This two-day course is for administrators new to Splunk Cloud and those wanting to become more experienced in managing Splunk Cloud instances. It provides the opportunity to gain the skills, knowledge and best practices for data management and system configuration for data collection and ingestion required in a Splunk Cloud environment.

This two-day track is designed for power users who want to learn best practices for building dashboards and forms in Dashboard Studio. It combines content from Creating Maps, Introduction to Dashboards and Dynamic Dashboards.

This two-day track is designed for anyone who wants to learn Splunk’s next-generation search language, SPL2. This course combines content from Learning SPL2 Fundamentals, Mastering SPL2, and Building Splunk SPL2 Apps. You will learn the use cases for leveraging SPL2, navigate the SPL2 interface, take a deep dive into performing searches that include Custom Functions and Evals, apply best practices when using SPL2, and build apps using SPL2 Modules.

This two-day practical training guides you from the basics of OTel and Splunk Observability Cloud to the deployment and configuration of the OTel Collector. You will learn advanced configuration with processors and exporters, collecting Kubernetes-specific telemetry, and enabling APM auto-instrumentation for real-time application insights. Visualize and alert on raw telemetry data in Splunk Observability Cloud.

This one-day course empowers experienced SOC staff to perform threat investigation, detection, and incident response using open-source attack simulation tools integrated with Splunk, while deepening their understanding of SOC roles, tasks, and challenges.

Note: This course requires prior training and/or experience with Splunk security products (Enterprise Security and SOAR). Beginners should attend the SOC Analyst track.