image
The Ultimate Drawing Course Beginner to Advanced...
$179
$79
image
User Experience Design Essentials - Adobe XD UI UX...
$179
$79
Total:
$659

Description

It's time for you to learn how to navigate Splunk and dominate big data!


Are your log files attempting to overthrow you? Have you heard of Splunk, but don't know how to wield it for the greater good of your data, or that of your enterprise? Have you used Splunk, but want to learn how to set it up and build it out properly? If so, this class is for you.
In this course, Tom will be teaching you how to get started with Splunk from the ground up. You'll learn the basics of Splunk terminology, along with how to use the Splunk web interface to find the data you're looking for. You'll build your own Splunk environment, add and normalize data to the Common Information Model (CIM), create dashboards, and find events in your data. Finally, you'll gain some more advanced searching techniques that will be particularly beneficial to those in network, security, and system administration roles.


This course is unique in that it does not require you to have a pre-existing Splunk environment - you'll actually be building and administering the Splunk system you will use to complete the lab activities.
Who this course is for:
Anyone looking to get started with Splunk administration.
If you have used Splunk for searching but have never brought in data or installed the software.
Individuals responsible for administering a Splunk environment but don't have much experience with running this software.

What you'll learn

Building a development Splunk environment from scratch on a Linux server

Onboarding data into Splunk

Understanding the importance of the Common Information Model (CIM)

Normalizing data using Splunk apps

Developing basic reports and dashboards using your new Splunk instance

Understanding why leaving systems exposed to the Internet is a bad idea

Requirements

  • You will need a copy of Adobe XD 2019 or above. A free trial can be downloaded from Adobe.
  • No previous design experience is needed.
  • No previous Adobe XD skills are needed.

Course Content

27 sections • 95 lectures
Expand All Sections
1-Introduction
6
1.1-Introduction
1.2-About this course
1.3-What is Splunk?
1.4-What are logs? Why do they matter?
1.5-Quiz: Introduction to Splunk
1.6-Optional: AWS Environment Set-Up
2-Building your Splunk Environment
3
2.1-Installing Splunk 7.1
2.2-Hands-On Lab: Building your Splunk instance
2.3-Quiz: Installing Splunk
3-Splunk Terminology
12
3.1-Introduction to Splexicon
3.2-Events
3.3-Search
3.4-Report
3.5-Dashboard
3.6-SPL - Search Processing Language
3.7-Sourcetype
3.8-Index
3.9-Knowledge Objects & Fields
3.10-Lookup
3.11-Terminology wrap up
3.12-Quiz: Splexicon
4-Data Onboarding
5
4.1-Approaching data onboarding
4.2-Hands-On Lab: Onboarding Linux Security Logs
4.3-Hands-On Lab: Field extractions - using Splunk apps
4.4-What if there isn't an app?
4.5-Splunk Config Files
5-Splunk Infrastructure
9
5.1-Core Infrastructure: Indexers and Search Heads
5.2-Supporting Infrastructure: Forwarders
5.3-Supporting Infrastructure: Syslog Receiver
5.4-Supporting Infrastructure: Deployment Server
5.5-Splunk Licensing
5.6-Splunk Clustering
5.7-Distributed Splunk Environments
5.8-Splunk Apps
5.9-Quiz: Splunk Infrastructure
6-Data Normalization
3
6.1-Hands-On Lab: Data Onboarding: IPtables Logs
6.2-Normalizing Data: The Common Information Model
6.3-Hands-On Lab: Applying CIM to your firewall logs
7-Using Your Splunk Environment
7
7.1-Splunk UI Overview
7.2-Using Fields
7.3-Hands on with the Splunk UI
7.4-Search Modes
7.5-Hands On Lab: Search Modes
7.6-The Search Pipeline
7.7-Hands on with the Search Pipeline
8-Visualizing Data
12
8.1-Reporting Log Data: Tables
8.2-Hands On Lab: Tables
8.3-Advanced Searching Concepts: Chart
8.4-Advanced Searching Concepts: Timechart
8.5-Advanced Searching Concepts: Geostats and IPlocation
8.6-Advanced Searching Concepts: Eval
8.7-Advanced Searching Concepts: Rename
8.8-Advanced Searching Concepts: Relative Time Syntax
8.9-Advanced Searching Concepts: Search Performance
8.10-Advanced Searching Concepts: Time to experiment
8.11-Dashboards
8.12-Hands-On Lab: Dashboards
9-Wrap Up
1
9.1-Course Wrap Up