Learning Splunk
1h 47mBeginner2023-04-18
Authors

Josh Samuelson
Systems Administrator, DevOps Engineer
Course details
Splunk is a tool for analyzing and searching incoming data like application or database logs. In this course, learn the basics of how Splunk works. Join instructor Josh Samuelson as he explores the search and reporting features, and shows how to set up alerts so that you can catch potential problems before they become critical. He also explains how to set up some handy dashboards to get a quick view of the state of your systems, and wraps up with some high-level discussion of important areas like log management, APM, security, and more.
Skills covered
SplunkData EngineeringLearningData Science
Concepts
0. Introduction
- 01 - Make sense of your data with Splunk
- 02 - What is Splunk
- 03 - Install Splunk
1. Tour of Major Features
- 04 - Add data
- 05 - Set up your Splunk user
- 06 - Search
- 07 - Reporting
- 08 - Add-ons
2. Search
- 09 - Basics of the search interface
- 10 - Simple filtering
- 11 - Time
- 12 - Understanding results - Fields
- 13 - Complex filtering
- 14 - Advanced search syntax
- 15 - Challenge - Track down an issue
- 16 - Solution - Track down an issue
3. Reporting and Dashboards
- 17 - Reporting overview
- 18 - Create a simple report
- 19 - Visualize errors
- 20 - Create a dashboard panel
4. Alerting
- 21 - Alerting concepts
- 22 - Create an alert
- 23 - Advanced alerting
- 24 - Challenge - Install an add-on
- 25 - Solution - Install an add-on
5. Practical Splunk
- 26 - WebApp monitoring challenges
- 27 - Install the universal forwarder
- 28 - Configure remote data
- 29 - Using multiple data streams
Conclusion
- 30 - Next steps
Related courses
- Learning Splunk (2018)
- Practical Splunk: Build Data Intelligence through SPL, Reports, and Dashboards
- Automated Threat Detection: Building SOC Solutions with Splunk, TheHive, and Snort
- Network Forensics (2019)
- Linux Performance Tuning
- Learning MongoDB
- Microsoft Entra ID for Developers: A Beginner's Guide (2023)
- Introduction to SQLite