Goal: This lesson will introduce you to Machine Data, the issues it provides, and how Splunk can be used to get Operational Intelligence. Learn about the different Splunk components and how to install them.

Objective: Upon completing this module, you should be able to:

• Describe the fundamentals of Splunk and Splunk licensing alternatives.

• Set up Splunk Search Heads, Indexer, Heavy, and Universal Forwarders.

Topics:

Hands On

• Setting up Splunk Enterprise environment

• Setting up Search Heads, Indexer, Heavy, and Universal Forwarders

GOAL- This lesson will teach you how to create and manage users, as well as the Splunk Admin role and duties, the architecture of the Splunk Index, and how to interact with Splunk Configuration files.

Objective: Upon completing this module, you should be able to:

• Configure the. conf files

• Create and Manage users

Topics:

• Introduction to Authentication techniques

• User Creation and Management

• Splunk Admin Role & Responsibilities

• Indexes

• Data Ageing

• Introduction to Splunk configuration files (7)

• Managing the. conf files

Hands On

• Creating and Managing users

• Manage and Modify the Configuration files

• Create index using the indexes.conf file with various retention period and other functionalities of buckets

GOAL- This lesson will teach you how to create and manage users, as well as the Splunk Admin role and duties, the architecture of the Splunk Index, and how to interact with Splunk Configuration files.

Objective: Upon completing this module, you should be able to:

• Configure the. conf files

• Create and Manage users

Topics:

• Introduction to Authentication techniques

• User Creation and Management

• Splunk Admin Role & Responsibilities

• Indexes

• Data Ageing

• Introduction to Splunk configuration files (7)

• Managing the. conf files

Hands On

• Creating and Managing users

• Manage and Modify the Configuration files

• Create index using the indexes.conf file with various retention period and other functionalities of buckets

Goal: Learn about the many Splunk Data onboarding strategies and how to query that data using simple and complex Splunk queries. Depending on your needs, use different keywords to search and filter the Indexed data.

Objective:  Upon completing this module, you should be able to:

• Perform Data onboarding to Splunk

• Query using basic and advanced Splunk commands

• Use different keywords to search and filter indexed data based on any individual team requirement

Topics: 

• Discover the many data onboarding methods: - Using flat files

• Via UF (Universal Forwarder)

• Splunk's basic search commands should be implemented as follows: - Table, Sort, Rename, and Search

• Learn how to use time ranges while searching.

• Splunk Reporting and Transforming Commands: - Dedup, Rex, Top, Rare, Stats, Chart, Timechart

Hands-On:

• Data entry with the Universal Forwarder and flat files

• Splunk search commands, both basic and sophisticated

• Learn how to use time ranges while searching.

Goal: Discover fields and how to extract them. In creating/modifying alerts, you may create and use Event Types in search.

Objective:  Upon completing this module, you should be able to:

• Understand what Splunk knowledge is.

• Discover the many Splunk Knowledge Object categories.

• Explain what a field is.

• Find out what field extraction is and how to make it.

• Discover what event kinds are and how to build them.

• Learn what a transaction is and how to construct one.

Topics: 

• Splunk Knowledge

• Categories of Splunk Knowledge

• Fields

• Field extraction

• Event types

• Transactions

Hands-On:

Use the following Knowledge objects:

•  Field extractions

• Event types

• Transactions

Goal: This module will teach you how to design and define Lookups, Tags for use in searches, Field aliases, and Data Models.

Objectives: Upon completing this module, you should be able to:

• Lookups can be created and defined.

• Work with the Lookup editor and become familiar with the many sorts of Workflow activities.

• Tags and field aliases can be created and managed.

• Learn how the Data Model organizes unstructured data.

Topics: 

• What exactly are lookups?

• Creating a lookup

• Setting up an automated lookup

• Using the lookup in reports and searches

• Categories for workflow actions

• Tag creation and management

• Creating and searching for field aliases

• An Overview of the Data Model

Hands on:

• Use the Lookup dashboard.

• Utilize the knowledge items listed below:

• Tags

• Aliases for fields