fr
en
Splunk® Core User: mastering data analysis and operational intelligence
Machine data can illuminate operations when you know how to query it. Use Splunk to structure searches and outputs that make events understandable. Develop analytical practices that support investigations and activity monitoring.
- Duration
- 3 days 21 hours
- Code
- ASR003FR Code
- Certification
- Splunk® Core Certified User Certification
Accredited training for the Splunk® Core Certified User certification.
Presentation
In today's business environment, operational data is a strategic asset for IT infrastructure performance. As log volumes grow exponentially, you need tools that transform raw streams into actionable, real-time decision-making information.
Throughout this course, you will explore the Splunk ecosystem and master its search, indexing and visualisation features. You will use Search Processing Language (SPL) to extract precise insights and design automated, interactive dashboards.
By the end of the course, your new expertise will enable you to transform raw data streams into clear, immediately usable operational indicators. These Splunk lessons also prepare you for the Splunk Core Certified User certification exam, formally validating your command of platform fundamentals.
Objectives
By the end of this essential Splunk course, you will be able to:
- collect, analyse and report on operational data with Splunk;
- enrich data using advanced searches and workflows;
- create intelligent alerts and interactive dashboards;
- use the application programming interface (API) and integrate JavaScript charts;
- optimise search performance and data model structure;
- prepare for and pass the Splunk Core Certified User certification exam.
Program
Module 1: configuring the Splunk environment
- Installing the solution on Windows and obtaining a user account.
- Indexing files and directories through the web interface, CLI or configuration files.
- Defining field extractions, event types and associated tags.
Hands-on exercises
- Implement a complete configuration and define extraction settings for real data sources.
Module 2: exploring and analysing data
- Using SPL queries with Boolean operators and search commands.
- Manipulating time ranges to refine analysis results.
- Extracting log statistics: visited pages, browsers used and frequently visited sites.
Hands-on exercises
- Run complex searches to identify user behaviour and server errors.
Module 3: designing operational dashboards
- Creating varied charts to reveal operational intelligence.
- Enriching views with linked searches and interactive components.
- Scheduling PDF reports for regular distribution.
Hands-on exercises
- Build a complete dashboard incorporating dynamic, interactive visualisations.
Module 4: deploying and enriching applications
- Installing third-party applications or applications from the Splunk library.
- Integrating searches and visualisations of specific events, such as those from network switches.
Hands-on exercises
- Create a custom application and visualise flows from Cisco network equipment.
Module 5: modelling and optimising searches
- Implementing data models to structure information.
- Using regular expressions and the pivot command for cross-analysis.
- Applying best practices to optimise processing performance.
Hands-on exercises
- Use models and the pivot command to generate high-performance analytical views.
Module 6: automating monitoring through alerts
- Defining monitoring conditions and trigger thresholds.
- Configuring automated actions after a confirmed alert is detected.
Hands-on exercises
- Trigger a specific script when a 503 error occurs and record details in a file.
Audience
This course is designed for IT infrastructure professionals, including:
- system administrators who need to monitor and diagnose server performance;
- systems engineers designing monitoring and operational intelligence solutions;
- data analysts seeking to automate technical reporting through a centralised platform.
Prerequisites
The following prerequisites apply:
- Professional experience: regular system administration practice (Windows or Linux) is essential to understand indexing and data management concepts.
- Technical skills: basic networking knowledge and a good understanding of log file structures are required.
- Language skills: good English reading comprehension is required, as the official certification exam is conducted exclusively in English.
Teaching and assessment methods
- Initial skills assessment
- Training materials provided to participants
- Continuous assessment throughout the course
- End-of-course feedback questionnaire
- Combination of theory and practical application
- Attendance records
- Post-course follow-up evaluation
- Practical exercises
Course highlights
- Recognised certification: acquire the skills needed to earn the official Splunk Core Certified User credential, demonstrating fundamental expertise in the data market.
- Practical business focus: work on real log analysis and network diagnostics cases for immediate application to your own operational flows.
- Technological independence: learn to configure and optimise your own Splunk environment from start to finish, from initial indexing to advanced visualisation.
- Operational deliverables: leave with dashboard templates and custom alert scripts directly transferable to your professional environment.
Dates and sessions
Choose the date and delivery format that suit you.
No upcoming sessions are currently available.
Splunk is a registered trademark of Cisco Systems, Inc. or its affiliates in the United States and other countries.
Mention for educational purposes does not constitute an endorsement or partnership.