Advanced Searching and Reporting with Splunk Enterprise

What you'll learn

Splunk is a data analysis and aggregation tool that utilizes a multitude of techniques for data analysis and reporting. The end goal of having a Splunk infrastructure in place is to correlate and analyze the data and derive useful insights for forecasting, capacity planning, and decision making as well as security incident management. In this course, Advanced Searching and Reporting with Splunk Enterprise, you’ll learn different methods and techniques to correlate, search, and analyze data to answer complex questions thus helping management at all tiers in risk mitigation, incident response, forecasting, and decision making. First, you’ll explore different techniques for search optimization and writing efficient queries using Search Processing Language. Next, you’ll discover how to manipulate and filter data in Splunk Enterprise. Finally, you’ll learn how to combine searches, use sub-searches, and leverage advanced transactions. When you’re finished with this course, you’ll have the skills and knowledge needed to create optimal and efficient searches and reports and solve complex data analysis problems using advanced analytics through SPL commands.

Table of contents