Splunk Training

This section tells you what Splunk is and how it can help you followed by a brief discussion on how to download Splunk and get started.

Introduction to Splunk and the Search app
Run basic searches
Identify the contents of search results
Control a search job
Set the time range of a search
Use the output of a search to refine your search

Discusses the search user interface and searching with Splunk.

Export search results
Save and share search results
Save searches
Schedule searches

Discuss and understand fields in searches and sidebars.

Understand fields
Use fields in searches
Use the fields sidebar

Tags are aliases to field values. Event types are dynamic tags attached to an event. This section of Splunk training explores more on them.

Understand tags
Create tags and use tags in a search
Describe event types and their uses
Create and use event types in a search

An alert is a search that runs periodically with a condition evaluated on the search results. Learn more in this module.

Describe alerts
Create an alert
View fired alerts

Search results with formatting information (e.g., as a table or chart) are informally referred to as reports, and multiple reports can be placed on a common page, called a dashboard. This section works over reports and dashboards.

Create reports and charts
Create dashboards and add reports

Now that you’ve gained an understanding of the way Splunk indexes data, it will be easier to understand what is happening when you search with Splunk.

Review basic search commands and general search practices
Examine the anatomy of a search
Use the following commands to perform searches:
Fields
Table
Rename
Rex & Erex
Multikv

Understanding the use of following commands and their functions

Top
Rare
Stats
Addcoltotals
Addtotals

Working over more commands and exploring visualizations, multiple series and reporting command.

Explore the available visualizations
Create a basic chart
Split values into multiple series
Omit null and other values from charts
Create a time chart
Chart multiple values on the same timeline
Format charts
Explain when to use each type of reporting command

Learn how to perform calculations and much more to analyse big data during this section of training.

Using the eval command:
Perform calculations
Convert values
Round values
Format values
Use conditional statements
Further filter calculated results

Discussing identifying transactions, group events and much more.

Identify transactions
Group events using fields and time
Search for transactions
Report on transactions
Determine when to use transactions vs. stats

The lookup command manually invokes field lookups from a lookup table, enabling you to add field values from an external source.

Describe lookups
Examine a lookup file example
Create a lookup table
Define a lookup
Configure an automatic lookup
Use the lookup in searches and reports

Mindmajix offers advanced Splunk interview questions and answers along with Splunk resume samples. Take a free sample practice test before appearing in the certification to improve your chances of scoring high.