Search this site

Splunk Education, Training and Professional Services Provider SOC Essentials: Investigating and Threat Hunting Summary This course is part of the Defence Analyst learning path and is intended for learners who want to begin or advance a career as a Security Analyst within a SOC, as well as defense engineers and Splunk Enterprise Security or Splunk SOAR administrators who provide support to these roles. In this course you will learn and practice how to conduct investigations using Splunk Enterprise Security features, including Risk Based Alerting, through best practices shared by our security champions, as well as practice some common tasks using Splunk SOAR. You will also learn about the PEAK Threat Hunting framework and will apply its basic concepts in a hypothesis-driven threat-hunting exercise. Splunk Credit Value: 100 Duration: 9 hours over 2 days Time: 9am to 1.30pm (AET) Enjoyable presenter and easy to understand for an intermediate Splunk user pursuing Admin certification. Thanks from Massachusetts! Participant, Splunk Fundamentals 2 Pre-requisites To be successful students should have a basic understanding of common cyber technologies and concepts including: OSI Model Networking concepts and common security tools Common Operative Systems like Windows and Linux The following Splunk courses are also highly recommended: Intro to Splunk Using fields Previous courses in the Defense Analyst learning path Course Outline Module 1 – Introduction The CyberSecurity Defense Analyst CIM, Data Models and Correlation Refresh Lab 1: Introducing the environment 1 Module 2 – Splunk Enterprise Security (ES) for Analysts What is SIEM again? Asset & Identity Framework Threat Intelligence Framework Notable Event Framework Adaptive Response Framework Incident Investigation Management in Splunk ES Lab 2: Pick up an investigation Module 3 – Risk Analysis Framework Overview Lab 3: Continue your investigation with RBA Module 4 – Working with Splunk SOAR Introducing Splunk SOAR Lab 4: Splunk SOAR Practice Module 5 – Threat Hunting with PEAK PEAK Framework overview Lab 5: Hypothesis-based Threat Hunting Practice Module 6 – Challenge Lab Lab 6: Run your own investigation This lab experience is using the following Splunk tools: Splunk Enterprise Version: 9.1.1 Enterprise Security (ES) Version: 7.3.1 Splunk SOAR Version: 6.2.0.355 At the end of this course you should be able to: Describe SIEM best practices and basic operation concepts of Splunk Enterprise Security, including the interaction between CIM, Data Models, and acceleration, and common CIM fields that may be used in investigations. Carry out a typical triage and investigation process using Splunk Enterprise Security Describe the purpose of the Asset and Identity, and Threat Intelligence frameworks in ES Define Splunk ES elements like Notable Event, Risk Notable, Adaptive Response Action, Risk Object, Contributing Events. Identify common built-in dashboards in Enterprise Security and the basic information they contain. Explain the use of SOAR playbooks and list the basic ways they can be triggered from Enterprise Security Explain the essentials of Risk-based Alerting and the Risk framework List the common high-level steps of threat hunting using the PEAK framework and practice some common steps of hypothesis hunting with Splunk. Audience: SOC Analysts Defence Engineers Splunk Admins who support these roles Related Certifications Splunk Certified Cybersecurity Defense Analyst Splunk Course Schedules and Timezones Ingeniq Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm (4.5 hour sessions over 1 or more days) and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses start at AEDT 12:00pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West)

ngeniq is an authorised Splunk training provider offering live courses and practical labs to help teams build skills and prepare for Splunk certification. Advance Your Career with Certified Splunk Training Expert-led, hands-on Splunk courses using real environments to help you build practical, job-ready skills. Authorised Splunk Training Provider Thousands trained across ANZ Accept Splunk Training Credits Live Online instructor-led Training View Course Dates Explore Learning Paths ● Trusted by organisations since 2010 Use your Splunk Training Credits. Sign-up to receive $100 USD Ingeniq Training Credit. Enquire About Splunk Training Tailor your Splunk training journey with Ingeniq — for individuals and organisations ready to build real capability. Full Name* Work Email* Company / Organisation* Course for:* Note:* Tell us if you are looking for Corporate Training or Splunk Certification information. Send Enquiry Our team will contact you within one business day Learning Paths Choose how you want to learn Splunk Start from your role, the Splunk product you use, or the certification you’re targeting. Certification Paths Follow guided steps mapped directly to Splunk’s official certifications. LEARN MORE Product-Based Paths Develop capability across Splunk Enterprise, Cloud, ES, SOAR and more. LEARN MORE Role-Based Paths Build Splunk skills aligned to admin, architect, developer and power user roles. LEARN MORE Popular Courses Top picks to start (or level up) fast curated by instructors. Live, hands-on sessions with real labs from Ingeniq, your trusted splunk training provider. View All Courses Using Splunk Enterprise Security (ES) V8 Learn core ES workflows including correlation searches, investigations and dashboards. Get Started Read More Administering Splunk SOAR Manage Splunk SOAR operations including automation, playbooks and security workflows. Begin Learning Read More Administering Enterprise Security Develop security operations capability with ES processes, threat insights and monitoring. Start Training Read More How Our Splunk Training Works A simple, clear training experience from start to finish. Brief overview of your journey 1 Choose Your Path Pick courses or tailor it with an Ingeniq expert. 2 Enroll in a Course Use Splunk Credits or standard payment. 3 Train Live Join instructor-led sessions with real labs. 4 Get Exam-Ready Pick courses or tailor it with an Ingeniq expert. Want a deeper look at the Splunk certification process? View Certification Training Guide Sort by Quick View SOC Essentials: Investigating and Threat Hunt : Starts Nov 26 & 27, 2026 Price USD 1,000.00 Quick View Splunk Enterprise Data Administration V9: Starts December 9 to 11, 2026 Price USD 2,250.00 Quick View Early Bird Discounts Visualising and Alerting in Observability Cloud : Starts December 10, 2026 Regular Price USD 500.00 Sale Price USD 450.00 Quick View Splunk Enterprise System Administration V9: Starts December 7 and 8, 2026 Price USD 1,500.00 Quick View Fundamentals of Metrics Monitoring : Starts December 3, 2026, 9AM AET Regular Price USD 750.00 Sale Price USD 675.00 Quick View Architecting Splunk Enterprise Deployments : November 30 to December 30, 2026 Price USD 1,500.00 Load More Training Courses Browse our Splunk training paths and choose the course that fits your learning goals Why Choose Ingeniq as Your Splunk Training Provider Learn from certified experts, build real skills. Ingeniq delivers practical, instructor-led Splunk training designed to support your Splunk certification journey. Authorised Splunk Training Provider Official partner delivering certified Splunk training across Australia with trusted, up-to-date content. Live Expert-Led Training Every session is taught by certified Splunk instructors focused on practical application and real-world capability. Tailored Training Journeys Structured programs for individuals and teams, aligned to roles, products and Splunk certifications. We Accept Splunk Credits Enroll using your Splunk Education Credits with flexible options for public classes and team training. Share your team size, locations and timelines — we’ll design a tailored training plan for you. Contact Ingeniq experts at sales@ingeniq.com.au to tailor your training journey. Explore Splunk Training Packs Corporate Splunk Training Private Splunk training for your team Get focused, hands-on enablement delivered by authorised instructors, aligned to your environment, roles and Splunk certification goals. What’s Included Private training for small teams through to full departments Virtual sessions allow teams to join from anywhere Customised learning plans mapped to roles and certifications Flexible training packs to support ongoing development Splunk Training Credits accepted “The instructors were outstanding. The hands-on labs gave our team real confidence using Splunk.” IT Manager, Large Enterprise Sydney, NSW Enquire now Talk to us about Splunk training for you or your team Share your goals, preferred dates and learning format — we’ll recommend the right course or build a tailored training path for your Splunk certification needs. How We Can Help Guidance on role-based, product and certification paths Options for private, corporate or public classes Support using Splunk Education Credits or purchase orders View Course Dates Contact our team on 1300 245 802 (for International +612 8705 1505) and we’ll respond within one business day. Send Enquiry Tell us a bit about your team and what you’d like to achieve with Splunk. Full Name* Work Email* Company / Organisation* Course for:* Notes:* Tell us if you are looking for specific Splunk Course or Tailor Splunk Training Journey for yourself or organisation employees. Send Enquiry We typically respond within one business day with recommended options and next steps.

Splunk Education, Training and Professional Services Provider < Back Title I'm a paragraph. I'm connected to your collection through a dataset. Click Preview to see my content. To update me, go to the Data Manager. You can get more out of your site elements by making them dynamic. To connect this element to content from your collection, select the element and click Connect to Data. Once connected, you can save time by updating your content straight from your collection—no need to open the Editor, or mess with your design. Add any type of content to your collection, such as rich text, images, videos and more, or upload a CSV file. You can also collect and store information from your site visitors using input elements like custom forms and fields. Collaborate on your content across teams by assigning permissions setting custom permissions for every collection. Be sure to click Sync after making changes in a collection, so visitors can see your newest content on your live site. Preview your site to check that all your elements are displaying content from the right collection fields. Ready to publish? Simply click Publish in the top right of the Editor and your changes will appear live. Previous Next

About INGENIQ Splunk Training and Education Services About Us Welcome to Ingeniq Ingeniq, a Bluechip company is an authorised Splunk training provider - we’ve been working with Splunk to train and enable thousands of customers, partners and Splunk employees since 2010. 2010 The year we taught our first Splunk course Our Expert Trainers Ingeniq trainers have been providing training on all aspects of Splunk since 2010 and have won numerous awards and accolades for training delivery including "Evangelist of the Year” for training excellence. Our trainers are all highly qualified Splunk Certified Architects and Consultants and add hands-on real-life experience to our training sessions. The Certifications and Accreditations you can attain after training with us include Splunk Core Certified Consultant, Splunk IT Service Intelligence Certified Admin, Splunk Accredited Zero Trust Security Consultant, and more. 10,000 Course Attendees 4.8/5 Our Average student course rating Courses and Training Plans If you are unsure of which courses you should select to meet your requirements we can also help with designing a complete Splunk training plan for you or your teams. 541 The Companies we've helped enable Online or Onsite to you and your team We deliver most of our training via public courses online. We can also deliver dedicated courses to your teams remotely or at your premises. 860 Classes we've taught Use Your Splunk Training Credits Splunk training credits expire one year from date of issue. Splunk allows your training credits to be used for any of Ingeniq’s instructor led Splunk courses. 334 Splunk Staff we've trained Book a course for you Expand your career options and add more value to your business by investing in Ingeniq training. Unsure of which course or track? One of our Training Consultants can help. 150 Splunk Architects created Book courses for your team Deployed Splunk recently? staff moved on? want to do more with Splunk? Prefer to get the team trained all at once and together in single dedicated sessions? We can do onsite or virtual classes dedicated to your teams - contact one of our Training Consultants for more information, 162 The dedicated classes we've taught Get a training plan for your Company Deployed or upgraded Splunk recently? want to do more with Splunk? Unsure of which courses and tracks you should invest in based on your Splunk use cases? Our Trainers and Training Consultants can help design your corporate training plan. 62 Corporate Training Plans Call, email or complete the form below One of our experienced Training Consultants will be in contact with you. 1300 245 802 Int: +61 2 9094 3555 Email: sales@ingeniq.com.au Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! One of the best trainers I've had - keeps content relevant & explains the tasks in easily understood language. Extremely knowledgeable in all fields relating to the content. Well paced & accommodated to everyone's questions & progress. Participant, Splunk Enterprise Data Administration

Splunk Education, Training and Professional Services Provider Advanced Dashboards and Visualizations with Splunk 8.1 Summary This one-day course is designed for advanced users who want to create SplunkJS dashboards and Splunk Custom Visualizations. It focuses on creating dashboards, adding inputs, using event handlers and creating Splunk Custom Visualizations using JavaScript and XML. Description SplunkJS Dashboards Tokens Using Event Handlers Custom Visualizations Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! Enjoyable presenter and easy to understand for an intermediate Splunk user pursuing Admin certification. Thanks from Massachusetts! Participant, Splunk Fundamentals 2 Splunk Credit Value: 50 Duration: 4.5 hours Time: 11am – 3.30 pm AEST Objectives Module 1 – SplunkJS Dashboards Identify view types Create a SplunkJS dashboard Define view properties, methods and events List types of search managers Module 2 – Using Tokens Use tokens in SplunkJS Define Splunk’s token models Describe how to get, set, and change tokens Create a SplunkJS form Module 3 – Using Event Handlers Identify types of event handlers Define event handler syntax Define drilldown properties Create an event handler Module 4 – Creating Custom Visualizations Define the custom visualization primary files Add custom visualizations to views Create a custom visualization Define security best practices Prerequisites To be successful, students should have a solid understanding of the following courses: Splunk Fundamentals 1 Splunk Fundamentals 2 OR the following single-subject courses: What Is Splunk? Intro to Splunk Using Fields Visualizations Data Models Introduction to Dashboards Dynamic Dashboards Students should also have the following skills: Using a terminal editor (vi,nano, etc) Editing JavaScript, XML, CSS and HTML Splunk Course Schedules and Timezones Ingeniq Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm (4.5 hour sessions over 1 or more days) and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses start at AEDT 12:00pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West)

Students will learn fundamentals of SOAR (Phantom) playbook capabilities, creation and testing. This course is a pre-requisite for the Advanced Phantom Implementation course. Developing SOAR Playbooks The Developing SOAR (Phantom) Playbooks is an introductory course that prepares IT and security practitioners to plan, design, create and debug basic playbooks for Phantom. Students will learn fundamentals of SOAR (Phantom) playbook capabilities, creation and testing. This course is a pre-requisite for the Advanced Phantom Implementation course. Splunk Credit Value : 100 Duration : 4.5 hours over 2 days Time : 11:00 am - 2:30 pm AEST *Course discounts apply for Splunk Partners. Please use the currency convertor above to check for course pricing in your local currency. Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! Extremely proficient at controlling the pace of training. Great explanation of answers & not just reading the content. Very knowledgeable about all content. Looking forward to completing the rest of the of the class. Highly recommended. Participant, Splunk Enterprise Data Administration Developing SOAR (Phantom) Playbooks - Course Topics Automation best practices The visual playbook editor Using actions and decisions Using action results Testing and debugging playbooks User interaction Output formatting Complex logic Interacting with artifacts Using the vault in a playbook Custom lists Class Format Instructor-led lecture with labs. Delivered via virtual classroom or at your site Course Prerequisites To be successful, students must have a working understanding of these courses: Administering Splunk SOAR Additionally, experience with Python programming is useful, but not required Related Certifications None Developing SOAR (Phantom) Playbooks - Audience SOC Engineers, Security Architects, Threat Hunters & Responders, and Analysts who respond to security indicents using Phantom automation. After completing Developing SOAR (Phantom) Playbooks course you will be able to Use the visual playbook editor to create and modify automation flows Trigger user interactions, filtering and logic Developing SOAR (Phantom) Playbooks - Course Objectives Module 1 – Introduction to Playbooks Understand automation best practices Design playbooks Python support Use the playbook manager Module 2 – Visual Playbook Editor Use the visual playbook editor Use actions and decisions Process action results Test new playbooks Module 3 – User Interaction and Logic Interact with users during playbook execution Format outputs Use decision blocks Module 4 – Accessing and Formatting Data Accessing action results Accessing artifact and container data Formatting data Module 5 – Modular Playbook Development Calling other playbooks Creating artifacts Sending email Passing data between playbooks Module 6 – Custom Lists and Filters Custom list concepts Create custom lists Access lists from playbooks Use filters Developing SOAR (Phantom) Playbooks - Upcoming Courses We don’t have any products to show here right now.

Correlation Analysis - Splunk Education Single Subject Course Training. Correlation Analysis The Splunk Education single-subject course module, Correlation Analysis is for power users who want to learn how to calculate co-occurrence between fields and analyze data from multiple datasets. Topics will focus on the transaction, append, appendcols, union, and join commands. Splunk Credit Value : 50 Duration : 3 hours Time : 9:00 am - 12:00 pm AEST Please use the currency convertor above to check for course pricing in your local currency. Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! The instructor was very responsive to questions and queries both private and Communal.. Final module collaborative lab walkthrough on screen was particularly helpful. Participant, Splunk Fundamentals 2 Correlation Analysis - Course Topics Calculate Co-Occurences Between Fields Analyze Multiple Datasets Class Format Instructor-led lecture with labs. Delivered via virtual classroom or at your site Course Prerequisites To be successful, students must have completed these Splunk Education course(s) or have equivalent working knowledge: Intro to Splunk Using Fields Visualizations Working with Time Statistical Processing Comparing Values Result Modification Scheduling Reports and Alerts Introduction to Dashboards Correlation Analysis - Audience Search Expert learning path Correlation Analysis - Course Objectives Topic 1 – Calculate Co-Occurrence Between Fields Understand transactions Explore the transaction command Topic 2 – Analyze Multiple Data Source Understand subsearch Use the append, appendcols, union, and join commands to combine, analyze, and compare multiple data sources Splunk Course Schedules and Timezones Splunk Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses usually starts at AEDT 12:00pm or AEST 11:00 am and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) Correlation Analysis - Upcoming Schedule We don’t have any products to show here right now.

Splunk Education, Training and Professional Services Provider Users The User Learning path takes you from investigative keyword searches to creating rich reports and visualisations to becoming a Splunk search ninja! Notice : The following courses; Using Splunk, Searching and Reporting with Splunk, Creating Splunk Knowledge Objects, and Splunk Infrastructure Overview are now replaced with Splunk Fundamentals 1 and Splunk Fundamentals 2. User Track Courses Splunk Fundamentals 1 Splunk Fundamentals 2 Splunk Fundamentals 3 Creating Dashboards with Splunk Advanced Searching and Reporting Splunk for Analytics and Data Science Splunk Infrastructure Overview Advanced Dashboards and Visualisations One of the best trainers I've had - keeps content relevant & explains the tasks in easily understood language. Extremely knowledgeable in all fields relating to the content. Well paced & accommodated to everyone's questions & progress. Participant, Splunk Enterprise Data Administration

Dynamic Dashboards - Splunk Education Single Subject Course Training. Dynamic Dashboards The Splunk Education single-subject course module, Dynamic Dashboards is designed for power users who want to learn best practices for building dashboards in the Dashboard Studio. This course focuses on creating inputs, chain searches, event annotations, and improving dashboard performance. Splunk Credit Value : 50 Duration : 4.5 hours Time : 9:00 am - 1:30 pm AEST Please use the currency convertor above to check for course pricing in your local currency. Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! The instructor was very responsive to questions and queries both private and Communal.. Final module collaborative lab walkthrough on screen was particularly helpful. Participant, Splunk Fundamentals 2 Dynamic Dashboards - Course Topics Data Source Types Mock Data Event Annotations Adding Inputs Chain Searches Class Format Instructor-led lecture with labs. Delivered via virtual classroom or at your site Course Prerequisites To be successful, students should have completed these courses: Intro to Splunk Using Fields Search Optimization Introduction to Dashboards Dynamic Dashboards - Audience Knowledge Manager learning path Dynamic Dashboards- Course Objectives Topic 1 – Selecting a Data Source Identify dataSources stanza fields Name search types Use a secondary data source Topic 2 – Adding Inputs Identify types of inputs Describe how inputs work Create a dynamic input Add cascading inputs Topic 3 - Improving Performance Identify performance improvement methods Use tstats and accelerated data models Create chain searches Set defaults Topic 4 – Comparing Temporary versus Persistent Fields Differentiate between temporary and persistent fields Create temporary fields with the eval command Extract temporary fields with the erex and rex commands Topic 5 - Enriching Data Understand how fields from lookups, calculated fields, field aliases, and field extractions enrich data Splunk Course Schedules and Timezones Splunk Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses usually starts at AEDT 12:00pm or AEST 11:00 am and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) Dynamic Dashboards - Upcoming Schedule We don’t have any products to show here right now.

Manual Payments | INGENIQ for Splunk Training and Education Services Manual Payments Have a Question? Our Education Consultants can help - call or email us and we'll be in touch. Ingeniq, a Bluechip company The Zenith Level 20, Tower A 821 Pacific Highway Chatswood NSW 2067 1300 245 802 Int: +612 8705 1505 Email: sales@ingeniq.com.au Placing an order on the Ingeniq website via Manual Payments Your recent web order was sent to us but it is currently awaiting payment. Once we have received the payment for your order, your order processing will be completed. When remitting payment in AUD via EFT, please use the following information: Account Name: Bluechip Infotech Pty Ltd Bank Name: Commonwealth Bank of Australia Bank Address: 48 Martin Place, Sydney NSW 2000 BSB: 064-012 Account: 1007-1197 When remitting payment in NZD via EFT, please use the following information Account Name: Bluechip Infotech Pty Ltd Bank Name: Commonwealth Bank of Australia Bank Address: 48 Martin Place, Sydney NSW 2000 BSB: 062-000 Account Number: 20298816 SWIFT Code: CTBAAU2S When remitting payment in USD via EFT, please use the following information Account Name: Bluechip Infotech Pty Ltd Bank Name: Commonwealth Bank of Australia Bank Address: 48 Martin Place, Sydney NSW 2000 BSB: 062-000 Account: 1567-9446 SWIFT Code: CTBAAU2S ACN : 076 483 808 ABN: 32 076 483 808 Email address for remittances is accountsstaff@bluechipit.com.au If you have any concerns, please do not hesitate to contact us at sales@ingeniq.com.au One of the best trainers I've had - keeps content relevant & explains the tasks in easily understood language. Extremely knowledgeable in all fields relating to the content. Well paced & accommodated to everyone's questions & progress. Participant, Splunk Enterprise Data Administration

Comparing Values - Splunk Education Single Subject Course Training. Comparing Values The Splunk Education single-subject course module, Comparing Values is for power users who want to learn how to compare field values using eval functions and eval expressions. Topics will focus on using the comparison and conditional functions of the eval command, and using eval expressions with the field format and where commands. Splunk Credit Value : 50 Duration : 3 hours Time : 9:00 am - 12:00 pm AEST Please use the currency convertor above to check for course pricing in your local currency. Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! The instructor was very responsive to questions and queries both private and Communal.. Final module collaborative lab walkthrough on screen was particularly helpful. Participant, Splunk Fundamentals 2 Comparing Values - Course Topics Using eval to Compare Filtering with where Using Fields in Searches Comparing Temporary versus Persistent Fields Enriching Data Class Format Instructor-led lecture with labs. Delivered via virtual classroom or at your site Course Prerequisites To be successful, students must have completed these Splunk Education course(s) or have equivalent working knowledge: Intro to Splunk Using Fields Visualizations Working with Time Statistical Processing Comparing Values - Audience People who would like to complete the Search Expert learning path or for Splunk Power Users. Comparing Values - Course Objectives Topic 1 – Using eval to Compare Understand the eval command Explain evaluation functions Identify and use comparison and conditional functions Use the fieldformat command to format field values Topic 2 – Filtering with where Use the where command to filter results Use wildcards with the where command Filter fields with the information functions, isnull and isnotnull Topic 3 - Using Fields in Searches Use fields correctly in basic searches Use fields with operators Use the rename command Use the fields command to improve search performance Topic 4 – Comparing Temporary versus Persistent Fields Differentiate between temporary and persistent fields Create temporary fields with the eval command Extract temporary fields with the erex and rex commands Topic 5 – Enriching Data Understand how fields from lookups, calculated fields, field aliases, and field extractions enrich data Splunk Course Schedules and Timezones Splunk Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses usually starts at AEDT 12:00pm or AEST 11:00 am and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) Comparing Values - Upcoming Schedule We don’t have any products to show here right now.

Splunk Education, Training and Professional Services Provider App Developers Harness the power of Splunk’s Web Framework. Create rich, interactive dashboards and forms and package Splunk knowledge objects for distribution across your organisation. App Developer Track Courses Splunk Fundamentals 1 Splunk Fundamentals 2 Creating Dashboards with Splunk Splunk Fundamentals 3 Advanced Searching and Reporting Advanced Dashboards and Visualisations Building Splunk Apps Developing with Splunk's REST API One of the best trainers I've had - keeps content relevant & explains the tasks in easily understood language. Extremely knowledgeable in all fields relating to the content. Well paced & accommodated to everyone's questions & progress. Participant, Splunk Enterprise Data Administration