topic Re: splunk entreprise in Training + Certification Discussions

splunk entreprise

rimsassi — Wed, 05 Mar 2025 00:43:15 GMT

I'm discovering Splunk enterprise to build an application to perform correlations and detect incidents that affect web applications and endpoints.

Can you please guide me on the steps I should take?

what are your recommendations?

Re: splunk entreprise

richgalloway — Thu, 18 Mar 2021 00:30:53 GMT

It sounds like you want us to tell you how to build every security dashboard that was ever created. Or perhaps you want the equivalent of Splunk Enterprise Security. Either way, the question is far too broad. If you have trouble with Splunk and have specific questions, then please post them.

In the meantime, here are some steps:
Take the free Splunk Fundamentals 1 class at splunk.com
Get your data into Splunk. See https://docs.splunk.com/Documentation/Splunk/8.1.2/Data/Getstartedwithgettingdatain
Search for the onboarded data. The free class above will tell you how.
When you have a search that does something useful or produces a helpful KPI, save it to a dashboard. Click the Save As link in the search window to do that.

Re: splunk entreprise

rimsassi — Thu, 18 Mar 2021 08:24:57 GMT

I'm new at Splunk, I'm trying to find my way around, but it's just too much documentation so I needed some guidelines to start. Thanks for your help.

Re: splunk entreprise

scelikok — Thu, 18 Mar 2021 08:40:22 GMT

Hi @rimsassi,

You can check below links;

• Splunk Cheat Sheet: https://www.splunk.com/pdfs/solution-guides/splunk-quick-reference-guide.pdf
• Community Forum: https://community.splunk.com/
• Free Splunk eBook: http://www.splunk.com/web_assets/v5/book/Exploring_Splunk.pdf
• Free Splunk Course: http://www.splunk.com/view/SP-CAAAHSM
• Splunk Education Videos: http://www.splunk.com/view/education-videos/SP-CAAAGB6
• Splunk Docs: http://docs.splunk.com/Documentation/Splunk
• Splunk Wiki: https://wiki.splunk.com/Main_Page
• Splunk Apps: https://splunkbase.splunk.com/
• Splunk YouTube Channel: https://www.youtube.com/channel/UCjwOFZzLPnji1EstaVyyvAw

Re: splunk entreprise

dauren_akilbeko — Thu, 18 Mar 2021 09:35:08 GMT

I would recommend first pass Splunk Fundamentals 1, which is free. Then check Splunk Lantern and Splunk Developer Program.

Re: splunk entreprise

rimsassi — Thu, 18 Mar 2021 12:33:21 GMT

Okay! Thank u

Re: splunk entreprise

rimsassi — Thu, 18 Mar 2021 12:35:57 GMT

I already passed Splunk Fundamentals 1. I'll check the others, thanks