Splunk Boot Camp

About this Course

This two-day boot camp is designed to empower a wide range of technology workers with the knowledge and skills needed to take full advantage of Splunk. This Splunk training course is exercise-intensive and is for individuals looking to develop a deeper understanding of the tool. Our continuous hands-on lab classroom format and real-world practice scenarios cement your new skills with Splunk’s various applications and leave you prepared to properly collect, analyze and utilize your machine data. 

Splunk is one of the first platforms to help make sense of log data. Splunk is not just a tool for IT Ops. It’s a tool for developers. In fact, it’s a tool for everyone who’s interested in using the power of data. There are a lot of use cases for Splunk, but first, you need to learn what it’s capable of and how to get the most of it.

If you have concerns about security and compliance, don’t worry. You can still be compliant while making life easier with Splunk. You’ll just need to give everyone visibility on what’s happening with your applications in real time or for analysis purposes. And yes—you can do all of this without giving people access to the servers.

Course Outline

Part 1: Introduction to Splunk

1. What’s Splunk?
2. Authentication Methods
3. Access Controls & Users
4. Products, Licensing, and Costs
5. Quick Tour Guide: User Interface
6. Exercise: Lab Environment and Configuration

Part 2: Application Types with Splunk

1. Security Information and Event Management (SEIM)
2. Artificial Intelligence for IT Operations (AIOps)
3. Application Log Management
4. Machine Learning
5. Compliance

Part 3: Splunk Architecture(s)

1. Forwarders
2. Indexes
3. Search Head

Part 4: Indexes

1. What are Indexes?
2. What are Indexers?
3. How Does it Work?
4. Configuration
5. Exercise: Indexes and Indexers in Practice

Part 5: Getting Data Into Splunk

1. What are Forwarders?
2. Getting Data into Indexer
   • Files
   • Networking
   • Others
3. Different Configuration Types
4. Exercise: Configuring a Forwarder

Part 6: Searches

1. Creating Searches
2. Refine Searches
3. Save Searches
4. Search Language
5. Optimizing Searches
6. Exercise: Creating Searches

Part 7: Dashboards and Visualizations

1. Visualization Types
2. Exercise: How to Create a Dashboard

Part 8: Alerts and Scheduled Reports

1. What are Alerts?
2. Exercise: Configuring Alerts
3. What are Schedule Reports?
4. Creating Reports with Dashboards
5. Exercise: Configuring Scheduled Reports

Part 9: Apps and Add-Ons

1. Architecture
2. Installation and Configuration
3. App Deployment
4. Exercise: Integrating Apps and Add-Ons

Part 10: Splunk Administration

1. Installation
2. Configuration
3. Administration
4. Exercise: Install and Configure on Virtual Machines
5. Exercise: Install and Configure Using Containers

Part 11: Putting All Pieces Together

Exercise: Sending Nginx logs to Splunk to be notified with alerts and get some visibility by using Dashboards. Simulate problems in the application and troubleshoot using Searches.