Workshop - Splunk Engineer
Buy now
Learn more
Discussions
Section 0 - Welcome & Orientation
About O-Line Security
Your Instructor
Section 1 - Foundations
Expectations & Objectives
Data Pipeline
Sourcetypes
Indexes
Data Design
Section 2 - Environment Setup
Why AWS EC2 Infrastructure?
Understanding AWS Costs for Splunk Labs: Instances, Storage, and Optimization
Creating an EC2 Instance for Splunk Deployment
Install Splunk Enterprise
Configure Splunk Enterprise
EC2 Instance Lifecycle and IP Changes: What to Know Before You Stop or Start
Final Environment Validation and Readiness Check
Section 3 - Core Architecture
Introduction to Splunk Apps
Splunk App Components
How Configuration Files Work Together in Splunk
Metadata
Designing an Efficient Data Pipeline in Splunk
Understanding and Configuring indexes.conf in Splunk
Configuring Data Inputs with inputs.conf in Splunk
Validating Splunk Configurations and Data Pipelines
Sample Logs
Firewall Logs
Proxy Logs
Section 4 - Core Skills
Using btool to Analyze and Troubleshoot Splunk Configurations
Understanding the Flow from Splunk UI to Backend Configuration
Transforming Raw Data into Searchable and Actionable Insights in Splunk
Onboarding and Ingesting New Log Sources in Splunk
Configuring Data Transformations Using transforms.conf in Splunk
Configuring Data Parsing and Field Extractions Using props.conf in Splunk
Validating props.conf and transforms.conf Configurations in Splunk
Network Logs
props.conf
transforms.conf
Section 5 - Implementation
Integrating Splunk Configuration Components for End-to-End Data Processing
Standardizing Data Onboarding Processes in Splunk
Designing Reusable Splunk Apps for Scalable Data Onboarding
Troubleshooting Data Onboarding and Configuration Issues in Splunk
Adopting an Engineering Mindset for Splunk Data Onboarding and Architecture
Section 6 - Data Observability
Designing and Building Dashboards for Visibility
Building Data Ingestion Monitoring Panels in Splunk Dashboards
Monitoring and Ensuring Data Quality in Splunk
Designing and Configuring Alerts in Splunk
Applying an Engineering Perspective to Dashboard Design in Splunk
Section 7 - Capstone Project
Capstone Overview
Capstone Project Breakdown and Implementation Strategy in Splunk
Defining the Approach and Methodology for the Capstone Project
Achieving Success in the Splunk Capstone Project
Capstone Project Review
Capstone Project Closure and Key Takeaways in Splunk
Capstone Project Logs
default.meta
indexes.conf
inputs.conf
transforms.conf
props.conf
Section 8 - Career Development Pack
Career Development
Resume Builder
Interview Q&A
LinkedIn
Section 9 - Next Steps
Positioning Yourself for Success as a Splunk Engineer
One Final Thought
Products
Course
Section
Section 4 - Core Skills
Section 4 - Core Skills
Workshop - Splunk Engineer
Buy now
Learn more
Discussions
Section 0 - Welcome & Orientation
About O-Line Security
Your Instructor
Section 1 - Foundations
Expectations & Objectives
Data Pipeline
Sourcetypes
Indexes
Data Design
Section 2 - Environment Setup
Why AWS EC2 Infrastructure?
Understanding AWS Costs for Splunk Labs: Instances, Storage, and Optimization
Creating an EC2 Instance for Splunk Deployment
Install Splunk Enterprise
Configure Splunk Enterprise
EC2 Instance Lifecycle and IP Changes: What to Know Before You Stop or Start
Final Environment Validation and Readiness Check
Section 3 - Core Architecture
Introduction to Splunk Apps
Splunk App Components
How Configuration Files Work Together in Splunk
Metadata
Designing an Efficient Data Pipeline in Splunk
Understanding and Configuring indexes.conf in Splunk
Configuring Data Inputs with inputs.conf in Splunk
Validating Splunk Configurations and Data Pipelines
Sample Logs
Firewall Logs
Proxy Logs
Section 4 - Core Skills
Using btool to Analyze and Troubleshoot Splunk Configurations
Understanding the Flow from Splunk UI to Backend Configuration
Transforming Raw Data into Searchable and Actionable Insights in Splunk
Onboarding and Ingesting New Log Sources in Splunk
Configuring Data Transformations Using transforms.conf in Splunk
Configuring Data Parsing and Field Extractions Using props.conf in Splunk
Validating props.conf and transforms.conf Configurations in Splunk
Network Logs
props.conf
transforms.conf
Section 5 - Implementation
Integrating Splunk Configuration Components for End-to-End Data Processing
Standardizing Data Onboarding Processes in Splunk
Designing Reusable Splunk Apps for Scalable Data Onboarding
Troubleshooting Data Onboarding and Configuration Issues in Splunk
Adopting an Engineering Mindset for Splunk Data Onboarding and Architecture
Section 6 - Data Observability
Designing and Building Dashboards for Visibility
Building Data Ingestion Monitoring Panels in Splunk Dashboards
Monitoring and Ensuring Data Quality in Splunk
Designing and Configuring Alerts in Splunk
Applying an Engineering Perspective to Dashboard Design in Splunk
Section 7 - Capstone Project
Capstone Overview
Capstone Project Breakdown and Implementation Strategy in Splunk
Defining the Approach and Methodology for the Capstone Project
Achieving Success in the Splunk Capstone Project
Capstone Project Review
Capstone Project Closure and Key Takeaways in Splunk
Capstone Project Logs
default.meta
indexes.conf
inputs.conf
transforms.conf
props.conf
Section 8 - Career Development Pack
Career Development
Resume Builder
Interview Q&A
LinkedIn
Section 9 - Next Steps
Positioning Yourself for Success as a Splunk Engineer
One Final Thought
10 Lessons
Using btool to Analyze and Troubleshoot Splunk Configurations
Understanding the Flow from Splunk UI to Backend Configuration
Transforming Raw Data into Searchable and Actionable Insights in Splunk
Onboarding and Ingesting New Log Sources in Splunk
Configuring Data Transformations Using transforms.conf in Splunk
Configuring Data Parsing and Field Extractions Using props.conf in Splunk
Validating props.conf and transforms.conf Configurations in Splunk
Network Logs
props.conf
transforms.conf