.conf19 | October 19-21, 2019 | The Venetian Sands Expo | Las Vegas, NV
Wondering what sessions will be right for you?
Here’s a look at how we rate our session content
Focused on foundational principles and concepts, the beginner track is your first stop to Splunk stardom. Sessions cover instructive demos, management tools, process discussions and more. If you’re new to Splunk or a Splunk enthusiast looking to refresh your skills, get started here.
Typical attendees are new to Splunk or have up to three years of experience. Beginner sessions focus on topics like:
Introduction to Splunk's interface
- Basic search
- Using fields in searches
- Search fundamentals
- Transforming commands
- Creating reports and dashboards
- Creating and using lookups
- Scheduled reports
- Using Pivot
If you’ve worked with Splunk before and are comfortable searching, investigating and creating reports, then intermediate level sessions are probably right for you.
Intermediate topics build on definitional terms and concepts with instructive demos, management tools, deep process discussions and similar content.
Typical attendees will have 3-5 years of experience. Intermediate sessions focus on topics like:
- Transforming commands and visualization
- Filtering and formatting results
- Correlating events
- Knowledge objects
- Fields (field aliases, field extractions, calculated fields)
- Tags and event types
- Workflow actions
- Data models
- Splunk Common Information Model (CIM)
Not for the faint of heart, advanced sessions are designed for Splunk experts. These sessions get straight to the internals of Splunk and little time is spent on defining terms and concepts. Advanced sessions contain demonstrations, line code, architecture discussions, tools that can be shared and more. Parental guidance advised.
Typical attendees will have deep subject knowledge and 10 or more years of experience. Advanced sessions focus on topics like:
- Using subsearches
- Using advanced statistics
- Manipulating and filtering data
- Additional charting techniques
- Using advanced transactions
- Working with time
- Using advanced lookups
- Searching tsidx files
- Using tokens
- Improving performance
- Customizing views
- Using event handlers
- Adding simple XML extensions