Udemy
    •  
    •  
    •  
    •  
    •  
    •  
    •  
    •  
Subscribe
Turn what you know into an opportunity and reach millions around the world.
Learn More
Your cart is empty.
Keep shopping
The Complete Splunk Fundamentals 2 Training
Rating: 4.7 out of 5(668 ratings)
3,797 students

The Complete Splunk Fundamentals 2 Training

Splunk Power User Certification Exam Prep | Training for All Versions of Splunk
Created byAbleversity Incorporated
Last updated 7/2025
English

What you'll learn

  • This will build on the concepts mastered in Fundamentals 1 and provide the knowledge needed to pass the Splunk Core Certified Power User exam certification.
  • Master the concepts of building visualizations, eval command, knowledge objects, rex and erex, tags and events, macros, workflow actions, and more!
  • Normalizing data with the Common Information Model (CIM).
  • Course Introduction
  • Mapping Commands
  • Building Maps
  • The eval and fillnull Commands
  • Demo: eval and fillnull
  • Transaction Command
  • Investigating with the Transaction Command
  • Knowledge Objects
  • Setting Permissions of KOs
  • Field Extractions
  • Rex, Erex, and the Field Extractor
  • Field Aliases and Calculated Fields
  • Making Field Aliases
  • Tags and Event Types
  • Creating Tags and Setting Event Types
  • Macros Overview
  • Building a Macro
  • Workflow Actions
  • Building a Workflow Action
  • Making POST and Search Workflow Actions
  • Datamodels and the CIM
  • CIM Add-on Builder

Course content

1 section • 22 lectures • 2h 3m total length

  • Introduction0:47
  • Mapping Commands1:00

    Master mapping commands in Splunk to create geo visualizations with IP location, geo stats, and geom options. Configure latitude and longitude, totals, and labels, using pre-configured geo states and countries.

  • Building Maps10:21

    Build maps and dashboards in Splunk by visualizing three days of events with time charts and trend lines, using IP location and geo stats for regional insights.

  • The eval and fillnull Commands2:47

    Learn to use eval and fill null in SPL to create and manipulate fields with math, boolean operators, and data conversions, and compare where versus search in the SPL editor.

  • Demo: eval and fillnull11:31
  • Transaction Command3:23

    Master transaction commands in Splunk to investigate events across time, using max span, max pause, starts with, and ends with, and contrast transaction with stats for efficient trend analysis.

  • Investigating with the Transaction Command8:48
  • Knowledge Objects2:54
  • Setting Permissions of KOs8:03

    Learn to create and manage knowledge objects in Splunk, including alerts and event types, configure permissions, throttling, and trigger actions like email, with cron-based scheduling.

  • Field Extractions1:57

    Master field extractions in Splunk using regex for unstructured data and delimiter methods for structured data, with rex and irex commands or the field extractor to pull fields.

  • Rex, Erex, and the Field Extractor9:20

    Explore three ways to access the field extractor in Splunk and create regular expressions extractions for IP address, method, and domain, with preview, validation, and permissions steps.

  • Field Aliases and Calculated Fields3:57
  • Making Field Aliases8:46
  • Tags and Event Types2:13

    Learn how tags classify data and power tag-based searches, including multi-tag queries and case sensitivity. See how event types use color highlighting to spotlight specific events and support saved searches.

  • Creating Tags and Setting Event Types3:59

    Learn to create and apply tags in search and reporting, such as tagging login events by code 4624 and Hayley’s account, then color code event types for insights.

  • Macros Overview2:10

    Learn how search macros in Splunk act as reusable shortcuts, save and run named searches, share them as knowledge objects, and view the underlying search with backticks and arguments.

  • Building a Macro9:53
  • Workflow Actions3:09

    Explore how to create and configure workflow actions in Splunk Web to push, pull, or search data, enrich events, and automate lookups like whois and VirusTotal.

  • Building a Workflow Action5:36

    Learn to create a Splunk workflow action for a client IP whois lookup via a get request using Domain Tools, with dollar-sign variable binding and result verification.

  • Making POST and Search Workflow Actions6:24
  • Datamodels and the CIM2:49

    Map fields to the common information model with the SIM add-on to standardize data and accelerate searches, using aliases, extractions, and tags for audit and efficiency.

  • CIM Add-on Builder13:50

    Master CIM add-on builder workflows in Splunk to map web data models, create event types and field aliases, and validate mappings from source types to the web data model.

  • Fundamentals 2 Quiz
  • Fundamentals 2 Quiz (Continued)

Requirements

  • Ableversity's Splunk Fundamentals 1
  • The above are recommended but not required

Description

Splunk Fundamentals 2: Elevate Your Skills to Power User Level

Welcome to Ableversity's Splunk Fundamentals 2 course, where expert instruction meets advanced Splunk mastery. This comprehensive course is taught by our Principal Instructor, Hailie Shaw, and developed under the expert oversight of Michael Bentley, "The Splunk Doctor," one of the most respected Splunkers in the world.

Why This Course Stands Apart

Building on the foundation from Splunk Fundamentals 1, you'll now learn from industry leaders who bring real-world expertise and advanced techniques to every lesson. With guidance from professionals who've mastered Splunk at the highest levels, you'll gain the sophisticated skills and insights needed to become a true Splunk Power User.

What You'll Master

Through 22 advanced lessons, you'll dive deep into complex visualizations, knowledge objects, field extractions, macros, workflow actions, and data models. Hailie will guide you through hands-on demonstrations and practical labs using real practice data, ensuring you develop both the technical proficiency and strategic thinking required for power user success.

Master critical concepts including mapping commands, the eval command, the transaction command, rex and erex, field aliases and calculated fields, tags and event types, macros, workflow actions, data models, and the Common Information Model (CIM).

Your Path to Certification

This course is specifically designed for the Splunk Power User Certification track and follows the official blueprint for the Splunk Core Certified Power User exam offered by PearsonVUE. Our students consistently report passing their certification exams after completing this course, a testament to the quality and depth of training you'll receive.

Join Our Community

Learning doesn't stop when the videos end. Connect with us on LinkedIn, X, and Slack, or visit our website for additional resources and support. We're committed to your success and encourage you to reach out with any questions or concerns. We're here to help you succeed.


Enroll today and advance your Splunk journey to the power user level with the guidance of true industry leaders.

Who this course is for:

  • Beginner Splunk users looking to cover the Splunk Power User Certification exam topics.

Report abuse