Professional Development

Splunk Admin course teaches you how to search and navigate in Splunk to create reports and dashboards, both using Splunk's searching and reporting commands and using the product's interactive Pivot tool. Also focusing on more advanced searching and reporting commands as well as on the creation of knowledge objects. Major topics include using transforming commands and visualizations, filtering and formatting results, correlating events, creating knowledge objects, using field aliases and calculated fields, creating tags and event types, using macros, creating workflow actions and data models. It also covers Splunk Enterprise Security's event processing and normalization, technology add-ons, settings, risk analysis settings, threat intelligence and protocol intelligence configuration. Hands-on labs challenges will enable you to create robust searches, reports, and charts, and you will explore some security use cases like threat hunting and malware analysis.