The Complete Splunk Fundamentals 1 Training Course

Review the course material from the complete Splunk fundamentals 1 training course, delivering foundational content to help learners build essential skills in Splunk.

Discover how Splunk serves as a SIEM for big data, ingesting, parsing, and centralizing logs with forwarders, indexers, and a search head, plus dashboards and alerts.

Download the 60-day free trial of Splunk Enterprise for Windows, run the 64-bit MSI installer, set login credentials, accept the license, and launch Splunk with its default launcher.

Log in to Splunk's site and download 60-day trial of Splunk enterprise 9.0.0.1 for macOS (DMG). Run the installation wizard and open Splunk Web on port 8000 to log in.

Upload practice data to Splunk by installing the Cisco and Unix add-ons, setting source types like access combined and Linux secure, and creating web and security indexes.

Explore the Splunk user interface, learn about apps and add-ons from Splunk Base, and configure user settings and navigation to onboard data with correct source types and parsing.

Explore the Splunk interface and manage apps and add-ons via Splunk Base. Configure preferences, roles, and themes, and tailor your search experience with the advanced editor and search assistant.

Learn syntax and color codes in Splunk basic searching, build searches with index and metadata before the first pipe, and use orange booleans, blue commands, green arguments, and purple functions.

Perform a hands-on tour of basic searching in Splunk with a demo, covering search modes fast, smart, and verbose, the time picker, and SPL terms to search.

Drill down on events by time using the timeline and time picker in Splunk, enabling trend analysis, real-time searching, and useful relative presets.

Learn to use the time picker in Splunk to filter and zoom event timeline, set earliest and latest ranges, and apply presets like real time and relative time for searches.

Explore search and reporting in Splunk by building an example search and formatting results with eval, and applying core commands like table, stats, dedupe, and sort.

Explore how to use fields in searches by understanding the fields command and fields sidebar, highlighting and selecting values, and generating quick reports with top values.

learn how transforming commands top, rare, and stats convert searches into tables and visualizations, with smart mode optimizing queries and default top ten results.

Explore how to use top and rare commands in Splunk, run stats and transforms, and apply formatting and field operations for clear data insights.

Learn how lookups enrich searches by linking static csv data to events. Create lookup definitions and configure them as automatic or static for data enrichment.

Upload a csv as a lookup, define the lookup, and query with inputlookup and where to enrich results; export and analyze product descriptions and sales with stats.

Create and save searches as reports or dashboards with visualizations and charts. Explore time charts, case charts, stats, stacking, overlays, and trellis layouts to build readable, executive-ready Splunk dashboards.

Explore data sets and pivot workflows in Splunk, and learn how the common information model normalizes data with the SIM add-on to standardize fields and accelerate searches.

Master how to map the web data model in Splunk using the CIM with the SIM app, field aliases, and add-on builder, then validate, pivot, and package the mappings.

Create an automatic lookup to enrich search results with a description field by mapping product IDs to descriptions using the existing product info lookup.

Alerts fire when a saved search condition is met, running in real time or on a cron schedule, triggering actions such as logs, emails, or webhooks for use in SoC.

Create and configure knowledge objects as alerts in splunk, define trigger conditions and throttling, and manage permissions and alert delivery.