Splunk Power User Fast Start – Inhouse - Inhouse von ExperTeach Gesellschaft für Netzwerkkompetenz mbH

This course is for Splunk Power Users who want to become experts on the following Splunk topics:

Working with Time: for power users who want to become experts at using time in searches. Topics will focus on searching and formatting time in addition to using time commands and working with time zones.

Statistical Processing: to identify and use transforming commands and eval functions to calculate statistics on their data. Topics will cover data series types, primary transforming commands, mathematical and statistical eval functions, using eval as a function, and the rename and sort commands.

Comparing Values: to learn how to compare field values using eval functions and eval expressions. Topics will focus on using the comparison and conditional functions of the eval command, and using eval expressions with the field format and where commands

Result Modification: to use commands to manipulate output and normalize data. Topics will focus on specific commands for manipulating fields and field values, modifying result sets, and managing missing data. Additionally, students will learn how to use specific eval command functions　 to normalize fields and field values across multiple data sources.　

Correlation Analysis: to learn how to calculate co-occurrence between fields and analyze data from multiple datasets. Topics will focus on the transaction, append, appendcols, union, and join commands.

Creating Knowledge Objects: to learn how to create knowledge objects for their search environment using the Splunk web interface. Topics will cover types of knowledge objects, the search-time operation sequence, and the processes for creating event types, workflow actions, tags, aliases, search macros, and calculated fields.

Creating Field Extractions: to learn about field extraction and the Field Extractor (FX) utility. Topics will cover when certain fields are extracted and how to use the FX to create regex and delimited field extractions.

Data Models: to learn how to create and accelerate data models. Topics will cover datasets, designing data models, using the Pivot editor, and accelerating data models. 

• Working with Time
• Statistical Processing
• Comparing Values
• Result Modification
• Correlation Analysis
• Creating Knowledge Objects
• Creating Field Extractions
• Data Models

To be successful, students should have a solid understanding of the following:

• How Splunk works
• Creating search queries

Prerequisites can be obtain with free elearning :

• What is Splunk (SSC)　
• Intro to Splunk (SSC)　
• Using Fields (SSC)　
• Visualizations (SSC)　
• Intro to Knowledge Objects (SSC)
• Search Under the Hood (SSC)

Certification: Splunk Core Certified Power User