Splunk Authorized Training

Splunk Power User Fast Start Training

This Power User "Fast Start" course covers over 60 commands, functions, and knowledge objects to provide users with actionable information about searching best practices and knowledge management. Students will learn how to effectively utilize time in searches, work with different time zones, use transforming commands and eval functions to calculate statistics, compare field values with eval functions and eval expressions, manipulate output, normalize fields and field values, correlate and filter data from multiple sources, and create, manage, and share knowledge objects.

LevelAdvanced
Duration4 Days
ExperienceBasic Splunk Searching and Visualizations
Average SalaryVaries
LabsNo

Project Academy Project Management Certificate

Course Objectives

Participants will:

  • Utilize over 60 commands and functions to transform, manipulate, normalize, correlate, and filter data.
  • Filter data using time modifiers and time commands, and use formatting functions to accommodate various time formats.
  • Calculate statistics using transforming commands and mathematical and statistical eval functions.

Compare, manipulate, and normalize data using several commands, including the all-powerful eval command and an array of statistical, comparison, conditional, and formatting functions.

  • Calculate co-occurrence between fields and analyze data from multiple datasets.
  • Create, curate, manage, and share knowledge objects.
Course Outline
  • Module 1: Working with Time
    • Formatting Time
    • Comparing Index Time versus Search Time
    • Using Time Commands
    • Working with Time Zones
  • Module 2: Statistical Processing
    • What is a Data Series?
    • Transforming Data
    • Manipulating Data with eval
    • Formatting Data
  • Module 3: Comparing Values
    • Using eval to Compare
    • Filtering with where
  • Module 4: Result Modification
    • Manipulating Output
    • Modifying Results Sets
    • Managing Missing Data
    • Modifying Field Values
    • Normalizing with eval
  • Module 5: Correlation Analysis
    • Calculate Co-Occurrence Between Fields
    • Analyze Multiple Datasets
  • Module 6: Intro to Knowledge Objects
    • What are Knowledge Objects?
    • Knowledge Object Settings
    • Managing Knowledge Objects
  • Module 7: Creating Knowledge Objects
    • Knowledge Objects and Search-time Operations
    • Creating Event Types
    • Using Event Type Builder
    • Creating Workflow Actions
    • Creating Tags and Aliases
    • Creating Search Macros
  • Module 8: Creating Field Extractions
    • Using the Field Extractor
    • Creating Regex Field Extractions
    • Creating Delimited Field Extractions
  • Module 9: Data Models
    • Introducing Data Model Datasets
    • Designing Data Models
    • Creating a Pivot
    • Accelerating Data Models
Prerequisites
  • How Splunk works
  • How to create basic searching and visualizations
Intended Audience
  • IT professionals responsible for managing or analyzing machine-generated data
  • System administrators seeking to monitor and troubleshoot infrastructure
  • Security analysts who need to search, correlate, and visualize event data
  • Data analysts who want to build dashboards and reports in Splunk
  • Anyone preparing for Splunk Power User or Admin certifications
  • Users new to Splunk who want a structured introduction to searching and visualization

Related training topics

Get approved to attend

Justify your training

Use this sample request letter — copy it into an email to your manager and personalize the bracketed details to make the case for the time and budget.

Sample training request letter

Subject: Request for Defensive Cyber & Blue Teaming training from Applied Technology Academy

[Decision Maker Name],

I'm writing to request time and budget approval to complete Applied Technology Academy's course, Splunk Power User Fast Start Training. The information below outlines how this training benefits our organization, the tasks I'll be able to perform after completing it, and relevant cost and funding details.

Course Description
This Power User "Fast Start" course covers over 60 commands, functions, and knowledge objects to provide users with actionable information about searching best practices and knowledge management. Students will learn how to effectively utilize time in searches, work with different time zones, use transforming commands and eval functions to calculate statistics, compare field values with eval functions and eval expressions, manipulate output, normalize fields and field values, correlate and filter data from multiple sources, and create, manage, and share knowledge objects. Applied Technology Academy is an award-winning, SBA-certified woman-owned training provider (est. 2008) whose instructors are active practitioners; the course is hands-on with virtual labs and a learn-by-doing methodology.

Course Objectives
Once I've completed the course, I'll be able to:

  • Participants will:
  • Utilize over 60 commands and functions to transform, manipulate, normalize, correlate, and filter data.
  • Filter data using time modifiers and time commands, and use formatting functions to accommodate various time formats.
  • Calculate statistics using transforming commands and mathematical and statistical eval functions.
  • Compare, manipulate, and normalize data using several commands, including the all-powerful eval command and an array of statistical, comparison, conditional, and formatting functions.
  • Calculate co-occurrence between fields and analyze data from multiple datasets.
  • Create, curate, manage, and share knowledge objects.

Expected Organizational Benefits
After completing this course, I will be better equipped to apply these skills directly to our projects, reduce our reliance on outside expertise, strengthen our team's capabilities, and share what I learn with colleagues.

Expected Cost & Funding
Course fee: [request an itemized quote at the link below]. Applied Technology Academy supports multiple funding paths that may reduce or cover this cost: GSA MAS purchasing and government purchase orders, military credentialing funding (Army CA, AF COOL, CG COOL), VA GI Bill and VR&E, ATA Flexible Spending, and student financing. Private team cohorts are available if colleagues should attend with me.

Conclusion
This training provides practical, hands-on experience I can apply immediately to strengthen our work in defensive cyber & blue teaming. Additional course information is available at https://appliedtechnologyacademy.com/splunk-training/splunk-power-user-fast-start-training/.

Thank you for your consideration,
[Your Name]

Design training around your team, not the other way around.

Talk to a training advisor about private cohorts, funding paths and program management.

Request a Quote Call 800.674.3550