Splunk online course

Lessons

1. Install Splunk Enterprise on Windows Learn how to download and install Splunk Enterprise on Windows, choose default or custom settings, configure the service account, and verify Splunk Web.
2. Search basics index, sourcetype, and a transforming command.
3. How to Create and Configure an Index in Splunk Learn how to create a Splunk index using Splunk Web, the CLI, or indexes.conf, and configure paths, retention, bucket size, and storage limits.
4. Access the Splunk Web Interface Learn how to open Splunk Web, sign in with the initial admin account, change the default password, and verify access to Splunk Home.
5. How to Add Data to Splunk Learn how to add data to Splunk Enterprise using Upload, Monitor, or Forward, configure parsing and metadata, and verify indexed events in Search.
6. Splunk Alerts Overview: Types, Conditions, Actions, and Throttling Learn how Splunk alerts use searches, conditions, actions, and throttling to monitor security, application, web, and infrastructure events.
7. Using Boolean Expressions in Splunk Searches Learn how to use AND, OR, and NOT in Splunk searches to require conditions, match alternatives, exclude noise, and group field-based filters.
8. Collect Windows Event Logs from a Local Machine with Splunk Learn how to configure Splunk on Windows to collect local Application, Security, and System event logs, assign an index, and validate ingestion.
9. Collect Windows Performance Counters in Splunk Learn how to configure Splunk to collect local or remote Windows Performance Monitor counters, select objects and instances, set polling intervals, and verify indexed data.
10. Collect Windows Host Information with Splunk Learn how to configure local or remote Splunk collection for Windows host information, including operating system, CPU, disks, services, and processes.
11. Configure a Splunk Universal Forwarder on Linux Configure a Splunk Universal Forwarder on Linux to start at boot, send log data to an indexer, monitor files, and verify indexed events.
12. How to Create and Manage a Report in Splunk Learn how to save a Splunk search as a reusable report, configure content and time settings, share it, schedule it, add it to dashboards, and manage it later.
13. How to Create an Alert in Splunk Learn how to save a Splunk search as an alert, configure thresholds, schedules, throttling, permissions, actions, and verify triggered alerts.
14. Create a Splunk Alert That Executes a Script When Disk Full Events Occur Learn how to build a real-time Splunk disk-full alert that runs a server-side script, including search design, trigger settings, deployment, testing, security, and troubleshooting.
15. Splunk Data Sources and Inputs Learn how Splunk collects machine data from files, networks, Windows systems, queues, and APIs, then turns it into searchable events stored in indexes.
16. Run a Basic Search in Splunk Learn how to search indexed Splunk events, restrict searches to an index, use fields and Boolean logic, and read the Search results page.
17. Understanding and Using Fields in Splunk Searches Learn how Splunk extracts fields, displays selected and interesting fields, and uses field values to narrow search results.
18. Install the Splunk Universal Forwarder on Linux Learn how to choose, download, install, start, and verify the Splunk Universal Forwarder on Ubuntu, Debian, and other Linux systems.
19. Install and Configure the Splunk Universal Forwarder on Windows Learn how to install the Splunk Universal Forwarder on Windows, collect event logs, configure an indexer and deployment server, and verify data delivery.
20. Install Splunk Enterprise on Linux Learn how to choose, download, install, and start Splunk Enterprise on Ubuntu or another Linux distribution using the correct package format.
21. Install Splunk Enterprise on Windows Learn how to install Splunk Enterprise on Windows with default or customized settings, choose a service account, configure ports, and verify Splunk Web.
22. Open the Search & Reporting App in Splunk Learn how to open Splunk's Search & Reporting app, understand its main controls, choose a time range, and prepare your first search.
23. Configure Splunk Forwarders to Monitor and Send Log Files Learn how to configure a Splunk Universal Forwarder on Windows to monitor a log file, assign a sourcetype and index, forward events, restart the service, and verify ingestion.
24. Monitor Remote Windows Event Logs with Splunk Forwarders Configure a Splunk Universal Forwarder on Windows to collect Security, Application, and System event logs and send them to the remotelogs index.
25. Using Pipes to Chain Search Commands in Splunk Learn how Splunk pipes connect SPL commands to filter, sort, limit, calculate, aggregate, and prepare search results for visualization.
26. Splunk Reports Overview Learn what Splunk reports are, how to create them from searches or pivots, and how to run, schedule, share, embed, and use them in dashboards.
27. Splunk Search Rules and Basic SPL Syntax Learn Splunk search terms, phrases, Boolean logic, pipelines, sort, and table commands with beginner-friendly SPL examples.
28. Set Up a Splunk Receiver for Forwarded Data Learn how to configure a Splunk indexer or intermediate forwarder to receive forwarded data, open the correct TCP port, connect forwarders, and troubleshoot delivery.
29. How to Share a Report in Splunk Learn how to change Splunk report permissions, choose app or all-apps sharing, assign role-based read and write access, and validate report availability.
30. Splunk sort Command: Sort Search Results by Field Learn Splunk's sort command syntax, ascending and descending order, multiple sort keys, result limits, numeric sorting, and practical SPL examples.
31. Splunk Home Web Interface Overview Learn how Splunk Home works, including its navigation bar, Apps menu, getting-started area, Home Dashboard, permissions, and common workflows.
32. Splunk Online Tutorial: Installation, Log Collection, Search, Reports, and Alerts Learn Splunk fundamentals: install the platform, collect local and remote logs, search with SPL, analyze fields, build reports, and configure alerts.
33. Splunk stats Command: Aggregate Event Data Learn how to use Splunk stats to count events, calculate sums and averages, find minimums and maximums, and group results by fields.
34. Using the Splunk Time Range Picker Learn how to use Splunk's time range picker to search preset, relative, real-time, date, and exact date-and-time periods.
35. Splunk top Command Learn how to use the Splunk SPL top command to rank the most frequent field values and view their counts and percentages.
36. What Are Splunk Forwarders? Learn what Splunk forwarders do, how universal forwarders collect remote logs, how inputs.conf and outputs.conf work, and how indexers receive and search forwarded events.
37. What Is an Index in Splunk? Learn what Splunk indexes are, how indexers store event data in buckets, how to create and manage indexes, route data, search them, and troubleshoot common issues.
38. What Is Splunk? An Introduction to Data Search, Analysis, and Observability Learn what Splunk is, how it collects and indexes machine data, and how teams use searches, dashboards, alerts, and security analytics for operational intelligence.
39. Splunk where Command: Filter Search Results with Eval Expressions Learn how to use Splunk's where command to filter events and transformed results with numeric comparisons, logical conditions, eval expressions, and aggregate values.
40. Monitoring Windows Data Inputs with Splunk Learn how Splunk collects Windows event logs, performance counters, WMI data, Registry changes, and Active Directory activity, and when to use WMI or a universal forwarder.