دوره Splunk Fundamentals 1 & 2

Splunk Fundamental

• Introducing Splunk
• Understand the uses of Splunk
• Define Splunk Apps
• Learn basic navigation in Splunk
  Searching
• Run basic searches
• Use autocomplete to help build a search
• Set the time range of a search
• Identify the contents of search results
• Refine searches
• Use the timeline
• Work with events
• Control a search job
• Save search results
  Using Fields in Searches
• Understand fields
• Use fields in searches
• Use the fields sidebar
• Use search modes (fast, verbose, and smart)
  Creating Reports and Dashboards
• Save a search as a report
• Edit reports
• Create reports that display statistics (tables)
• Create reports that display visualizations (charts)
• Create a dashboard
• Add a report to a dashboard
• Edit a dashboard

Splunk’s Search Language Fundamentals

• Understand the search pipeline
• Understand search syntax concepts
• Use the following commands to perform searches:
• Tables
• Rename
• Fields
• Dedup
• Sort

Using Basic Transforming Commands

• The top command
• The rare command
• The stats command

Creating and Using Lookups

• Describe lookups
• Examine a lookup file example
• Create a lookup file and create a lookup definition
• Configure an automatic lookup
• Use the lookup in searches

Creating Scheduled Reports and Alerts

• Describe scheduled reports
• Configure scheduled reports
• Describe alerts
• Create alerts
• Create alerts