Splunk Education, Training and Professional Services Provider < Back Title I'm a paragraph. I'm connected to your collection through a dataset. Click Preview to see my content. To update me, go to the Data Manager. You can get more out of your site elements by making them dynamic. To connect this element to content from your collection, select the element and click Connect to Data. Once connected, you can save time by updating your content straight from your collection—no need to open the Editor, or mess with your design. Add any type of content to your collection, such as rich text, images, videos and more, or upload a CSV file. You can also collect and store information from your site visitors using input elements like custom forms and fields. Collaborate on your content across teams by assigning permissions setting custom permissions for every collection. Be sure to click Sync after making changes in a collection, so visitors can see your newest content on your live site. Preview your site to check that all your elements are displaying content from the right collection fields. Ready to publish? Simply click Publish in the top right of the Editor and your changes will appear live. Previous Next

Splunk Education, Training and Professional Services Provider Thank You For Contacting Us We will get back to you as soon as possible. One of the best trainers I've had - keeps content relevant & explains the tasks in easily understood language. Extremely knowledgeable in all fields relating to the content. Well paced & accommodated to everyone's questions & progress. Participant, Splunk Enterprise Data Administration

Splunk Core Certified User Splunk Certification | INGENIQ Splunk Core Certified User As a part of Splunk Certification, A Splunk Core Certified User is able to search, use fields, create alerts, use look-ups, and create basic statistical reports and dashboards in either the Splunk Enterprise or Splunk Cloud platforms. This entry-level certification demonstrates an individual’s basic ability to navigate and use Splunk software. The prerequisite course listed below is highly recommended, but not required for candidates to register for the certification exam. Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! Learning Path We suggest candidates looking to prepare for this exam complete Splunk Fundamentals 1 or the following Single subject courses: Free Training Paid Training Paid Cert Exam Intro to Splunk Using Fields Scheduling Reports and Alerts Visualisations Working with Time Statistical Processing Leveraging Lookups and Subsearches Search Optimisation Cert Exam - Splunk Core Certified User Splunk Certifications Exam When you’re ready to take a Splunk Certification exam, please view the Exam-Registration-Tutorial for registration assistance. As a reminder, each exam attempt costs US$125. Bulk registration vouchers can be purchased at a discounted price of five registrations for US$500. How to register for your exam There are three ways to purchase a PearsonVUE registration voucher: 1) Directly from PearsonVUE This is the most streamlined approach. Follow the steps for account creation and exam registration provided at www.pearsonvue.com/splunk Payment will be collected at the time of registration. You can also visit the Pearson VUE voucher store for direct purchase. 2) From Splunk (as an individual) Log into your existing account at Splunk.com/Education to purchase a registration code. Payment can be made via credit card or existing Splunk Education credits. Splunk will email you a unique registration code, which can be used for registration at www.pearsonvue.com/splunk . 3) From Splunk (as an account) Your Splunk Sales Rep can add certification exams to any deal. Once the number of vouchers has been requested, Splunk will email your unique registration codes, which can be used for registration at www.pearsonvue.com/splunk All scheduled exams are subject to a minimum 24-hour cancellation and/or rescheduling policy. Failure to cancel or reschedule an exam within this timeframe results in forfeiture of registration fee. One of the best trainers I've had - keeps content relevant & explains the tasks in easily understood language. Extremely knowledgeable in all fields relating to the content. Well paced & accommodated to everyone's questions & progress. Participant, Splunk Enterprise Data Administration

Splunk Enterprise Lab Splunk Enterprise Lab This Splunk Enterprise 24-hour practical lab exercise is designed to take you through the tasks of a complete mock development. Each participant is given access to a specified number of Linux servers and a set of requirements. Participants then perform a mock deployment according to requirements which adhere to Splunk Deployment Methodology and best-practices. Splunk Credit Value : 100 Duration : First 4 hours instructor led, 24 hours allowed for completion Time : 11:00 am - 3:00 pm AEST *Course discounts apply for Splunk Partners. Please use the currency convertor above to check for course pricing in your local currency. Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! Extremely proficient at controlling the pace of training. Great explanation of answers & not just reading the content. Very knowledgeable about all content. Looking forward to completing the rest of the of the class. Highly recommended. Participant, Splunk Enterprise Data Administration Class Format Instructor-led lecture with labs. Delivered via virtual classroom. Audience Enterprise architects seeking to sit the Certified Architect exam. Related Certifications Splunk Enterprise Certified Architect Prerequisite Knowledge To be successful, students should have a solid understanding of the following: Splunk Fundamentals 1 Splunk Fundamentals 2 Or the following single-subject courses : What is Splunk? Intro to Splunk Using Fields Scheduling Reports and Alerts Visualisations Introduction to Knowledge Objects Creating Field Extractions Introduction to Dashboards Students should also understand the following courses: Splunk Enterprise System Administration Splunk Enterprise Data Administration Architecting Splunk Enterprise Deployments Troubleshooting Splunk Enterprise Splunk Enterprise Cluster Administration After completing the Splunk Enterprise Lab you will be able to; You will have a thorough understanding of Splunk Deployment Methodology and best-practices for planning, data collection, and sizing for a distributed deployment. Be able to manage and troubleshoot a standard distributed deployment with indexer and search head clustering. Splunk Enterprise Lab - Course Objectives Installation and Infrastructure Install forwarders, indexer, search head, deployment server and license master Configuration and Collection Configure an index cluster Deploy all specified configurations via deployment server Configure inputs from forwarders Configure and confirm index-time knowledge Create search time fields Searching and Reporting Create searches for each required use case Get indexer event acknowledgements Splunk Enterprise Practical Lab - Upcoming Sessions We don’t have any products to show here right now.

Students will learn fundamentals of SOAR (Phantom) playbook capabilities, creation and testing. This course is a pre-requisite for the Advanced Phantom Implementation course. Developing SOAR Playbooks The Developing SOAR (Phantom) Playbooks is an introductory course that prepares IT and security practitioners to plan, design, create and debug basic playbooks for Phantom. Students will learn fundamentals of SOAR (Phantom) playbook capabilities, creation and testing. This course is a pre-requisite for the Advanced Phantom Implementation course. Splunk Credit Value : 100 Duration : 4.5 hours over 2 days Time : 11:00 am - 2:30 pm AEST *Course discounts apply for Splunk Partners. Please use the currency convertor above to check for course pricing in your local currency. Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! Extremely proficient at controlling the pace of training. Great explanation of answers & not just reading the content. Very knowledgeable about all content. Looking forward to completing the rest of the of the class. Highly recommended. Participant, Splunk Enterprise Data Administration Developing SOAR (Phantom) Playbooks - Course Topics Automation best practices The visual playbook editor Using actions and decisions Using action results Testing and debugging playbooks User interaction Output formatting Complex logic Interacting with artifacts Using the vault in a playbook Custom lists Class Format Instructor-led lecture with labs. Delivered via virtual classroom or at your site Course Prerequisites To be successful, students must have a working understanding of these courses: Administering Splunk SOAR Additionally, experience with Python programming is useful, but not required Related Certifications None Developing SOAR (Phantom) Playbooks - Audience SOC Engineers, Security Architects, Threat Hunters & Responders, and Analysts who respond to security indicents using Phantom automation. After completing Developing SOAR (Phantom) Playbooks course you will be able to Use the visual playbook editor to create and modify automation flows Trigger user interactions, filtering and logic Developing SOAR (Phantom) Playbooks - Course Objectives Module 1 – Introduction to Playbooks Understand automation best practices Design playbooks Python support Use the playbook manager Module 2 – Visual Playbook Editor Use the visual playbook editor Use actions and decisions Process action results Test new playbooks Module 3 – User Interaction and Logic Interact with users during playbook execution Format outputs Use decision blocks Module 4 – Accessing and Formatting Data Accessing action results Accessing artifact and container data Formatting data Module 5 – Modular Playbook Development Calling other playbooks Creating artifacts Sending email Passing data between playbooks Module 6 – Custom Lists and Filters Custom list concepts Create custom lists Access lists from playbooks Use filters Developing SOAR (Phantom) Playbooks - Upcoming Courses We don’t have any products to show here right now.

Splunk Education, Training and Professional Services Provider Explore our services and get in touch Our Services 01. Custom Project This service is designed to tackle unique and complex challenges tailored to your specific needs. We collaborate closely with you to understand your requirements and develop a bespoke solution from the ground up. Let us help you bring your innovative ideas to life with personalized end-to-end support. Show more 02. Personal Solution Planning Navigate your personal goals and challenges with our dedicated support. Through focused one-on-one sessions, we help you explore your situation, identify key objectives, and map out a practical, actionable plan. Achieve clarity and purposeful direction with our expert guidance. Show more 03. Expert Guidance Package Gain insightful direction for your endeavors with our comprehensive guidance package. We delve into your specific situation to provide expert advice and strategic recommendations. Empower yourself with the knowledge to make informed decisions and achieve optimal outcomes. Show more

Splunk Education Single Subject Course Training. Ingeniq is the Authorised Splunk Training Provider for Australia and New Zealand and is certified to deliver the complete range of Splunk courses and offer both Instructor led public and dedicated virtual and face-to-face courses. Splunk Education - Single Subject Courses Ingeniq is the Splunk Training Provider and Authorised Learning Partner for Australia and New Zealand and is certified to deliver the complete range of Splunk courses and modules and offers both Instructor led public and dedicated virtual and face-to-face courses. Splunk Education single-subject Instructor led courses are smaller portions of Splunk training courses and take approx. 3 hours. Splunk Education single-subject training courses contribute to Splunk certifications. Unsure about which single-subject course to take? Our Education Consultants can help - call us or email at sales@ingeniq.com.au and we'll be in touch. Download the Splunk Education Student Handbook to learn about the latest updates in Splunk Training. Call us on 1300 245 802 What is Splunk? This Splunk training course introduces students to what machine data is and how Splunk can leverage operational intelligence to investigate and respond to incidents in their organizations. Visit Splunk Website Intro to Splunk This Splunk training course teaches students how to use Splunk to create reports and dashboards and explore events using Splunk's Search Processing Language. Students will learn the basics of Splunk's architecture, user roles, and how to navigate the Splunk Web interface to create robust searches, reports, visualizations, and dashboards Visit Splunk Website Using Fields This Splunk training course is for power users who want to learn about fields and how to use fields in searches. Topics will focus on explaining the role of fields in searches, field discovery, using fields in searches, and the difference between persistent and temporary fields. The last topic will introduce how fields from other data sources can be used to enrich search results. Read More Intro to Knowledge Objects This Splunk training course teaches students about how different types of knowledge objects to extract additional insights from their data. Students will learn the basics of how to create knowledge objects, define their settings, edit, and manage existing knowledge objects. Visit Splunk Website Creating Knowledge Objects This Splunk training course is for knowledge managers who want to learn how to create knowledge objects for their search environment using the Splunk web interface. Topics will cover types of knowledge objects, the search-time operation sequence, and the processes for creating event types, workflow actions, tags, aliases, search macros, and calculated fields. Read More Creating Field Extractions This Splunk training course is for knowledge managers who want to learn about field extraction and the Field Extractor (FX) utility. Topics will cover when certain fields are extracted and how to use the FX to create regex and delimited field extractions. Read More Enriching Data with Lookups This Splunk training course is for knowledge managers who want to use lookups to enrich their search environment. Topics will introduce lookup types and cover how to upload and define lookups, create automatic lookups, and use advanced lookup options. Additionally, students will learn how to verify lookup contents in search and review lookup best practices. Read More Data Models This Splunk training course is for knowledge managers who want to learn how to create and accelerate data models. Topics will cover datasets, designing data models, using the Pivot editor, and accelerating data models. Read More Introduction to Dashboards This Splunk training course is designed for power users who want to learn best practices for building dashboards in the Dashboard Studio. It focuses on dashboard creation, including prototyping, the dashboard definition, layout types, adding visualizations, and dynamic coloring. Read More Dynamic Dashboards This Splunk training course module is designed for power users who want to learn best practices for building dashboards in the Dashboard Studio. It focuses on creating inputs, chain searches, event annotations, and improving dashboard performance. Read More Creating Maps This Splunk training Course helps you understand more about Choropleth maps. These maps have specific data and component requirements. A search uses the data and components to generate a choropleth map. Read More Scheduling Reports and Alerts This Splunk training course teaches students how to use scheduled reports and alerts to automate processes in their organization. Students will create, manage, and schedule reports and alerts, and use alert actions to further respond to incidents as they occur. Visit Splunk Website Visualisations This Splunk training course teaches students how to use scheduled reports and alerts to automate processes in their organization. Students will create, manage, and schedule reports and alerts, and use alert actions to further respond to incidents as they occur. Visit Splunk Website Working with Time This Splunk training course is for power users who want to become experts at using time in searches. Topics will focus on searching and formatting time in addition to using time commands and working with time zones. Read More Statistical Processing This Splunk training course is for power users who want to identify and use transforming commands and eval functions to calculate statistics on their data. Topics will cover data series types, primary transforming commands, mathematical and statistical eval functions, using eval as a function, and the rename and sort commands. Read More Comparing Values This Splunk training course is for power users who want to learn how to compare field values using eval functions and eval expressions. Topics will focus on using the comparison and conditional functions of the eval command, and using eval expressions with the field format and where commands. Read More Result Modification This Splunk training course is for power users who want to use commands to manipulate output and normalize data. Topics will focus on specific commands for manipulating fields and field values, modifying result sets, and managing missing data. Additionally, students will learn how to use specific eval command functions to normalize fields and field values across multiple data sources. Read More Leveraging Lookups and Subsearches This Splunk training course is designed for power users who want to learn how to use lookups and sub searches to enrich their results. Topics will focus on lookup commands and explore how to use sub searches to correlate and filter data from multiple sources. Read More Correlation Analysis This Splunk training course is for power users who want to learn how to calculate co-occurrence between fields and analyze data from multiple datasets. Topics will focus on the transaction, append, appendcols, union, and join commands. Read More Search Under the Hood This Splunk training course gives students additional insight into how Splunk processes searches. Students will learn about Splunk architecture, how components of a search are broken down and distributed across the pipeline, and how to troubleshoot searches when results are not returning as expected. Visit Splunk Website Multivalue Fields This Splunk training course is for power users who want to become experts on searching and manipulating multivalue data. Topics will focus on using multivalue eval functions and multivalue commands to create, evaluate, and analyze multivalue data. Read More Search Optimisation This Splunk training course is for power users who want to improve search performance. Topics will cover how search modes affect performance, how to create an efficient basic search, how to accelerate reports and data models, and how to use the tstats command to quickly query data. Read More One of the best trainers I've had - keeps content relevant & explains the tasks in easily understood language. Extremely knowledgeable in all fields relating to the content. Well paced & accommodated to everyone's questions & progress. Participant, Splunk Enterprise Data Administration

Splunk Certified Developer Splunk Certification | INGENIQ Splunk Certified Developer As part of Splunk Certification, a Splunk Certified Developer builds apps using the Splunk Web Framework. This Splunk certification demonstrates an individual’s expertise in drilldowns, advanced behaviors and visualizations, planning, creating, and packaging apps, and REST endpoints. Please Note: You must already hold the Splunk Enterprise Certified Admin Certification. Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! Learning Path Paid Training Paid Cert Exam Cert Exam - Splunk Core Certified Power User Cert Exam - Splunk Certified Admin [ Enterprise or Cloud ] Advanced Dashboards and Visualisations Building Splunk Apps Developing with Splunk's REST API Cert Exam - Splunk Certified Developer Splunk Certifications Exam How to register for your exam There are three ways to purchase a PearsonVUE registration voucher: 1) Directly from PearsonVUE This is the most streamlined approach. Follow the steps for account creation and exam registration provided at www.pearsonvue.com/splunk Payment will be collected at the time of registration. 2) From Splunk (as an individual) *COMING SOON* Log into your existing account at Splunk.com/Education to purchase a registration code. Payment can be made via credit card or existing Splunk Education credits. Splunk will email you a unique registration code, which can be used for registration at www.pearsonvue.com/splunk . * Note – this feature has not yet been launched. Individual candidates should purchase vouchers via Option 1 until further notice. 3) From Splunk (as an account) Your Splunk Sales Rep can add certification exams to any deal. Once the number of vouchers has been requested, Splunk will email your unique registration codes, which can be used for registration at www.pearsonvue.com/splunk All scheduled exams are subject to a minimum 24-hour cancellation and/or rescheduling policy. Failure to cancel or reschedule an exam within this timeframe results in forfeiture of registration fee. One of the best trainers I've had - keeps content relevant & explains the tasks in easily understood language. Extremely knowledgeable in all fields relating to the content. Well paced & accommodated to everyone's questions & progress. Participant, Splunk Enterprise Data Administration

Search Optimisation - Splunk Education Single Subject Course Training. Search Optimisation The Splunk Education single-subject course module, Search Optimisation is for power users who want to improve search performance. Topics will cover how search modes affect performance, how to create an efficient basic search, how to accelerate reports and data models, and how to use the tstats command to quickly query data. Splunk Credit Value : 50 Duration : 3 hours Time : 9:00 am - 12:00 pm AEST Please use the currency convertor above to check for course pricing in your local currency. Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! The instructor was very responsive to questions and queries both private and Communal.. Final module collaborative lab walkthrough on screen was particularly helpful. Participant, Splunk Fundamentals 2 Search Optimisation - Course Topics Optimizing Search Report Acceleration Data Model Acceleration Using the tstats Command Class Format Instructor-led lecture with labs. Delivered via virtual classroom or at your site Course Prerequisites To be successful, students must have completed these Splunk Education course(s) or have equivalent working knowledge: How Splunk works Creating search queries Creating reports and data models Search Optimisation - Audience Knowledge Manager learning path Search Optimisation - Course Objectives Topic 1 – Optimising Search Understand how search modes affect performance Examine the role of the Splunk Search Scheduler Review general search practices Topic 2 – Report Acceleration Define acceleration and acceleration types Understand report acceleration and create an accelerated report Reveal when and how report acceleration summaries are created Search against acceleration summaries Topic 3 – Data Model Acceleration Understand data model acceleration Accelerate a data model Use the datamodel command to search data models Topic 4 – Using the tstats Command Explore the tstats command Search acceleration summaries with tstats Search data models with tstats Compare tstats and stats Splunk Course Schedules and Timezones Splunk Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses usually starts at AEDT 12:00pm or AEST 11:00 am and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) Search Optimisation - Upcoming Schedule We don’t have any products to show here right now.

Splunk Enterprise Certified Architect Splunk Certification | INGENIQ Splunk Enterprise Certified Architect As part of Splunk Certification, a Splunk Enterprise Certified Architect has a thorough understanding of Splunk Deployment Methodology and best-practices for planning, data collection, and sizing for a distributed deployment and is able to manage and troubleshoot a standard distributed deployment with indexer and search head clustering. This certification demonstrates an individual’s ability to deploy, manage and troubleshoot complex Splunk Enterprise environments. The prerequisite courses listed below through Data and System Administration are highly recommended, but not required for candidates to register for the Splunk certification exam. All candidates who wish to access the exam must be Splunk Enterprise Certified Admin and complete the Architecting Splunk Enterprise Deployments, Troubleshooting Splunk Enterprise, Cluster Administration, and Splunk Enterprise Deployment Practical Lab courses. Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! Learning Path Paid Training Paid Cert Exam Cert Exam - Splunk Core Certfied Power User Cert Exam - Splunk Enterprise Certified Admin Troubleshooting Splunk Enterprise Splunk Enterprise Cluster Administration Architecting Splunk Enterprise Deployments Splunk Enterprise Practical Lab (Splunk run course) Cert Exam - Splunk Enterprise Certified Architect Splunk Certifications Exam When you’re ready to take a Splunk Certification exam, please view the Exam-Registration-Tutorial for registration assistance. As a reminder, each exam attempt costs US$125. Bulk registration vouchers can be purchased at a discounted price of five registrations for US$500. How to register for your exam There are three ways to purchase a PearsonVUE registration voucher: 1) Directly from PearsonVUE This is the most streamlined approach. Follow the steps for account creation and exam registration provided at www.pearsonvue.com/splunk Payment will be collected at the time of registration. You can also visit the Pearson VUE voucher store for direct purchase. 2) From Splunk (as an individual) Log into your existing account at Splunk.com/Education to purchase a registration code. Payment can be made via credit card or existing Splunk Education credits. Splunk will email you a unique registration code, which can be used for registration at www.pearsonvue.com/splunk . 3) From Splunk (as an account) Your Splunk Sales Rep can add certification exams to any deal. Once the number of vouchers has been requested, Splunk will email your unique registration codes, which can be used for registration at www.pearsonvue.com/splunk All scheduled exams are subject to a minimum 24-hour cancellation and/or rescheduling policy. Failure to cancel or reschedule an exam within this timeframe results in forfeiture of registration fee. One of the best trainers I've had - keeps content relevant & explains the tasks in easily understood language. Extremely knowledgeable in all fields relating to the content. Well paced & accommodated to everyone's questions & progress. Participant, Splunk Enterprise Data Administration

Splunk Core Certified Enterprise Security Administrator Splunk Certification | INGENIQ Splunk Certified Enterprise Security Administrator As part of Splunk Certification, a Splunk Certified Enterprise Security Admin manages a Splunk Enterprise Security environment, including ES event processing and normalisation, deployment requirements, technology add-ons, settings, risk analysis settings, threat intelligence, protocol intelligence configuration and customisations. This Splunk Certification demonstrates an individual’s ability to install, configure and manage a Splunk Enterprise Security deployment. Please note: There are two approved coursework paths for this Splunk Certification track. Candidates may complete either Splunk Enterprise System Administration and Splunk Enterprise Data Administration or Splunk Cloud Administration as part of this Splunk Certification track. Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! Learning Path Paid Training Paid Cert Exam Splunk Enterprise System Administration Splunk Enterprise Data Administration Splunk Cloud Administration Administering Splunk Enterprise Security Cert Exam - Splunk Core Certified Enterprise Security Admin Splunk Certifications Exam When you’re ready to take a Splunk Certification exam, please view the Exam-Registration-Tutorial for registration assistance. As a reminder, each exam attempt costs US$125. Bulk registration vouchers can be purchased at a discounted price of five registrations for US$500. How to register for your exam There are three ways to purchase a PearsonVUE registration voucher: 1) Directly from PearsonVUE This is the most streamlined approach. Follow the steps for account creation and exam registration provided at www.pearsonvue.com/splunk Payment will be collected at the time of registration. You can also visit the Pearson VUE voucher store for direct purchase. 2) From Splunk (as an individual) Log into your existing account at Splunk.com/Education to purchase a registration code. Payment can be made via credit card or existing Splunk Education credits. Splunk will email you a unique registration code, which can be used for registration at www.pearsonvue.com/splunk . 3) From Splunk (as an account) Your Splunk Sales Rep can add certification exams to any deal. Once the number of vouchers has been requested, Splunk will email your unique registration codes, which can be used for registration at www.pearsonvue.com/splunk All scheduled exams are subject to a minimum 24-hour cancellation and/or rescheduling policy. Failure to cancel or reschedule an exam within this timeframe results in forfeiture of registration fee. One of the best trainers I've had - keeps content relevant & explains the tasks in easily understood language. Extremely knowledgeable in all fields relating to the content. Well paced & accommodated to everyone's questions & progress. Participant, Splunk Enterprise Data Administration

Creating Field Extractions - Splunk Education Single Subject Course Training. Creating Field Extractions The Splunk Education single-subject course module, Creating Field Extractions is for knowledge managers who want to learn about field extraction and the Field Extractor (FX) utility. Topics will cover when certain fields are extracted and how to use the FX to create regex and delimited field extractions. Splunk Credit Value : 50 Duration : 3 hours Time : 9:00 am - 12:00 pm AEST Please use the currency convertor above to check for course pricing in your local currency. Enquiry Form Let us know what you're after Courses for me Certifications for me Courses for my team Dedicated courses for my teams Training Tracks for my Company Dedicated courses for my Company Training Packs Using Splunk Training Credits Submit Thanks for submitting! The instructor was very responsive to questions and queries both private and Communal.. Final module collaborative lab walkthrough on screen was particularly helpful. Participant, Splunk Fundamentals 2 Creating Field Extractions - Course Topics Using the Field Extractor Creating Regex Field Extractions Creating Delimited Field Extractions Class Format Instructor-led lecture with labs. Delivered via virtual classroom or at your site Course Prerequisites To be successful, students must have completed these Splunk Education course(s) or have equivalent working knowledge: How Splunk works Knowledge objects Creating Field Extractions - Audience Knowledge Manager learning path. Creating Field Extractions - Course Objectives Topic 1 – Using the Field Extractor Understand types of extracted fields and when they are extracted Explore the Splunk Web Field Extractor (FX) Topic 2 – Creating Regex Field Extractions Identify basics of regular expressions (regex) Understand the regex field extraction workflow Edit regex for field extractions Topic 3 - Creating Delimited Field Extractions Identify delimited field values in event data Understand the delimited field extraction workflow Splunk Course Schedules and Timezones Splunk Course are delivered live and in English and provide access to customers spanning multiple timezones. Dates and times displayed for each course are relative to Australian Eastern Time (AET). AM Marked Splunk Courses AM marked courses start at AET 9:00am and finish at AET 1:30pm and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) PM Marked Splunk Courses PM marked courses usually starts at AEDT 12:00pm or AEST 11:00 am and are optimal for customers in the following countries and areas; UTC+10 including Australia (East Coast) UCT+11/+12 including New Zealand and the Pacific Islands UTC-8 including USA (West Coast), Canada (West Coast) UTC-7 including USA (Mid West) Creating Field Extractions - Upcoming Schedule We don’t have any products to show here right now.