SEPTEMBER 6-8, 2025 | BOSTON, MASSACHUSETTS
Splunk University
The ultimate Splunk learning experience
September 6–8
Take advantage of this incredible learning opportunity and get the most out of your .conf25 experience! Head to Boston a few days before the conference to attend Splunk University. You’ll stand out among your peers, deepen your expertise with hands-on courses, expand your knowledge, and make your organization more resilient.
Three-day tracks
Choose one of these three-day sessions.
Power User
This three-day track takes you from A-Z for a Splunk power user, including topics on how to search, manipulate, correlate, and model data. Our most popular course with new or less experienced Splunk users.
Skill Level:
- Beginner > Intermediate
Enterprise Administrator
This three-day track prepares administrators to install, configure, and deploy on-prem Splunk environments. It combines content from Splunk Enterprise System Administration and Splunk Enterprise Data Administration.
Skill Level:
- Beginner > Intermediate
SOC Engineer
This track builds the foundation for SOC engineers in threat detection and incident response, featuring Administering Splunk Enterprise Security and a new course on integrating open-source attack simulation tools with Splunk for testing detections and responses.
Skill Level:
- Intermediate > Advanced
Mastering Splunk Data Management techniques
This three-day course prepares administrators to evaluate and design data management processes and deploy, manage and optimize Splunk data ingestion pipelines.
Skill Level:
- Intermediate > Advanced
Advanced enterprise administrator
This three-day track prepares administrators to install, configure, and troubleshoot standalone and clustered Splunk deployments. It combines content from Troubleshooting Splunk Enterprise and Splunk Cluster Administration.
Skill Level:
- Intermediate > Advanced
Analytics and data science
This three-day track prepares users to perform more scientific analysis on their data with the Machine Learning Toolkit. It includes content from Exploring and Analyzing Data with Splunk and Splunk for Analytics & Data Science.
Skill Level:
- Intermediate > Advanced
SOC Analyst
This track quickly equips new analysts with Splunk skills and best practices, featuring hands-on practice in threat investigation, detection, hunting, and response, along with two new courses and a refreshed 'Cybersecurity Defense Essentials' class.
Skill Level:
- Beginner > Intermediate
Observability
This three-day track prepares DevOps and SRE teams to use Splunk Observability Cloud to monitor and troubleshoot their application environments. It combines content from: Introduction to Splunk Observability Cloud, Fundamentals of Metrics Monitoring, Using Splunk APM, Using Splunk RUM, and Using Splunk Synthetic Monitoring.
Skill Level:
- Beginner > Intermediate
Two-day tracks
Choose one of these two-day sessions.
Splunk Cloud Administrator
This two-day course is for administrators new to Splunk Cloud and those wanting to become more experienced in managing Splunk Cloud instances. It provides the opportunity to gain the skills, knowledge and best practices for data management and system configuration for data collection and ingestion required in a Splunk Cloud environment.
Skill Level:
- Beginner > Intermediate
ITSI Administrator
This two-day track prepares IT practitioners to install, design, implement, monitor and maintain mission-critical services in IT Service Intelligence. It includes new content and content from Using ITSI and Implementing ITSI.
Skill Level:
- Beginner > Intermediate
ITSI Analyst
This two-day track is a chance to practice your analyst skills and build your ITSI muscles. Graduate from the basics of using ITSI to richer and more difficult scenarios. You'll learn how to make visualizations with more impact, learn how to be more proactive in service monitoring, and speed up your root cause analysis.
Skill Level:
- Intermediate > Advanced
Full Observability Pipeline with Splunk OpenTelemetry
This two-day practical training guides you from the basics of OTel and Splunk Observability Cloud to the deployment and configuration of the OTel Collector. You will learn advanced configuration with processors and exporters, collecting Kubernetes-specific telemetry, and enabling APM auto-instrumentation for real-time application insights. Visualize and alert on raw telemetry data in Splunk Observability Cloud.
Skill Level:
- Intermediate > Advanced
One-day courses
Short on time? These one-day courses accelerate learning like no other.
Enhancing SOC Operations with Attack Simulations
This one-day course empowers experienced SOC staff to perform threat investigation, detection, and incident response using open-source attack simulation tools integrated with Splunk, while deepening their understanding of SOC roles, tasks, and challenges. Note: This course requires prior training and/or experience with Splunk security products (ES, SOAR). Beginners should attend the SOC Analyst track.
Skill Level:
- Intermediate > Advanced
Splunk University
