Skip to main content

Sessions

Las Vegas | June 13-16
Virtual | June 14-15

Rev your Splunk knowledge

Whether a novice or expert Splunk user, there’s something for everyone at .conf22 — find what works best for you.

Session Catalog

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat.

 
 

Breakout Session Tracks

.conf sessions are sorted into five tracks so you can easily explore Splunk products and solutions across multiple use cases. Check back soon for the release of our Session Catalog.

community icon

Splunk Community

Who says it better than members of our Splunk Community? This track features the best guidance from our community leaders and programs, alongside lessons that shine a light on how Splunk users like you make a broader impact on communities around the world.

Developer icon

Splunk Developer

Are you already extending Splunk with add-ons, apps, custom commands or other extensions? If not, do you want to? Then you're a Splunk Developer and this track is for you. Learn how to build these and more — beginners and experts welcome.

Observability icon

Splunk Observability

Looking to tackle your cloud migration, app modernization and ITOps challenges? This is your track, whether you’re monitoring on-premises or in the cloud.

Platform icon

Splunk Platform

Learn from customers, Splunkers and partners who are using their ingenuity to tackle their biggest data challenges with the Splunk Cloud Platform and Splunk Enterprise. Explore new use cases and best practices with Splunk's latest innovations and take your Splunk knowledge to the next level.

Security icon

Splunk Security

Splunk is security. Join Splunk experts, your peers and our partners to learn how they’re addressing real-world security challenges. Get hands-on with Splunk security products and learn best practices to strengthen your security posture and enhance your skills.

Splunk University

Splunk University is a pre-conference educational training program. Gain new insights and experience the full range of product features in a live, hands-on setting. Additional fees apply.

Please note: Attendees must be registered for .conf22 in Las Vegas to attend Splunk University.

Three-day bootcamps

Courses begin Saturday, June 11 and continue through Monday, June 13.

Power User Bootcamp

This three-day bootcamp takes you from A to Z for a Splunk power user. Start with basic searching and using fields, continue on to statistical, charting and manipulating commands with Splunk’s Search Language to create meaningful reports and dashboards. You’ll also create and manage Splunk knowledge objects such as fields, alerts, data models, lookups and macros.

Skill Level:

  • Beginner
  • Course will advance attendee to an Intermediate Skill Level

Administrator Bootcamp

This three-day bootcamp prepares administrators to configure and manage Splunk. Topics include installation, configuring data inputs and forwarders, data management, user accounts, licenses, and troubleshooting and monitoring. The focus of this class is the knowledge, best practices and configuration details for Splunk Administrators in a distributed deployment environment.

Skill Level:

  • Beginner
  • Course will advance attendee to an Intermediate Skill Level

Bootcamp for Observability

This three-day bootcamp prepares DevOps and SRE teams to use Splunk Observability Cloud to monitor and troubleshoot their infrastructure and application environments. It covers Splunk® Infrastructure Monitoring concepts and the basic concepts of Splunk® Application Performance Monitoring, Splunk® Real User Monitoring and Splunk® Log Observer – you will use these to troubleshoot issues, analyze, visualize and alert on data.

Skill Level:

  • Beginner
  • Course will advance attendee to an Intermediate Skill Level

Advanced Administrator Bootcamp

This three-day bootcamp combines content from the Troubleshooting Splunk® Enterprise and Splunk Cluster Administration courses. Designed for experienced Splunk administrators, it covers topics and techniques for troubleshooting a distributed deployment using the tools available on Splunk® Enterprise, Splunk’s internal logging system, and takes a deeper dive into Splunk’s pipelines and processors. It also provides training on deploying and managing Splunk Search Head Clusters and Indexer Clusters.

Skill Level:

  • Intermediate
  • Course will advance attendee to an Advanced Skill Level

App Developer Bootcamp

This three-day bootcamp combines content from Advanced Dashboards and Visualizations, Building Splunk Apps and Developing with Splunk’s REST API. You will learn to create compelling and interactive dashboards, forms and visualizations, as well as use third-party visualization libraries. You will also learn about Splunk’s App directory structure and Web Framework. You’ll learn to interact directly with the Splunk REST API, and also learn best practices for development.

Skill Level:

  • Intermediate
  • Course will advance attendee to an Advanced Skill Level

Two-day bootcamps

Courses begin Sunday, June 12 and continue through Monday, June 13.

ITSI Bootcamp

This two-day bootcamp combines content from Using ITSI and Implementing ITSI. It prepares you to install and configure Splunk's App for IT Service Intelligence (ITSI). You will learn to use ITSI to monitor mission-critical services. You’ll also learn about ITSI architecture, deployment planning, installation, service design and implementation, configuring entities, notable events, developing glass tables and deep dives.

Skill Level:

  • Beginner
  • Course will advance attendee to an Intermediate Skill Level

Splunk Enterprise Security for Security Analysts Bootcamp

This two-day bootcamp includes content from Using Splunk Enterprise Security. It prepares security practitioners to use Splunk® Enterprise Security (ES). You will use ES to identify and track security incidents, analyze security risks, use predictive analytics, threat discovery and create glass tables.

Skill Level:

  • Beginner
  • Course will advance attendee to an Intermediate Skill Level

Splunk Cloud Administration Bootcamp

The Splunk Cloud Administration course prepares new administrators to manage users and get data in Splunk® Cloud Platform. Topics include data inputs and forwarder configuration, data management, user accounts, basic monitoring and problem isolation. The focus in this class is the knowledge, best practices and configuration details for Splunk® Cloud Platform.

NOTE: This bootcamp is for Splunk Cloud Administrators who are new to Splunk. If you have experience as a Splunk Administrator on-premises, or have taken the Splunk System and/or Splunk Data Administration courses, the Transitioning to Splunk Cloud two-day bootcamp is designed for you.

Skill Level:

  • Beginner
  • Course will advance attendee to an Intermediate Skill Level

Analytics and Data Science Bootcamp

This two-day bootcamp is for Splunk users who want to perform more scientific analysis on their data. It covers exploratory data analysis, machine learning, using algorithms to build models, transactional analysis, anomaly detection, estimation and prediction, classification and more.

Skill Level:

  • Intermediate
  • Course will advance attendee to an Advanced Skill Level

Splunk Enterprise Security for Splunk Administrators Bootcamp

This two-day bootcamp prepares architects and systems administrators to install, configure and manage Splunk Enterprise Security. It covers ES event processing and normalization, deployment requirements, technology add-ons, settings, risk analysis settings, threat intelligence and protocol intelligence configuration, and customizations.

Skill Level:

  • Intermediate
  • Course will advance attendee to an Advanced Skill Level

Single-day classes

Dashboard Studio - offered Saturday, Sunday and Monday

This course is designed for power users who want to learn best practices for building dashboards and forms in the Dashboard Studio. It focuses on dashboard creation, including the dashboard definition, adding visualizations, data sources and creating choropleth visualizations.

Skill Level:

  • Beginner
  • Course will advance attendee to an Intermediate Skill Level

Transition to Cloud - offered Saturday only

This bootcamp highlights key differences between Splunk Enterprise deployed on-premises and Splunk Enterprise Cloud to allow Splunk Administrators to transition to Splunk Cloud. The course provides the skills and knowledge for Splunk Cloud administrators to collect and ingest data as well as manage their cloud environment and maintain a productive Splunk SaaS deployment.

NOTE: This bootcamp is designed for experienced Splunk Administrators who have worked with Splunk Enterprise on-premises and are newly responsible for Splunk Cloud Administration. If you are new to Splunk, the Splunk Cloud Administration bootcamp is designed for you.

Skill Level:

  • Beginner
  • Course will advance attendee to an Intermediate Skill Level

Don’t miss your chance to sign up for .conf22!