Security & Observability
Splunk Trainingin Hyderabad & Online
Splunk training in Hyderabad with two tracks: Splunk Developer (searching, SPL, fields, reports, dashboards, alerts, lookups and the Common Information Model) and Splunk Administration (installation, forwarders, indexes, apps, users and roles, deployment management and clustering). The course also prepares you for the Splunk Core Certified User and Power User exams.
Flexible batchesClassroom & OnlineAmeerpet, Hyderabad
What You'll Learn
- 01Splunk fundamentals
- 02Search Processing Language (SPL)
- 03Data ingestion and log analysis
- 04Dashboards and reports
- 05Alerts and monitoring
- 06Administration concepts
Available as: Developer / SOC TrackAdmin Track
Course Modules
- 1
Developer: Introduction & Basic Searching
- What Splunk is and its architecture
- Search fundamentals, time ranges and search jobs
- Fields, the Fields sidebar and Field Extractor
- 2
Developer: Saving, Scheduling & Reporting
- Saving, sharing, scheduling and exporting searches
- Reporting commands: top, rare, stats, addtotals, addcoltotals
- Charts, timecharts and result formatting
- 3
Developer: Reports, Dashboards & Knowledge Objects
- Building reports and dashboards
- Tags, event types, macros and workflow actions
- 4
Developer: Search Commands & Calculations
- Search pipeline and syntax; table, sort, fields, rename, rex
- eval, conditionals, rounding and formatting results
- 5
Developer: Lookups, CIM & Mapping
- Lookup tables and automatic lookups
- Common Information Model and data normalisation
- geostats, iplocation and single-value commands
- 6
Admin: Overview & Installation
- Architecture, licensing and requirements
- Installing Splunk on Linux, creating indexes and inputs
- 7
Admin: Forwarders, Apps & Configuration
- Universal Forwarder installation and management
- Apps, add-ons and Splunkbase
- Index-time and search-time configuration files
- 8
Admin: Deployment, Users & Production
- Deployment server and client groups
- Users, roles, LDAP and native authentication
- Data inputs, parsing and troubleshooting
- 9
Admin: Distributed Search & Clustering
- Distributed management console
- Indexer and search head clustering
After this course you can
- Write SPL searches to filter, transform and summarise machine data
- Build reports, visualisations, dashboards and scheduled alerts
- Use fields, lookups, macros, tags, event types and the Common Information Model
- Install and configure Splunk, forwarders, indexes, apps, users and roles
- Understand distributed deployments and indexer / search head clustering
Who this course is for
- Search analysts and SOC analysts
- System administrators
- Software developers
- Database administrators
- IT professionals moving into analytics, monitoring or security operations
Training format
- Duration
- Contact us for current batch details
- Mode
- Classroom (Ameerpet), live online & recorded video
- Includes
- Hands-on practice, interview preparation
- Trainer
- Ravi Kumar · 10+ years of industry experience
- Certification
- Splunk Core Certified User and Power User exam preparation
- Prerequisites
- No mandatory prerequisites · Basic knowledge of data analytics or IT systems is helpful
Splunk Training — Questions
No mandatory prerequisites. Basic knowledge of data analytics or IT systems is helpful.
The Developer track covers searching, SPL, reports, dashboards, alerts and knowledge objects. The Admin track covers installation, forwarders, indexes, apps, users, deployment and clustering.
Splunk Developer, Splunk Admin, SOC Analyst, SIEM Engineer, Security Analyst and IT Operations Analyst roles.
Yes. You can attend in our Ameerpet classroom, join live online classes or learn with recorded video courses.
Search analysts and SOC analysts; System administrators; Software developers; Database administrators; IT professionals moving into analytics, monitoring or security operations.
Free guides for this course
Let's Connect
Have a Career Goal in Mind?
Let's help you find the right training program for your learning goals.