Advanced Searching and Reporting with Splunk Enterprise

This course will teach you different searching and reporting techniques
used to address complex data analysis and reporting problems. It will also focus on developing robust, optimal and efficient searches.

Splunk is a data analysis and aggregation tool that utilizes a multitude of techniques for data analysis and reporting. The end goal of having a Splunk infrastructure in place is to correlate and analyze the data and derive useful insights for forecasting, capacity planning, and decision making as well as security incident management. In this course, Advanced Searching and Reporting with Splunk Enterprise, you’ll learn different methods and techniques to correlate, search, and analyze data to answer complex questions thus helping management at all tiers in risk mitigation, incident response, forecasting, and decision making. First, you’ll explore different techniques for search optimization and writing efficient queries using Search Processing Language. Next, you’ll discover how to manipulate and filter data in Splunk Enterprise. Finally, you’ll learn how to combine searches, use sub-searches, and leverage advanced transactions. When you’re finished with this course, you’ll have the skills and knowledge needed to create optimal and efficient searches and reports and solve complex data analysis problems using advanced analytics through SPL commands.

• Course Overview 1min
• Optimizing and Fine-tuning Searches in Splunk Enterprise 26mins
• Filtering and Manipulating Data at Search-time 38mins
• Handling and Managing Multi-value Fields 33mins
• Leveraging Advanced Transactions 32mins
• Managing Timestamps and Time-series Analysis 28mins
• Deploying Sub-searches 22mins
• Combining and Joining Multiple Datasets 29mins