Introduction to Using and Learning Splunk

Name: Introduction to Using and Learning Splunk
Rating: 4.3 (2 reviews)

An Introduction to Splunk and where it fits into Big Data

Created byAndrew Landen

Last updated 10/2022

English

What you'll learn

Understand How Splunk fits into Information Technology
Learn How to Get Into Splunk
Understand the Structure of Splunk
Setup your User Account Settings
Learn How to Use Other Basic Splunk GUI Interfaces

Course content

1 section • 16 lectures • 3h 35m total length

Introduction to Big Data and Splunk19:18
Learn about Big Data and how Splunk fits into that picture.
Big data is any technology which enables the storage of gigabytes of data and larger for searching, reporting and other purposes.
Introduction to Splunk Certification and Career Paths14:41
Learn about the Splunk certifications.
Introduction Splunk Directory Structures13:13
Learn how Splunk structures its directories.
Lecture structure:
Splunk Education, resources, certifications
education.splunk.com
Company pays for courses
Splunk Conferences - conf.splunk.com
www.splunk.com
Support-Splunk answers
Splunk Lantern Best Practices
Getting Started - https://www.splunk.com/en_us/get-started.html

Splunk Education menu option
Certifications explanations - https://www.splunk.com/en_us/training/course-catalog.html?filters=filterGroup2SplunkCoreCertifiedPowerUser
Splunk Cloud and AWS

Certification Handbook pdf - https://www.splunk.com/pdfs/training/splunk-certification-candidate-handbook.pdf
Splunk Documentation online - docs.splunk.com
-conf files - https://docs.splunk.com/Documentation/Splunk/9.0.1/Admin/Propsconf
-List of search commands - https://docs.splunk.com/Documentation/Splunk/9.0.1/SearchReference/WhatsInThisManual
-Command quick reference - https://www.splunk.com/pdfs/solution-guides/splunk-quick-reference-guide.pdf

Search-Report-Alerts-Dashboards vs Settings-Dashboards, Settings options
Advanced search-macros
Introduction to Installing Splunk17:05
Learn how to install Splunk on a fresh AWS instance to follow along with this course.
Setting up the admin user in Splunk and logging into an AWS VM instance3:10
Learn how to setup the admin account in Splunk.
Introduction to the Splunk GUI14:10
Learn the Splunk GUI.
Splunk GUI Tour31:39
When you create a new AWS Splunk instance on the smallest and cheapest instance, the disk space will be small and slow. The low disk space issue that arises is solved here.
Search internal indexes11:21
Learn the basics of Splunk internal indexes and searching them.
Remember when search the internal logs to use this SPL:
index=_* NOT (TERM(action=search) OR savedsearch OR abcd)
Manage apps8:13
Learn the basics of Splunk apps.
Create Basic Searches13:22
Learn the basic Splunk search techniques at the SPL line.
Interpret Search Results10:32
Learn all about Splunk SPL search results and how to interpret and understand them.
Refine Search Results13:06
Learn how to refine SPL search results by filtering only the results of interest. Learn how to define the results of interest in terms of Splunk SPL filters.
Search Controls11:26
Learn the controls for SPL searches.
Editing Splunk Dashboards3:22
Learn how to edit a dashboard via the UI interface and learn the basics of a dashboard.
Creating a pivot table equivalent to SPL stats6:28
Create a pivot similar to the SPL just created of count by file in the internal index. Learn how pivot tables are just a fancy, complicated and slow layer on top of Splunk SPL. Learn the connection between pivot tables and datamodels commonly used in Splunk ES.
Dashboard overview including XML editing24:06
Learn how to modify a dashboard in edit mode for UI view and XML Source view. Enable the user to change the time for the search and add a search into any panel with Trelis mode. Set a tstats search to plot a timechart of counts.

Requirements

Have an Interest in computers (Information Technology)
Have an interest in learning answers to analytical questions

Description

We begin with covering the big tech landscape and where Splunk fits within that picture. Splunk is the only development platform for true big data that preserves logs in their original unstructured format for fast search, alerting and investigating. Splunk easily handles indexing and searching pedabytes of data and more from countless applications in real-time with an infinite number of user-defined use cases; anything that you can imagine wanting to know about your data can be correlated and analyzed across every application that you are logging into Splunk.

This course is designed to interest someone with no prior understanding of either computers or Splunk into pursuing certification in Splunk. We show you how to map your career progression through Splunk and what it enables for you.

The goal of this course is to teach Splunk well enough for you to use Splunk as a basic user. We begin with creating an Amazon AWS instance and install Splunk onto it so that you can follow along with the course. We then cover the Splunk application structure and processes, the GUI interface, searching, alerting, dashboards and pivots/datamodels. We go into enough detail for you to understand key points in all of these areas enough to start using them on a basic level. We even add important tips to help you to avoid making critical mistakes like using real-time searches when they aren't needed and making searches that aren't fast and efficient.

Who this course is for:

Anyone interested in beginning an IT career should consider Splunk