A Hands-On Guide to Splunk Enterprise Security

What you'll learn

You will get an introduction to Splunk's user interface and will be conversant with the UI post this session.
We cover Navigating splunk web: splunk home, splunk bar, splunk web and getting date into splunk
You will learn how to specify data inputs, where splunk stores data and getting tutorial data into splunk
You will start using splunk search, search actions and modes, search results tools, events, what are fields, extracted fields, find and select fields,run more targeted searches, use the search language and learn with search assistant.
Start using Splunk's basic transforming commands and create reports, dashboards and alerts.
You will start using Splunk Enterprise Security
You can setup Splunk on your system, save and share reports and start creating alerts
You will understand what vulnerabilities are and will learn how to mitigate them

Requirements

You should have basic knowledge on SIEM tools

Description

You will understand Splunk's user interface -UI. You will be able to navigate UI features on your own: Navigating Splunk web: Splunk home, Splunk bar, Splunk web, getting date into Splunk, how to specify data inputs, where Splunk stores data, getting tutorial data into Splunk, using Splunk search, search actions, and modes, search results tools, events, what are fields, extracted fields, find and select fields, run more targeted searches, use the search language, learn with search assistant.

You can start using the Splunk's basic transforming commands, can create reports and dashboards, you will know how to save and share reports and also can create alerts after completing these sections.

Hands-on practical videos on Enterprise Splunk Security: ES1, ES2, ES3 & ES4 will help you master Splunk!

Who this course is for:

Beginners and Intermediate students interested in learning SIEM hands-on tools