Splunk Fundamental 3

Download Course Contents

Splunk Fundamental 3 Course Overview

This course mainly focuses on additional and advanced search commands and uses of knowledge objects. Majority of the topics include advanced statistics and eval commands, advanced lookup topics, advanced alert actions, using regex and erex to extract fields, using spath to work with self-referencing data, creating nested macros and macros with event types, and accelerating reports and data models.

Audience

  • Anyone who is involved in creating complex search queries, advanced data models and reports with Splunk
  • IT Consultants
  • IT Administrators
  • Business Intelligence/Business Analysts.

This is a Rare Course and it can be take up to 3 weeks to arrange the training.

  • 1. Do you have limited Window for training?
  • 2. Can you only spend 4-hours per day?
  • 3. Do you want to start training immediately?
  • If your answer is yes to any one of the above, you need 1-on-1- Training
The 1-on-1 Advantage
Methodology
Flexible Dates
4-Hour Sessions
  • • View video
  • • The course will be free if we are not able to start within 7 days of booking.
  • • Only applicable for courses on which this logo appears.

Your will learn:

Module 1: Exploring Statistical Commands
  • Performing statistical analysis with functions of the stat
  • command
  • Using fieldsummary
  • Using appendpipe
  • Using eventstats
  • Using streamstats
  • Using conversion functions
  • Using data and time functions
  • Using string functions
  • Using comparison and conditional functions
  • Using informational functions
  • Using statistical functions
  • Using mathematical functions
  • Using cryptographic functions
  • Including and excluding events based on lookup values
  • Using KV Store lookups
  • Using external lookups
  • Using geospatial lookups
  • Using database lookups
  • Understanding best practices for lookups
  • Referencing lookups in alerts
  • Outputting alert results to a lookup
  • Logging and indexing searchable alert events
  • Using a webhook alert action
  • Using regex
  • Using the erex command
  • Using the rex command
  • Identifying regex best practices
  • Using the spath command
  • Using the eval command with the spath function
  • Extracting fields from table-formatted events with multikv
  • Using nested search macros
  • Previewing search macros before executing
  • Using tags and event types in search macros
  • Using report acceleration
  • Using summary indexing
  • Exploring data models using the datamodel command
  • Using data model acceleration
  • Working with tsidx files using the tstats command
Live Online Training (Duration : 24 Hours) Fee On Request
Group Training
13 - 15 Jun 09:00 AM - 05:00 PM CST
(8 Hours/Day)
18 - 20 Jul 09:00 AM - 05:00 PM CST
(8 Hours/Day)
1-on-1 Training
4 Hours
8 Hours
Week Days
Weekend

Start Time : At any time

12 AM
12 PM

1-On-1 Training is Guaranteed to Run (GTR)
Classroom Training (Available: London, Dubai, India, Sydney, Vancouver)
Duration : On Request
Fee : On Request
On Request
Classroom Training is available. Enquire for the fee Click
Ultra-Fast Track

If you can't spare 24 hours. We can offer you an Ultra-Fast Track for 12 hours

Course Prerequisites
  • Splunk Fundamentals 1
  • Splunk Fundamentals 2

Upon completion of this course, you will be able to accomplish

  • Statistical Commands
  • eval Commands
  • Lookups
  • Alert Actions
  • Advanced Field Creation and Management
  • Working with Self-Describing Data and Files
  • Advanced Macros
  • Using Acceleration Options

Trending Technologies

 Cisco Data Center
 Cisco Routing and Switching
 Cisco Security
 Cisco Collaboration
 Cisco Wireless
 Cisco Service Provider

Request More Information

Add Name and Email Address of participant (If different from you)

Privacy Policy

FAQ's

Yes, fee excludes local taxes.
The Fee includes:
  • Courseware
  • Testing Via Qubits
Yes, Koenig Solutions is a Splunk Learning Partner