Search this site

Splunk Fundamentals 1 Training Legacy Course Information delivered by INGENIQ Splunk Fundamentals 1 - Legacy Course Information The Splunk Fundamentals 1 course is a self-paced e-learning that teaches you how to search and navigate in Splunk, use fields, get statistics from your data, create reports, dashboards, lookups, and alerts. It will also introduce you to Splunk’s datasets features and Pivot interface. This Fundamentals 1 Splunk Courses have been replaced by shorter Splunk single-subject course modules , this page have been retained to assist customers. To see which courses have replaced Splunk Fundamentals 1 and book the equivalent course click here Single-subject to Multi-subject course mapping. Alternatively contact one of our Training Consultants on 1300 245 802 or email sales@ingeniq.com.au Enjoyable presenter and easy to understand for an intermediate Splunk user pursuing Admin certification. Thanks from Massachusetts! Participant, Splunk Fundamentals 2 Splunk Fundamentals 1 - Course Topics Introduction to Splunk’s interface Basic Searching Using fields in searches Search Fundamentals Transforming commands Creating reports and dashboards Datasets The Common Information Model (CIM) Creating and using lookups Scheduled Reports Alerts Using Pivot Class Format Self-paced e-learning, requires HTML5 compatible browser. OR Instructor led version of the course delivered as a two – day class. Course Prerequisites None Related Certifications Splunk Core Certified User Splunk Core Certified Power User Splunk Core Certified Advanced Power User Splunk Enterprise Certified Admin Splunk Enterprise Certified Architect Splunk Fundamentals 1 - Audience Anyone whose role requires them to view or run reports within Splunk. Previous attendees have had various roles within their organisations such as Consultants, IT Operations/Security, Business Intelligence/Business Analysts and Marketing Professionals, Solution Architects and Application Developers. After completing Splunk Fundamentals 1 course you will be able to Get working, hands-on knowledge of all aspects of Splunk from an end-users perspective Learn how to use the pivot tool to create charts without the use of the search language Learn the basics of searching which will enable you to create and save simple searches and reports You will also be able to create powerful, interactive visualisations which you can save as dashboards, which allow you to quickly see your data the way you want it. Splunk Fundamentals 1 - Course Objectives Module 1 – Introduction How to Use the eLearning Interface Overview of Buttercup Games Inc. Module 2 – What is Splunk? Splunk Components Installing Splunk Getting data into Splunk Module 3 - Introduction to Splunk’s User Interface Understand the uses of Splunk Define Splunk Apps Customizing your user settings Learn basic navigation in Splunk Module 4 - Basic Searching Run basic searches Use autocomplete to help build a search Set the time range of a search Identify the contents of search results Refine searches Use the timeline Work with events Control a search job Save search results Module 5 - Using Fields in Searches Understand fields Use fields in searches Use the fields sidebar Module 6 – Search Language Fundamentals Review basic search commands and general search practices Examine the search pipeline Specify indexes in searches Use autocomplete and syntax highlighting Use the following commands to perform searches: tables rename fields dedup sort Module 7 – Using Basic Transforming Commands The top command The rare command The stats command Module 8 – Creating Reports and Dashboards Save a search as a report Edit reports Create reports that include visualizations such as charts and tables Create a dashboard Add a report to a dashboard Edit a dashboard Module 9 – Datasets and the Common Information Model Naming conventions What are datasets? What is the Common Information Model (CIM)? Module 10 – Creating and Using Lookups Describe lookups Create a lookup file and create a lookup definition Configure an automatic lookup Module 11 – Creating Scheduled Reports and Alerts Describe scheduled reports Configure scheduled reports Describe alerts Create alerts View fired alerts Module 12 – Using Pivot Describe Pivot Understand the relationship between data models and pivot Select a data model object Create a pivot report Create an instant pivot from a search Add a pivot report to a dashboard Splunk Course Schedules and Timezones Ingeniq Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET).

Creating Dashboards with Splunk Training - Legacy Course Information delivered by INGENIQ Creating Dashboards with Splunk - Legacy Course Information The Creating Dashboards with Splunk course is designed for power users who want to create fast and efficient views that include customized charts, drilldowns, advanced behaviors and visualizations. Major topics include using tokens, global searches, event handlers, dynamic drilldowns and simple XML extensions for JavaScript and CSS. This Creating Dashboards with Splunk Courses have been replaced by shorter Splunk single-subject course modules , this page have been retained to assist customers. To see which courses have replaced Creating Dashboards with Splunk and book the equivalent course click here Single-subject to Multi-subject course mapping. Alternatively contact one of our Training Consultants on 1300 245 802 or email sales@ingeniq.com.au The instructor very knowledgeable and was able to provide useful examples during the course.. Participant, Splunk Enterprise System Administration Creating Dashboards with Splunk - Course Topics Simple XML Tokens Global Searches Dynamic Drilldowns Event Handlers Simple XML Extensions Class Format Instructor-led lecture with labs. Delivered via virtual classroom or at your site Course Prerequisites Splunk Fundamentals 1 Splunk Fundamentals 2 Related Certifications Splunk Core Certified Advanced Power User Splunk Certified Developer Splunk Core Certified Consultant Creating Dashboards with Splunk - Audience Anyone whose role includes analysing and presenting complex data sets. Previous attendees have included Consultants, Business Intelligence/Business Analysts, Data Scientists and Application Developers. Skills Working Knowledge of XML Some experience with HTML, CSS, and JavaScript (recommended) After completing Creating Dashboards with Splunk course you will be able to Understand 3 types of Splunk apps Know what an app consists off Create a simple XML app Use custom drilldowns and forms to enhance dashboards Brand & Package your own Splunk app Creating Dashboards with Splunk - Course Objectives Module 1 – Creating a Prototype Define simple syntax for views Use best practices for creating views Identify transforming commands Troubleshoot views Module 2 – Using Forms Explain how tokens work Use tokens with form inputs Define types of token filters Create cascading inputs Module 3 - Improving Performance Identify ways to improve dashboard performance Use the tstats command Use global searches Accelerate data models Module 4 – Customising Dashboards Customize chart and panel properties Set panel refresh and delay times Disable search access features Define event annotations Module5 – Using Drilldowns Define types of drilldowns Identify predefined tokens Create dynamic drilldowns Module 6 – Adding Visualisations and Behaviors Identify types of event handlers Describe event actions Create contextual drilldowns Use simple XML extensions Define Splunk Custom Visualizations Splunk Course Schedules and Timezones Ingeniq Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses usually starts at AEDT 12:00pm or AEST 11:00 am and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West)

Splunk IT Service Intelligence Certified Administrator Splunk Certification | INGENIQ Splunk IT Service Intelligence Certified Administrator As part of Splunk Certification, a Splunk IT Service Intelligence Certified Admin installs and configures Splunk’s app for IT Service Intelligence (ITSI), including ITSI architecture, deployment planning, service design and implementation, notable events and developing glass tables and deep dives. This Splunk Certification demonstrates an individual’s ability to deploy, manage and utilise Splunk ITSI to monitor mission-critical services. Please note: There are two approved coursework paths for this Splunk Certification track. Candidates may complete either Splunk Enterprise System Administration and Splunk Enterprise Data Administration or Splunk Cloud Administration as part of this certification track. Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! Learning Path Free Training Paid Training Paid Cert Exam Splunk Enterprise System Administration Splunk Enterprise Data Administration Splunk Cloud Administration Implementing Splunk IT Service Intelligence Cert Exam - Splunk IT Service Intelligence Certified Admin Splunk Certifications Exam When you’re ready to take a Splunk Certification exam, please view the Exam-Registration-Tutorial for registration assistance. As a reminder, each exam attempt costs US$125. Bulk registration vouchers can be purchased at a discounted price of five registrations for US$500. How to register for your exam There are three ways to purchase a PearsonVUE registration voucher: 1) Directly from PearsonVUE This is the most streamlined approach. Follow the steps for account creation and exam registration provided at www.pearsonvue.com/splunk Payment will be collected at the time of registration. You can also visit the Pearson VUE voucher store for direct purchase. 2) From Splunk (as an individual) Log into your existing account at Splunk.com/Education to purchase a registration code. Payment can be made via credit card or existing Splunk Education credits. Splunk will email you a unique registration code, which can be used for registration at www.pearsonvue.com/splunk . 3) From Splunk (as an account) Your Splunk Sales Rep can add certification exams to any deal. Once the number of vouchers has been requested, Splunk will email your unique registration codes, which can be used for registration at www.pearsonvue.com/splunk All scheduled exams are subject to a minimum 24-hour cancellation and/or rescheduling policy. Failure to cancel or reschedule an exam within this timeframe results in forfeiture of registration fee. One of the best trainers I've had - keeps content relevant & explains the tasks in easily understood language. Extremely knowledgeable in all fields relating to the content. Well paced & accommodated to everyone's questions & progress. Participant, Splunk Enterprise Data Administration

Splunk Enterprise Lab Splunk Enterprise Lab This Splunk Enterprise 24-hour practical lab exercise is designed to take you through the tasks of a complete mock development. Each participant is given access to a specified number of Linux servers and a set of requirements. Participants then perform a mock deployment according to requirements which adhere to Splunk Deployment Methodology and best-practices. Splunk Credit Value : 100 Duration : First 4 hours instructor led, 24 hours allowed for completion Time : 11:00 am - 3:00 pm AEST *Course discounts apply for Splunk Partners. Please use the currency convertor above to check for course pricing in your local currency. Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! Extremely proficient at controlling the pace of training. Great explanation of answers & not just reading the content. Very knowledgeable about all content. Looking forward to completing the rest of the of the class. Highly recommended. Participant, Splunk Enterprise Data Administration Class Format Instructor-led lecture with labs. Delivered via virtual classroom. Audience Enterprise architects seeking to sit the Certified Architect exam. Related Certifications Splunk Enterprise Certified Architect Prerequisite Knowledge To be successful, students should have a solid understanding of the following: Splunk Fundamentals 1 Splunk Fundamentals 2 Or the following single-subject courses : What is Splunk? Intro to Splunk Using Fields Scheduling Reports and Alerts Visualisations Introduction to Knowledge Objects Creating Field Extractions Introduction to Dashboards Students should also understand the following courses: Splunk Enterprise System Administration Splunk Enterprise Data Administration Architecting Splunk Enterprise Deployments Troubleshooting Splunk Enterprise Splunk Enterprise Cluster Administration After completing the Splunk Enterprise Lab you will be able to; You will have a thorough understanding of Splunk Deployment Methodology and best-practices for planning, data collection, and sizing for a distributed deployment. Be able to manage and troubleshoot a standard distributed deployment with indexer and search head clustering. Splunk Enterprise Lab - Course Objectives Installation and Infrastructure Install forwarders, indexer, search head, deployment server and license master Configuration and Collection Configure an index cluster Deploy all specified configurations via deployment server Configure inputs from forwarders Configure and confirm index-time knowledge Create search time fields Searching and Reporting Create searches for each required use case Get indexer event acknowledgements Splunk Enterprise Practical Lab - Upcoming Sessions We don’t have any products to show here right now.

Ingeniq delivers authorised Splunk training with role-based paths for Analysts, Admins, Architects, ES and SOAR teams. Build real, job-ready Splunk skills. Your Role-Based Splunk Learning Starts Here Train with Australia’s authorised Splunk training provider — with live instructors, hands-on labs and product-specific paths designed for real Splunk environments. Start building capability across the Splunk products your team uses today. View Course Dates Explore Courses Available ● Authorised Splunk Training Provider Since 2010 ● Thousands Trained Across Australia & New Zealand Plan Your Splunk Certification Speak with an Ingeniq expert about your certification goals — for individuals or teams. Full Name* Work Email* Company / Organisation* Course for: Notes: Send Enquiry Our team will contact you within one business day Why Choose Ingeniq for Splunk Certification Training Ingeniq delivers official Splunk training aligned to real operational roles — analysts, administrators, architects, security teams and SOAR engineers. Our certified instructors help learners build practical, job-ready Splunk skills that support Splunk certifications and day-to-day operational excellence. Why people choose Ingeniq: Authorised Splunk Training Provider Access Splunk-approved content for every product area. Certified, Industry-Experienced Instructors Learn from instructors active in real Splunk environments. Hands-On, Lab-Driven Learning Develop skills through real Splunk labs, not theory-only. Product-Specific Paths Follow structured journeys tailored to your daily tasks. Up-to-Date Training Stay current with Splunk features, tools and best practices. Your Role-Based Splunk Learning Starts Here A simple overview of how Ingeniq helps you build role-based Splunk skills with paths that support both Splunk learning and Splunk certification goals. Choose Your Product Path Select the role that matches your responsibilities. Enroll in a Course Use Splunk Credits or standard payment. Train Live With Experts Learn through instructor-led labs and demos. Apply Product-Specific Skills Apply Splunk skills directly in real work. See how your role path connects to Splunk certifications. View Certification Training Guide Role-Based Learning Paths Choose the role that matches your day-to-day responsibilities. Each learning path includes official Splunk courses grouped into structured sequences to build capability step-by-step. Splunk User / Analyst Path Ideal for users who need to run searches, build dashboards, and share insights with the business. Introduction to Dashboards View course Dynamic Dashboards View course Search Optimisation View course Splunk Administrator Path For administrators responsible for data onboarding, user management, and overall platform health. System Administration View course Data Administration View course Troubleshooting Splunk View course Cluster Administration (Optional) View course Splunk Architect Path For engineers designing and optimising distributed Splunk deployments across the organisation. System Administration (revision) View course Data Administration (revision) View course Architecting Splunk Deployment View course Security (ES) Analyst Path For SOC analysts working with notable events, investigations, and security incidents. Using Splunk Enterprise Security View course Recommended for new users Searching & Reporting, Using Fields, Creating Alerts View course Enterprise Security Admin Path For admins responsible for maintaining and tuning Splunk Enterprise Security. System & Data Administration View course | View course Using Splunk Enterprise Security View course Administering Splunk ES View course SOAR Automation Path For engineers designing and optimizing distributed Splunk deployments. Investigating Incidents with SOAR View course Administering Splunk SOAR View course Developing SOAR Playbooks View course Which Role Path Should You Start With? Use this guide to match your day-to-day responsibilities with the role-based learning path that fits best. Analyst / Business User Administrator Architect Security (ES) Analyst ES Administrator SOAR Engineer Best for Users running searches, dashboards and reports Core Focus Searching Reporting Visualisations Key Courses Power User Fast Track Best for IT & platform teams managing Splunk environments Core Focus Deployment Data onboarding System health Key Courses Power User Fast Track Admin Data Admin Troubleshooting Cluster Admin Best for Senior engineers designing distributed deployments Core Focus Architecture Scaling Clustering Key Courses Architecting Splunk Deployments (plus System & Data Admin revision) Best for SOC teams working with detections & investigations Core Focus Notable events Triage Investigations Key Courses Using Enterprise Security Best for Automation engineers building SOAR workflows Core Focus Playbooks Integrations Orchestration Key Courses Using SOAR Admin SOAR Playbook Development Best for Security & platform teams maintaining Splunk ES Core Focus ES Configuration Tuning Correlation Searches Key Courses Using ES Administering ES System & Data Admin (revision) Talk to a Training Advisor Which Certification Path Is Right for You? Choose a path based on your role and how you use Splunk. If you're unsure, Ingeniq experts can help you map the right certification journey. Official Splunk Curriculum Every role path follows Splunk’s authorised training sequences. Hands-On Labs Practice in real lab environments — not simulations. Team-Ready Delivery Run private training sessions aligned to your team’s roles. Splunk Education Credits Accepted Practice in real lab environments — not simulations. What Our Participants Say “Clear guidance and hands-on labs made it easy to build the core skills needed for my role as an analyst.” Participant, Splunk User / Analyst Path — Australia Frequently Asked Questions (FAQs) Do we need to complete the core platform path first? Recommended for most teams new to Splunk, but not required. We can tailor the path based on your experience. Can we mix products in private training? Yes. Many teams combine core admin with ES, ITSI or SOAR. Are these the same as certification paths? They align with Splunk’s official training but are organised by product, not exam. Can we use Splunk Training Credit? Yes. Splunk Credits and training packs can be applied to product-based paths. Start Your Product-Based Splunk Training Talk to us about the Splunk products your team uses today. Choose your product path, enrol in your courses and build the skills you need to operate Splunk confidently across your environment. View Course Dates Contact Us

Shop Course Schedules and Timezones Ingeniq Course are delivered live and in English and provide access to customers spanning multiple timezones. ​ Dates and times displayed for each course are relative to Australian Eastern Time (AET). ​ ​ AM Marked Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm and are optimal for customers in the following countries and areas; ​ UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Courses PM marked courses usually starts at AED T 12:00pm or AEST 11:00 am and are optimal for customers in the following countries and areas; ​ UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) Filter by Multi Subject Courses Splunk Enterprise System Administration Splunk Enterprise Data Administration Splunk Cloud Administration Architecting Enterprise Deployments Troubleshooting Splunk Cluster Administration Implementing IT Service Intelligence Using IT Service Intelligence Using Enterprise Security Administering Enterprise Security Administering SOAR (Phantom) Developing Phantom Playbooks Single Subject Courses Dynamic Dashboards Search Optimisation Data Models Enriching Data with Lookups Using Fields Working with Time Creating Knowledge Objects Creating Field Extractions Correlation Analysis Leveraging Lookups and Subsearches Creating Maps Comparing Values Introduction to Dashboards Statistical Processing Result Modification Multivalue Fields Other Filters AM Courses PM Courses Early Bird Discounts Sort by Administering Splunk Enterprise Security : Starts Dec 16, 2024, 9:00am AEDT Price $1,500.00 Splunk Cloud Administration : Starts Dec 16, 2024, 9:00am AEDT Price $2,000.00 Architecting Splunk Enterprise Deployments : Starts Dec 12, 2024, 9:00am AEDT Price $1,500.00 Splunk Enterprise Data Administration V9 : Starts Dec 11, 2024, 9:00am AEDT Price $2,250.00 Splunk Enterprise System Administration V9 : Starts Dec 9, 2024, 9:00am AEDT Price $1,500.00 Splunk Enterprise Cluster Administration : Starts Dec 9, 2024, 9:00am AEDT Price $1,500.00 Troubleshooting Splunk Enterprise : Starts Dec 5, 2024, 9:00am AEDT Price $1,000.00 Using Splunk Enterprise Security : Starts Dec 2, 2024, 9:00am AEDT Price $1,500.00 Leveraging Lookups and Subsearches : Starts Nov 29, 2024, 1:30pm AEDT Price $500.00 Enriching Data with Lookups : Starts Nov 29, 2024, 9:00am AEDT Price $500.00 Creating Field Extractions : Starts Nov 28, 2024, 9:00am AEDT Price $500.00 Data Models : Starts Nov 28, 2024, 1:30pm AEDT Price $500.00 Load More

There’s Nothing Here... We can’t find the page you’re looking for. Check the URL, or head back home. Go Home