CODE: SPL_POWER-U
LENGTH: 32 Hours (4 days)
PRICE: kr40 000,00
This course is for Splunk Power Users who want to become experts on the following Splunk topics :
Working with Time :
for power users who want to become experts at using time in searches. Topics will focus on searching and formatting time in addition to using time commands and working with time zones.Statistical Processing :
to identify and use transforming commands and eval functions to calculate statistics on their data. Topics will cover data series types, primary transforming commands, mathematical and statistical eval functions, using eval as a function, and the rename and sort commands.Comparing Values :
to learn how to compare field values using eval functions and eval expressions. Topics will focus on using the comparison and conditional functions of the eval command, and using eval expressions with the field format and where commandsResult Modification :
to use commands to manipulate output and normalize data. Topics will focus on specific commands for manipulating fields and field values, modifying result sets, and managing missing data. Additionally, students will learn how to use specific eval command functions to normalize fields and field values across multiple data sources.Correlation Analysis :
to learn how to calculate co-occurrence between fields and analyze data from multiple datasets. Topics will focus on the transaction, append, appendcols, union, and join commands.Creating Knowledge Objects :
to learn how to create knowledge objects for their search environment using the Splunk web interface. Topics will cover types of knowledge objects, the search-time operation sequence, and the processes for creating event types, workflow actions, tags, aliases, search macros, and calculated fields.Creating Field Extractions :
to learn about field extraction and the Field Extractor (FX) utility. Topics will cover when certain fields are extracted and how to use the FX to create regex and delimited field extractions.Data Models :
to learn how to create and accelerate data models. Topics will cover datasets, designing data models, using the Pivot editor, and accelerating data models.
Working with Time :
Module 1 - Searching with Time
Module 2 - Formatting TIme
Module 3 - Using Time Commands
Module 4 - Working with Time Zones
Statistical Processing :
Module 1 - What is a Data Series
Module 2 - Transforming Data
Module 3 - Manipulating Data with eval Command
Module 4 - Formatting Data
Comparing Values
Module 1 - Using eval to Compare
Module 2 - Filtering with where
Result Modification
Module 1 - Manipulating Output
Module 2 - Modifying Result Sets
Module 3 - Managing Missing Data
Module 4 - Modifying Field Values
Module 5 - Normalizing with eval
Correlation Analysis
Module 1 - Calculate Co-Occurrence Between Fields
Module 2 - Analyze Multiple Data Sources
Creating Knowledge Objects
Topic 1 – Knowledge Objects & Search-time Operations
Topic 2 – Creating Event Types
Topic 3 – Creating Workflow Actions
Topic 4 – Creating Tags and Aliases
Topic 5 – Creating Search Macros
Topic 6 – Creating Calculated Fields
Creating Field Extractions
Module 1 - Using the Field Extractor
Module 2 - Creating Regex Field Extractions
Module 3 - Creating Delimited Field Extractions
Data Models
Module 1 - Introducing Data Model Datasets
Module 2 - Designing Data Models
Module 3 - Creating a Pivot
Module 4 - Accelerating Data Models
To be successful, students should have a solid understanding of the
following:
Prerequisites can be obtain with free elearning :
What is Splunk (SSC) : https://www.splunk.com/en_us/training/courses/what-is-splunk.html
Intro to Splunk (SSC) : https://www.splunk.com/en_us/training/courses/intro-to-splunk.html
Using Fields (SSC) : https://www.splunk.com/en_us/training/courses/using-fields.html
Visualizations (SSC) : https://www.splunk.com/en_us/training/courses/visualizations.html
Intro to Knowledge Objects (SSC) : https://www.splunk.com/en_us/training/courses/intro-to-knowledge-objects.html
Search Under the Hood (SSC) : https://www.splunk.com/en_us/training/courses/search-under-the-hood.html
Or ask Arrow Education Team for Prerequisites Fast Start bundle (SPL_PREREQ)
Certification : Splunk Core Certified Power User
NOTE: Make sure to complete a module within a 4 hour time range, do not start a module one day and then end the next day)
Network Security
Data Intelligence AI
Cloud
09 des 2024
Virtual Classroom (CET / UTC +1)
CET
English
Instructor Led Online
kr 40 000,00
17 mar 2025
Virtual Classroom (CET / UTC +1)
CET
English
Instructor Led Online
kr 40 000,00
05 mai 2025
Virtual Classroom (CET / UTC +1)
CEDT
English
Instructor Led Online
kr 40 000,00