Splunk Fundamental 3 Certification Training Course Overview

This course mainly focuses on additional and advanced search commands and uses of knowledge objects. Majority of the topics include advanced statistics and eval commands, advanced lookup topics, advanced alert actions, using regex and erex to extract fields, using spath to work with self-referencing data, creating nested macros and macros with event types, and accelerating reports and data models.

Audience

  • Anyone who is involved in creating complex search queries, advanced data models and reports with Splunk
  • IT Consultants
  • IT Administrators
  • Business Intelligence/Business Analysts.
Test your current knowledge Qubits42

Splunk Fundamental 3 (24 Hours) Download Course Contents

Live Virtual Classroom
Group Training 1750
18 - 20 Oct 09:00 AM - 05:00 PM CST
(8 Hours/Day)

01 - 03 Nov 09:00 AM - 05:00 PM CST
(8 Hours/Day)

06 - 08 Dec 09:00 AM - 05:00 PM CST
(8 Hours/Day)

1-on-1 Training (GTR) 2000
4 Hours
8 Hours
Week Days
Weekend

Start Time : At any time

12 AM
12 PM

GTR=Guaranteed to Run
Classroom Training (Available: London, Dubai, India, Sydney, Vancouver)
Duration : On Request
Fee : On Request
On Request
Special Solutions for Corporate Clients! Click here
Hire Our Trainers! Click here

Course Modules

Module 1: Exploring Statistical Commands
  • Performing statistical analysis with functions of the stat
  • command
  • Using fieldsummary
  • Using appendpipe
  • Using eventstats
  • Using streamstats
Module 2: Exploring Statistical Commands
  • Using conversion functions
  • Using data and time functions
  • Using string functions
  • Using comparison and conditional functions
  • Using informational functions
  • Using statistical functions
  • Using mathematical functions
  • Using cryptographic functions
Module 3: Exploring Lookups
  • Including and excluding events based on lookup values
  • Using KV Store lookups
  • Using external lookups
  • Using geospatial lookups
  • Using database lookups
  • Understanding best practices for lookups
Module 4: Exploring Alerts
  • Referencing lookups in alerts
  • Outputting alert results to a lookup
  • Logging and indexing searchable alert events
  • Using a webhook alert action
Module 5: Advanced Field Creation and Management
  • Using regex
  • Using the erex command
  • Using the rex command
  • Identifying regex best practices
Module 6: Working with Self-Describing Data and Files
  • Using the spath command
  • Using the eval command with the spath function
  • Extracting fields from table-formatted events with multikv
Module 7: Advanced Search Macros
  • Using nested search macros
  • Previewing search macros before executing
  • Using tags and event types in search macros
Module 8: Using Acceleration Options: Reports and Summary Indexing
  • Using report acceleration
  • Using summary indexing
Module 9: Using Acceleration Options: Data Models and tsidx Files
  • Exploring data models using the datamodel command
  • Using data model acceleration
  • Working with tsidx files using the tstats command
Download Course Contents

Request More Information

Course Prerequisites
  • Splunk Fundamentals 1
  • Splunk Fundamentals 2

Upon completion of this course, you will be able to accomplish

  • Statistical Commands
  • eval Commands
  • Lookups
  • Alert Actions
  • Advanced Field Creation and Management
  • Working with Self-Describing Data and Files
  • Advanced Macros
  • Using Acceleration Options