Learning Splunk (2018)
1h 36mBeginner2018-10-12
Authors

Josh Samuelson
Systems Administrator, DevOps Engineer
Course details
Splunk is a tool for analyzing and searching incoming machine-generated data like application or database logs. It is ideal for monitoring the health of IT infrastructure, especially networks with complex and aging systems, and software in production. In this course you can learn the basics of how Splunk works and how it can help you monitor data from multiple systems: web servers, databases, applications, and even cloud-based resources. Explore the search and reporting features, and learn how to set up alerts so that you can catch potential problems before they become critical. Plus, learn how to set up dashboards for visual insights into the state of your systems. Instructor Josh Samuelson illustrates the lessons with examples from real-world scenarios, where Splunk is used for centralized logging and reporting from multiple systems.
Learning objectives
Installing Splunk
Filtering search data
Advanced search syntax
Creating reports and dashboards
Creating alerts and actions
Configuring remote data and multiple data streams
Learning objectives
Installing Splunk
Filtering search data
Advanced search syntax
Creating reports and dashboards
Creating alerts and actions
Configuring remote data and multiple data streams
Skills covered
SplunkDockerData EngineeringLearningData Science
Concepts
0. Introduction
- 01 - Learn Splunk
- 02 - The learning environment
- 03 - What is Splunk
- 04 - Install Splunk Free edition
1. Tour of Major Features
- 05 - Home app
- 06 - Set up your Splunk user
- 07 - Search
- 08 - Reporting
- 09 - Add-ons
2. Search
- 10 - Basics of the search interface
- 11 - Simple filtering
- 12 - Time
- 13 - Understanding results - Fields
- 14 - Complex filtering
- 15 - Advanced search syntax
- 16 - Challenge - Track down an issue
- 17 - Solution - Track down an issue
3. Reporting and Dashboards
- 18 - Reporting overview
- 19 - Create a simple report
- 20 - Visualize errors
- 21 - Create a dashboard panel
4. Alerting
- 22 - Alerting concepts
- 23 - Create an alert
- 24 - Advanced alerting
- 25 - Challenge - Custom alert action
- 26 - Solution - Advanced alerting
5. Practical Splunk
- 27 - Web app monitoring challenges
- 28 - Install the universal forwarder
- 29 - Configure remote data
- 30 - Using multiple data streams
- 31 - Beyond logs
- 32 - Visualizing and alerts
Conclusion
- 33 - Next steps
Related courses
- Learning Splunk
- Practical Splunk: Build Data Intelligence through SPL, Reports, and Dashboards
- Automated Threat Detection: Building SOC Solutions with Splunk, TheHive, and Snort
- Network Forensics (2019)
- Linux Performance Tuning
- Learning MongoDB
- Microsoft Entra ID for Developers: A Beginner's Guide (2023)
- Introduction to SQLite