 Cert Prep/thumbnail.webp?token=Y291cnNlcy8yMDI2LzAzL1NwbHVuayBDb3JlIENlcnRpZmllZCBVc2VyIChTUExLLTEwMDEpIENlcnQgUHJlcC90aHVtYm5haWwud2VicDoxNzg0NjI3MDkyOjYxMWNiMTViNzZjY2UwYzc5MWJiMGM5M2U3NDk5NmFhYjVkYTFlYzBkZDcwMjcyOTViMTE2N2ZiMmFhZDdjNDA%3D)
Splunk Core Certified User (SPLK-1001) Cert Prep
13h 55mBeginner2026-03-16
Authors
Packt Publishing
Course details
Get a thorough introduction to the Splunk platform with the Splunk Core Certified User (SPLK-1001) Cert Prep course. Learn the basics of Splunk, including installation and getting familiar with its web user interface. Find out how to get data into the platform and perform basic searches using keywords, wildcards, and boolean operators. Discover how to use fields in your searches and understand search language fundamentals to enhance your data queries. Master key commands for data transformation and get hands-on experience creating insightful reports and dynamic dashboards. Learn how to leverage data efficiently with lookups, and explore ways that the scheduled reports and alerts sections can help you stay up-to-date. Ideal for those beginning their journey with Splunk, career changers, new customers, and data analysts, this course empowers you to turn data into actionable insights using the robust capabilities of the Splunk platform.
Concepts
Introduction
- About Splunk Core Certified User course
Module 1 Splunk Basics
- What is Splunk
- Splunk components
- Splunk installation
- Splunk web user interface (UI)
- Splunk apps
- Home app
- Search and reporting app
- Users and roles
Module 2 Getting Data into Splunk
- Module overview
- Splunk index time process
- Options to add data
- Adding training data overview
- Adding training data upload files
- Adding training data generate events
Module 3 Basic Searching in Splunk
- Module overview
- Overview of search and reporting app
- Search with keywords and phrases
- Use wildcards
- Use boolean operators
- Use search assistant
- Identify contents of search results
- Setting search time range
- Events timeline
- Manage search jobs
- View search history
Module 4 Using Fields in Searches
- Module overview
- Overview of fields
- Using the fields sidebar
- Using fields in searches
- Boolean operators
- Comparison operators
- Search modes
- Search best practices
Module 5 Search Language Fundamentals
- Module overview
- Search language syntax
- Search pipeline readability
- fields command
- table and rename commands
- sort command
- dedup command
Module 6 Basic Transforming Commands
- Module overview
- Overview of transforming commands
- Using the stats command
- stats count function
- stats distinct count function
- stats sum and avg functions
- stats list and values functions
- Combining functions
- Using the top command
- Using the rare command
- Formatting statistics tables
- Formatting visualizations
Module 7 Creating Reports and Dashboards
- Module overview
- Overview of reports & dashboards
- Naming reports and dashboards
- Creating a report
- Manage reports
- Creating a dashboard
- Manage dashboards
- Clone and export a dashboard
- Setting a default dashboard in Splunk Home
Module 8 Creating and Using Lookups
- Module overview
- Overview of lookups
- Types of lookup
- Creating a CSV lookup
- Creating a lookup definition
- The inputlookup command
- Create a CSV lookup file from search
- The lookup command
- Creating automatic lookups
Module 9 Creating Scheduled Reports and Alerts
- Module overview
- Overview of scheduled reports and alerts
- Creating a scheduled report
- Manage scheduled reports
- Creating alerts
- Trigger actions
- Manage alerts
Related courses
- Automated Threat Detection: Building SOC Solutions with Splunk, TheHive, and Snort
- Introduction to Security Information and Event Management (SIEM)
- Learning Splunk (2018)
- Splunk for Security Analytics and Monitoring
- Learning Splunk
- SIEM: Event Management with Splunk Security
- Integrating Splunk with Microsoft Purview
- Practical Splunk: Build Data Intelligence through SPL, Reports, and Dashboards