastructure Monitoring Fundamentals. It is targeted towards DevOps/SRE/Observability teams, Senior On-call Engineers, Onboarding and Monitoring Strategists and Developers Read More Fundamentals of Metrics Monitoring in Splunk Observability This course serves as the foundation for all other Splunk Observability courses. It is targeted towards DevOps/SRE/Observability teams, Senior On-call Engineers, Onboarding and Monitoring Strategists and Developers. Read More Kubernetes Monitoring with Splunk Observability Cloud This virtual course targeted to SREs and DevOps enables you to monitor and troubleshoot your Kubernetes clusters with Splunk Observability Cloud. Read More Unlock Real-Time Insights with Splunk Observability Our Splunk observability course is designed to help you improve your digital resilience by building a leading observability practice within your organisation. In this course, you'll learn how to unify visibility across ITOps and engineering teams, ensuring shared data, context, and workflows for complete digital visibility. Splunk empowers your teams to accelerate troubleshooting by providing the tools to diagnose issues accurately across any environment. By reducing time spent in war rooms, you'll boost your operational efficiency and response times. Additionally, our course covers how Splunk allows you to have complete control over your data and costs. With its flexible data architecture, Splunk lets you instrument everything, paying only for the resources you need—maximising both data control and cost efficiency. By the end of the course, you’ll be equipped with the knowledge and skills to leverage Splunk's powerful observability solutions, driving faster resolutions, reducing operational friction, and ensuring a more resilient digital infrastructure. Sign up for our Splunk Observability training course today! The Benefits of Splunk Observability In today’s fast-paced digital landscape, organisations rely on robust tools to maintain seamless operations across distributed systems. Ingeniq, a leading authorised training provider for Splunk, empowers enterprises to unlock the full potential of Splunk observability to drive efficiency and resilience. Here’s how embracing Splunk observability best practices can transform your workflow: Enhanced Visibility: Splunk observability empowers DevOps developers to achieve real-time insights into distributed systems, ensuring seamless application performance and simplified service ownership tracking. Improved Alerting: Detect and resolve issues faster with deeper visibility into system changes, enabling swift debugging and issue resolution. Optimised Workflows: With contextualised data, gain end-to-end insights into a request’s journey, reducing the complexity of troubleshooting and boosting efficiency. Streamlined Collaboration: By providing critical information at developers’ fingertips, Splunk observability reduces reliance on third-party resources, minimising time spent in meetings and improving productivity. Accelerated Innovation: Observability eliminates bottlenecks, allowing developers to focus on delivering faster, more innovative solutions for your business. At Ingeniq, we help you harness Splunk’s full capabilities, providing expert training and support to maximise your investment. Transform your approach to system monitoring and troubleshooting with Splunk today! Splunk Data Observability Tool Splunk observability tool is designed to revolutionise how organisations monitor, manage, and optimise their digital environments. This advanced data observability tool empowers enterprises to gain deep insights into their systems, enabling swift issue detection and resolution, seamless integration with existing frameworks, and enhanced decision-making capabilities. Here are the key features of our tools: Comprehensive Integration: Seamlessly integrates with your existing tech stack, supporting various frameworks, container platforms, and critical software for a unified observability effort. Real-Time Insights: Access actionable, real-time data through intuitive dashboards, reports, and visualisations to address issues promptly and effectively. Context-Rich Visualisations: These aggregate and display insights in digestible formats, offering clarity into system performance, changes, and interdependencies. AI-Powered Intelligence: Utilises machine learning to automate data processing, detect anomalies, and strengthen security measures for faster incident responses. Business-Centric Value: Aligns with your organisation’s goals by improving system stability, deployment speed, and overall customer experience. With our observability data solutions, you can optimise resources, tackle disruptions head-on, and gain a strategic advantage in today’s digital landscape. Contact us today to discuss your needs for observability. How to Implement Observability In today’s complex software landscape, understanding and managing system behaviour is more critical than ever. This is where applied observability becomes a game-changer. Unlike traditional monitoring, which focuses on predefined metrics, observability delves deeper into “unknown unknowns,” empowering teams to troubleshoot issues in real time. To implement application observability effectively, start by leveraging robust tools like Splunk. Splunk's cutting-edge analytics not only provide unparalleled insights into system performance but also ensure enterprise resilience. With the Splunk observability certification, your team can unlock the full potential of this platform, enabling faster detection, smarter investigation, and optimised resources. At Ingeniq, we simplify the journey to observability excellence. We equip your team with the skills to harness Splunk for cybersecurity, network operations, and system reliability. With our guidance, your organisation will gain comprehensive visibility, reduce downtime, and build a future-ready infrastructure. Why Ingeniq Is Your Trusted Partner for Observability Solutions At Ingeniq, we’re dedicated to empowering organisations with cutting-edge observability solutions, ensuring seamless operations and enhanced digital resilience. As authorised training and certification providers for Splunk, we bring unparalleled expertise to help you unlock the full potential of this transformative platform. Here’s why Ingeniq stands out: Tailored Expertise: We provide customised solutions to optimise your use of Splunk’s big data capabilities for cybersecurity, observability, and network operations. Comprehensive Training: Our certified courses equip your team with the skills to leverage Splunk efficiently. Transparent Pricing: We offer clear guidance on Splunk observability pricing, ensuring value for every investment. Optimised Resources: We use the fundamentals of data observability to ensure that you can optimise your resources for greater efficiency and performance. With Ingeniq, you’re not just adopting a tool; you’re gaining a partner committed to delivering actionable insights and robust solutions. From achieving comprehensive visibility to enabling rapid detection and investigation, our services ensure you remain resilient against digital disruptions. Explore how Ingeniq can help you maximise your Splunk investment and drive measurable success in observability. Let’s transform your operations together. Frequently Asked Questions How does observability benefit developers? It provides visibility into system performance, enabling developers to quickly identify and resolve issues, improving workflow and accelerating development. How does observability improve incident response? By providing context and visibility into system behaviour, Splunk observability helps teams pinpoint issues, prioritise responses, and resolve incidents faster. Why is observability important in distributed systems? It helps teams identify and resolve issues in complex environments where traditional monitoring techniques may fail due to interdependencies and unpredictability. What are the three pillars of observability? Logs, metrics, and traces are the primary data classes used to achieve observability and gain insights into system performance. How do logs help in observability? Logs provide a text record of events with timestamps, offering context for troubleshooting issues when they arise in a system. What are the key components of an observability strategy? Key components include instrumentation, data correlation, incident response, and AIOps, which work together to enable real-time monitoring and faster issue resolution. One of the best trainers I've had - keeps content relevant & explains the tasks in easily understood language. Extremely knowledgeable in all fields relating to the content. Well paced & accommodated to everyone's questions & progress. Participant, Splunk Enterprise Data Administration

Using Splunk IT Service Intelligence Training delivered by INGENIQ Using Splunk IT Service Intelligence The Using Splunk IT Service Intelligence course prepares analyst users who want to use Splunk IT Service Intelligence to manage, analyze, and optimize their IT services. The content of this course is included in the 4 day Implementing Splunk IT Service Intelligence Course. Splunk Credit Value : 50 Duration : 4.5 hours over 1 day Time : 9:00 am – 1:30 pm AEST (GMT +10) *Course discounts apply for Splunk Partners. Please use the currency convertor above to check for course pricing in your local currency. Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! Great attitude to the students, encourage questions. always attempt his best to answer them. there is a lot of material but he strive through it. willingness to go beyond to do his job, well done. Participant, Cluster Administration Using Splunk IT Service Intelligence - Course Topics ITSI features and User Interface Creating Glass Tables Managing Notable Events Investigating with Deep Dives Course Prerequisites To be successful, students must have completed these Splunk Education course(s) or have equivalent working knowledge: Intro to Splunk Optionally: Using Fields Visualizations Working with Time Introduction to Dashboards Related Certifications None Using Splunk IT Service Intelligence - Audience Anyone who wants to use Splunk IT Service Intelligence to manage, analyze, and optimize their IT services. Those who will implement Splunk IT Service Intelligence, please enroll in Implementing Splunk IT Service Intelligence instead. Class Format Instructor-led lecture with labs. Delivered via virtual classroom or at your site After completing Using Splunk IT Service Intelligence course you will be able to Using Splunk IT Service Intelligence - Course Objectives Module 1 - Introducing ITSI Identify what ITSI does Describe reasons for using ITSI Examine the ITSI user interface Module 2 - Glass Tables Describe glass tables Use glass tables Design glass tables Configure glass tables Module 3 - Managing Notable Events Define key notable events terms and their relationships Describe examples of multi – KPI Alerts Describe the notable events workflow Work with notable events Module 4 - Investigating Issues with Deep Dives Describe deep dive concepts and their relationships Use default deep dives Create and customize new custom deep dives Add and configure swim lanes Custom views Describe effective workflows for troubleshooting Splunk Course Schedules and Timezones Ingeniq Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses usually starts at AEDT 12:00pm or AEST 11:00 am and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) Using Splunk IT Service Intelligence - Upcoming Courses We don’t have any products to show here right now.

Splunk Education, Training and Professional Services Provider App Developers Harness the power of Splunk’s Web Framework. Create rich, interactive dashboards and forms and package Splunk knowledge objects for distribution across your organisation. App Developer Track Courses Splunk Fundamentals 1 Splunk Fundamentals 2 Creating Dashboards with Splunk Splunk Fundamentals 3 Advanced Searching and Reporting Advanced Dashboards and Visualisations Building Splunk Apps Developing with Splunk's REST API One of the best trainers I've had - keeps content relevant & explains the tasks in easily understood language. Extremely knowledgeable in all fields relating to the content. Well paced & accommodated to everyone's questions & progress. Participant, Splunk Enterprise Data Administration

Ingeniq delivers official Splunk training with hands-on, product-based paths across Enterprise, ES, ITSI, SOAR and Observability to build real Splunk skills. Your Product-Based Splunk Learning Starts Here Train with Australia’s authorised Splunk training provider — with live instructors, hands-on labs and product-specific paths designed for real Splunk environments. Start building capability across the Splunk products your team uses today. View Course Dates Explore Courses Available ● Authorised Splunk Training Provider Since 2010 ● Thousands Trained Across Australia & New Zealand Plan Your Splunk Certification Speak with an Ingeniq expert about your certification goals — for individuals or teams. Full Name* Work Email* Company / Organisation* Course for: Notes: Send Enquiry Our team will contact you within one business day Why Choose Ingeniq for Splunk Certification Training Ingeniq delivers official Splunk product training across Enterprise, Cloud, ES, ITSI, SOAR and Observability. Our certified instructors help teams build practical, product-specific skills that align with how Splunk is used in real operational environments. Why people choose Ingeniq: Authorised Splunk Training Provider Access authorised content aligned with Splunk’s latest product updates. Certified, Industry-Experienced Instructors Learn from practitioners who use Splunk across real deployments. Hands-On, Lab-Driven Learning Develop real capability with labs built around each Splunk product. Product-Specific Paths Follow structured sequences mapped to Splunk Enterprise, ES, ITSI, SOAR and Observability. Up-to-Date Training Stay current with Splunk’s newest features, tools and best practices. Your Product-Based Learning Journey A simple overview of how Ingeniq helps teams build capability across the Splunk products they use. Choose Your Product Path Select the Splunk product your team uses. Enroll in a Course Use Splunk Credits or standard payment. Train Live With Experts Learn through instructor-led labs and demos. Apply Product-Specific Skills Build confidence using Splunk in real work. See how your role path connects to Splunk certifications. View Certification Training Guide Product-Based Learning Paths Choose the Splunk product that matches your environment. Each path combines official Splunk courses into a clear sequence designed to build capability step-by-step. Splunk Enterprise & Splunk Cloud For teams responsible for searching, dashboards, data onboarding and day-to-day Splunk operations. Recommended Course Sequence: Power User Fast Start View course System Administration View course Data Administration View course Architecting Splunk Deployments View course Splunk Enterprise Security For SOC teams, security analysts and cyber operations using Splunk ES as their SIEM. Recommended Course Sequence: Using ES View course Administering ES View course ‎ Splunk IT Service Intelligence – ITSI For service owners, IT operations teams and SREs focused on service health and event analytics. Recommended Course Sequence: Using ITSI View course Implementing ITSI View course ‎ Splunk Observability Cloud For cloud-native, microservices and reliability teams needing APM and real-time infrastructure visibility. Recommended Course Sequence: Fundamentals of Metrics Monitoring in Splunk Observability Cloud View course Investigating Incidents in Splunk Observability Cloud View course Using SignalFlow in Splunk Observability Cloud View course Splunk SOAR For security teams building automated workflows, playbooks and response processes. Recommended Course Sequence: Using SOAR View course Administering SOAR View course Playbook Development View course Advanced SOAR View course Which Product Path Should You Start With? Use this guide to match your responsibilities with the right learning path. Splunk Enterprise / Cloud Splunk Enterprise Security (ES) Splunk ITSI Splunk Observability Splunk SOAR Best for Admins, power users, operations teams Core Focus Data Onboarding Index design Dashboards Key Courses Power User Fast Start System Admin Data Admin Architecting Deployments Best for SOC & security teams Core Focus Detection Correlation Investigations Key Courses Using ES Administering ES Best for IT Ops & service owners Core Focus KPIs Service Health Event analytics Key Courses Using ITSI Implementing ITSI Best for SRE, DevOps, cloud teams Core Focus APM & infra monitoring Key Courses Fundamentals of Metrics Monitoring in Splunk Observability Cloud Investigating Incidents in Splunk Observability Cloud Using SignalFlow in Splunk Observability Cloud Best for Security automation teams Core Focus Playbooks & workflows Key Courses Using SOAR Admin SOAR Playbook Development Talk to a Training Advisor Official Training, Product-Specific Skills Official Splunk Curriculum Follow authorised content for every Splunk product. Hands-On Product Labs Practice in real Splunk environments, not demos. Team-Ready Delivery Run workshops tailored to your Splunk product needs. Splunk Education Credits Accepted Use Splunk Credits or training packs for any path. What Our Participants Say “Clear guidance and hands-on labs made learning Splunk Enterprise much easier for our team.” Participant, Splunk Enterprise Training — Australia Frequently Asked Questions (FAQs) Do we need to complete the core platform path first? Recommended for most teams new to Splunk, but not required. We can tailor the path based on your experience. Can we mix products in private training? Yes. Many teams combine core admin with ES, ITSI or SOAR. Are these the same as certification paths? They align with Splunk’s official training but are organised by product, not exam. Can we use Splunk Training Credit? Yes. Splunk Credits and training packs can be applied to product-based paths. Start Your Product-Based Splunk Training Talk to us about the Splunk products your team uses today. Choose your product path, enrol in your courses and build the skills you need to operate Splunk confidently across your environment. View Course Dates Contact Us

Creating Maps - Splunk Education Single Subject Course Training. Creating Maps The Splunk Education single-subject course module, Creating Maps is designed for power users who want to create maps in Splunk. It focuses on the data and components required to create cluster and choropleth maps. It also shows how to format, customise and make maps interactive. Splunk Credit Value : 50 Duration : 3 hours Time : 9:00 am - 12:00 pm AEST Please use the currency convertor above to check for course pricing in your local currency. Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! The instructor was very responsive to questions and queries both private and Communal.. Final module collaborative lab walkthrough on screen was particularly helpful. Participant, Splunk Fundamentals 2 Creating Maps - Course Topics Cluster Maps Choropleth Maps Customizing Maps Class Format Instructor-led lecture with labs. Delivered via virtual classroom or at your site Course Prerequisites To be successful, students should have completed these courses: Introduction to Splunk Introduction to Dashboards Dynamic Dashboards Creating Maps - Audience Search Experts and Knowledge Managers Creating Maps - Course Objectives Topic 1 – Cluster Maps Define cluster map requirements Use the iplocation and geostats commands Create a cluster map Topic 2 – Choropleth Map Define choropleth map requirements Use the geom command Create a choropleth map Topic 3 – Customising Maps Customize marker colors Create drilldowns Use tokens Splunk Course Schedules and Timezones Splunk Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses usually starts at AEDT 12:00pm or AEST 11:00 am and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) Creating Maps - Upcoming Schedule We don’t have any products to show here right now.

Dynamic Dashboards - Splunk Education Single Subject Course Training. Dynamic Dashboards The Splunk Education single-subject course module, Dynamic Dashboards is designed for power users who want to learn best practices for building dashboards in the Dashboard Studio. This course focuses on creating inputs, chain searches, event annotations, and improving dashboard performance. Splunk Credit Value : 50 Duration : 4.5 hours Time : 9:00 am - 1:30 pm AEST Please use the currency convertor above to check for course pricing in your local currency. Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! The instructor was very responsive to questions and queries both private and Communal.. Final module collaborative lab walkthrough on screen was particularly helpful. Participant, Splunk Fundamentals 2 Dynamic Dashboards - Course Topics Data Source Types Mock Data Event Annotations Adding Inputs Chain Searches Class Format Instructor-led lecture with labs. Delivered via virtual classroom or at your site Course Prerequisites To be successful, students should have completed these courses: Intro to Splunk Using Fields Search Optimization Introduction to Dashboards Dynamic Dashboards - Audience Knowledge Manager learning path Dynamic Dashboards- Course Objectives Topic 1 – Selecting a Data Source Identify dataSources stanza fields Name search types Use a secondary data source Topic 2 – Adding Inputs Identify types of inputs Describe how inputs work Create a dynamic input Add cascading inputs Topic 3 - Improving Performance Identify performance improvement methods Use tstats and accelerated data models Create chain searches Set defaults Topic 4 – Comparing Temporary versus Persistent Fields Differentiate between temporary and persistent fields Create temporary fields with the eval command Extract temporary fields with the erex and rex commands Topic 5 - Enriching Data Understand how fields from lookups, calculated fields, field aliases, and field extractions enrich data Splunk Course Schedules and Timezones Splunk Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses usually starts at AEDT 12:00pm or AEST 11:00 am and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) Dynamic Dashboards - Upcoming Schedule Dynamic Dashboards : Starts April 13, 2026, 9:00am AET Course Closed

Splunk Education, Training and Professional Services Provider Building Apps with Splunk 8.2 Summary This two-day course focuses on Splunk Enterprise app development. It's designed for advanced users, administrators, and developers who want to create apps for Splunk Enterprise and Splunk Cloud. Major topics include planning apps, building data generators, adding data, custom search commands and REST endpoints, using the KV Store, app vetting using AppInspect and app packaging. Description Planning Apps Creating Apps Adding Data Enhancing Apps Using the REST API Packaging Apps Enjoyable presenter and easy to understand for an intermediate Splunk user pursuing Admin certification. Thanks from Massachusetts! Participant, Splunk Fundamentals 2 Splunk Credit Value: 150 Duration: 2 days Time: 11am – 3.30 pm AEST Objectives Module 1 – Planning Apps Set up a development environment Improve app performance Identify Splunk log files Use security best practices Create a data generator Module 2 – Creating Apps Describe the web framework architecture Manage apps and add-ons Create an app Configure app properties Create app navigation Add app icons and logos Module 3 – Adding Data List types of data inputs Identify ways to add data Explain modular vs scripted inputs Understand data normalization Review Add-on Builder Module 4 – Enhancing Apps Review commonly used knowledge object Learn about custom alert actions Build custom workflow actions Develop custom search commands Module 5 – Using the REST API Describe the Splunk REST API works Explain using REST with SplunkJS Extend Splunk with custom REST endpoints Review the KV Store and configuration Maintain app state using KV Store Module 6 – Packaging Apps Creating an app setup screen Define config file precedence Validate an app for Cloud with AppInspect Explain local and default differences Package an app Prerequisites To be successful, students should have a solid understanding of the following courses: Splunk Fundamentals 1 Splunk Fundamentals 2 Creating Dashboards OR the following single-subject courses: What Is Splunk? Intro to Splunk Using Fields Visualizations Leveraging Lookups and Subsearches Search Under the Hood Introduction to Knowledge Objects Creating Knowledge Objects Creating Field Extractions Enriching Data with Lookups Introduction to Dashboards Dynamic Dashboards To be successful, students should have a solid understanding of the following: Splunk system administration Splunk data administration Python or a similar scripting language Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! Splunk Course Schedules and Timezones Ingeniq Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm (4.5 hour sessions over 1 or more days) and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses start at AEDT 12:00pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West)

Splunk Education, Training and Professional Services Provider Privacy Ingeniq is a privacy conscious company and is fully committed to the protection of your personal privacy rights. Privacy Policy Statement Ingeniq is a privacy conscious company and is fully committed to the protection of your personal privacy rights. As part of this commitment, we have aligned our business practices and web site environments to comply with the Privacy Amendment (Enhancing Privacy Protection) Act 2012, which amends the Privacy Act 1988, which takes effect on the 12th March 2014. Our privacy compliance practices offer the assurance that personal information is collected, managed and used strictly for the purposes declared in this Privacy Policy. If you have any questions on this document or would like any information on the handling of your personal information, please contact the Privacy Officer via email on privacy.officer@ingeniq.com.au or directly on +61 2 9094 3555. Purpose of this Privacy Policy The purpose of this Privacy Policy is to provide a statement of the privacy practices adopted within Ingeniq. Australian Privacy Principles (APPs) contained in the new Privacy Amendment (Enhancing Privacy Protection) Act 2012 set out how private sector organisations should collect, use, keep secure and disclose personal information. This policy serves as an indication of which APPs directly apply to our organisation and how our privacy program achieves these compliance requirements. Australian Privacy Principles 1. Collection When interacting with Ingeniq or www.ingeniq.com.au for commercial activities as ordering or registering for product, training, software downloads or product evaluation, Ingeniq will ask you to provide certain information about yourself. It is completely optional for you to engage in these activities. If you elect to engage in these activities, however, Ingeniq may ask that you provide us personal information, such as your first and last name, mailing address, postcode, e-mail address, employer, job title and department, telephone and facsimile numbers, and other personal identifying information. 2. Use and disclosure We use the information provided by you and may save your transaction information in order to fulfill the orders you placed for goods and/or services. We may disclose your personal information to suppliers, contractors, such as financial institutions or delivery companies, as a part of product or service delivery. Ingeniq is committed to offer a safe business environment to customers and reduce fraud transactions it faces. We may contract third-party providers to verify transaction information and report usage of the web site. Ingeniq will not sell, trade, or rent your personal information collected. We may use the information we collect to notify you about important new product and service releases and offers we think you'll find valuable. By registering you agree to allow us to contact you for typical direct marketing and promotional purposes. If you do not wish to be contacted in relation to any future marketing or promotional activities, please reply to any Ingeniq promotional material by sending an email to remove@ingeniq.com.au . For email related activity, reply with the word "REMOVE" either in the Subject field of the email or in the first lines of the email body. Your personal information will not be used in future related marketing activities. Ingeniq may disclose your information to relevant authorities where it is necessary to: (1) conform to legal requirements or comply with legal process; (2) protect and defend the rights or property of Ingeniq; or (3) enforce the agreements with you. 3. Data quality Ingeniq takes reasonable steps to make certain that any personal information held is accurate. When practicable Ingeniq will endeavor to ensure that that your personal information is accurate, complete and up-to-date during the course of its use and during its initial collection. The accuracy of personal information often depends on the information initially provided by you or by the organisation provided this information. Please refer to APP 13 for further information on correction of personal information. 4. Data security To ensure that personal information is protected Ingeniq have implemented industry standard security mechanisms to protect from loss, misuse and unauthorized access, disclosure, alteration and destruction. 5. Openness Under the compliance framework set out in the Privacy Amendment (Enhancing Privacy Protection) Act 2012, Ingeniq is required to provide a clearly expressed and up to date APP privacy policy stating: The kinds of personal information Ingeniq collects and holds. How Ingeniq collect and hold personal information. The purpose for which Ingeniq collect, holds, uses and discloses personal information. How an individual may access personal information is held by Ingeniq and seek the correction of such information. How an individual may complain about a breach of the Australian Privacy Principles, or a registered APP code (if any) that binds Ingeniq, and how Ingeniq will deal with such a complaint. Whether Ingeniq is likely to disclose personal information to overseas recipients. If Ingeniq is likely to disclose personal information to overseas recipients, the countries in which such recipients are likely to be located if it is practicable to specify those countries in the policy. This Privacy Policy meets this APP requirement. 6. Access and correction Under the Privacy Amendment (Enhancing Privacy Protection) Act 2012 you have the right to access your personal information, subject to some criteria and exceptions. On formal request to the Privacy Officer, Ingeniq will provide you with personal information which is readily accessible and which may lawfully be provided to you under this principle. Specific examples of where Ingeniq may not be able to provide information may include: Where you are employed or contracted or engaged by Ingeniq Circumstances where gathering access would disclose information of a third party without their expressed consent and is not possible to remove their identifying information If the information has been prepared for the purpose of actual or potential legal proceedings; and To protect commercial confidentiality To enable Ingeniq to verify your identity and entitlement to the relevant personal information, general access or correction requests are initiated by forwarding to Ingeniq a completed 'Ingeniq Privacy Request for Access or Correction' form. The applicant must provide proof of their identity to the satisfaction of Ingeniq. There will be no charge for logging a request for access or correction, although Ingeniq reserves the right to levy a reasonable charge for the administration effort involved in complying with your request. 7. Identifiers Ingeniq does not use or intend to use government issued identifiers (such as tax file numbers or drivers license numbers) unless required under a contract basis (such as a government issue or request for works) or authorized by law to do so (for example, tax file numbers are required for the purpose of complying with taxation obligations). 8. Anonymity Wherever lawful and practical, Ingeniq will take all reasonable steps to offer the option to dealing with our organisation anonymously. If dealing with Ingeniq for commercial purposes, personal information is typically requested and requests to deal with us anonymously may affect the quality of the service or transaction that we provide. 9. Transborder data flow Ingeniq will not send, either electronically or hard copy format, personal information to another country unless it has taken the steps to ensure that the information has been collected in a compliant manner (i.e. that the individual has given consent or understands within reasonable acknowledgment) and that the information is being transferred for the purpose of fulfilling a commercial transaction. Ingeniq will attempt at all times to ensure that the information will be protected to the same standard as that required by the Privacy Amendment (Enhancing Privacy Protection) Act 2012 10. Sensitive information Ingeniq does not normally collect sensitive information about you. If it has a requirement to do so, this information will be requested formally (via written consent) prior to collection. Web Site Terms and Conditions of Use Statement By using the Ingeniq web site (www.Ingeniq.com.au ), you (the individual) consent to the collection and use of this information as outlined in the online privacy statement and this Privacy Policy. We may change our privacy statement at any time and without notice. If we decide to change our privacy statement we will post those changes on this page so that you are aware of what information we collect, how we use it, and under what circumstances we disclose it. Ingeniq may also use products or services to analyse traffic and usage to its web site in order to improve its services. Ingeniq will not manage any identified data for this purpose. The information collected is used in aggregate to analyse and improve our web sites performance and usability. In addition Ingeniq may use cookies to track your visit to our web sites. A cookie is a small amount of data that is transferred to your browser by a Web server and can only be read by the server that gave it to you. The cookies will not contain any identified data, and we do not use cookies for marketing, promotional or advertising purposes, nor do we use cookies to track your Internet activity before or after you leave Ingeniq online business. We may also use the information we collect to notify you about important new releases, new Ingeniq services, and offers we think you'll find valuable. By registering you agree to allow us to contact you for promotional purposes. You may have your name removed from our e-mailing list at any time by either replying to any Ingeniq promotional email with the word "REMOVE" either in the Subject field of the email or in the first lines of the email body, or simply by sending an email to remove@ingeniq.com.au . Ingeniq customers and web site users may choose that some information collected is not to be used for certain purposes. To do this, or to change account or contact information collected at Ingeniq, please call a Ingeniq customer service representative on +61 2 8436 9600. What is personal information? 'Personal information is information or an opinion and whether recorded in material form or not, about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion. It includes all personal information regardless of its source. Summary Ingeniq is committed to preserving your trust and confidence. We use the information we collect to better understand your preferences and enhance your overall experience on our commercial practices and dealings. We do not sell, trade or rent your personal information to others. If for some reason you believe that we have not adhered to these principles, please notify us by via the Ingeniq Privacy Officer (as per contact details above) and we will do our best to determine and correct the problem in a prompt and professional manner. QF3027.1.14 Your Privacy and Ingeniq 12 March 2014