topic Re: Logs for Fundamentals 1&2 Labs in Training + Certification Discussions

Logs for Fundamentals 1&2 Labs

mkhedr — Sat, 15 Jun 2019 10:42:54 GMT

Can i use the same logs i get for Fundamentals 1 with Fundamentals 2 labs ? if not where i can i get the same logs indexed for Fundamentals 2 course?
Note that this is only for my own practice

Re: Logs for Fundamentals 1&2 Labs

niketn — Sat, 15 Jun 2019 17:49:56 GMT

@mkhedr most of the data used in Splunk Fundamentals course is cooked up data of a hypothetical "Buttercup Games". Refer to documentation for the type of data and get sample data which is generated and uploadedweekely: https://docs.splunk.com/Documentation/Splunk/latest/SearchTutorial/Aboutthetutorialdata

If you want the data only for practicing, you can use Splunk's Internal index data as well: https://docs.splunk.com/Documentation/Splunk/latest/Troubleshooting/WhatSplunklogsaboutitself

You can also refer to one of my older answers on similar request: https://answers.splunk.com/answers/621429/where-to-download-data-for-use-to-practicelearn-sp.html

Re: Logs for Fundamentals 1&2 Labs

mkhedr — Sat, 15 Jun 2019 21:36:14 GMT

I really appreciate your help but to be more specific i need the same data used for Fundamentals 1 and Fundamentals 2 .
If you don't mind can you send me a direct link for the same data

Re: Logs for Fundamentals 1&2 Labs

niketn — Sun, 16 Jun 2019 02:47:33 GMT

Which query are you not able to run. If your intent is to practice your SPL skills you should be able to run them on any data. However, having said that Buttercup Games data is the one generated by Splunk which is used in most examples in Splunk Docs and Fundamentals course.

Sorry I do not have any links other than the one I shared.

If you need understanding of any specific command or topics please let us know.

Re: Logs for Fundamentals 1&2 Labs

mkhedr — Sun, 16 Jun 2019 07:14:56 GMT

i was looking for Security index used in Fundamentals 2 specifically

Re: Logs for Fundamentals 1&2 Labs

Assaf_Katz — Thu, 09 Nov 2023 07:16:23 GMT

Hey,

Looks like this discussion doesn't have the latest info. I tried following the steps, but there's nothing showing up for "sourcetype=linux_secure."

Thanks