This six-hour course (with an additional one hour break for lunch) is designed for Splunk power users who want to create advanced, interactive dashboards using the classic, simple XML framework. The course focuses on tokens, user inputs, dynamic drilldowns, and event handlers. It combines a strong technical focus with the opportunity to practice in a realistic lab environment.

Description

• Using Tokens
• Adding User inputs
• Improving Performance
• Customizing Dashboards
• Creating Dynamic Drilldowns
• Adding Event Handlers

To be successful, students should have a solid understanding of the following:

• What is Splunk
• Introduction to Splunk
• Enriching Data with Lookups

Topic 1 – Classic Dashboards

Compare dashboards and forms

Create prebuilt panels

Troubleshoot views

Topic 2 – Using Tokens

Describe how tokens work

Define token syntax

Use token filters

Topic 3 – Adding User Inputs

Define user inputs

Add a user input

Create cascading inputs

Topic 4 – Improving Performance

Identify performance improvement methods

Use tstats and data model acceleration

Create a base & chain search

Topic 5 – Customizing Views

Customize charts

Use event annotations

Customize panels

Topic 6 – Create Dynamic Drilldowns

Identify types of drilldowns

Use the drilldown editor

Create a dynamic drilldown

Topic 7 – Adding Event Handlers

Name event handler types

Define event actions

Create a contextual drilldown