As data volumes continue to grow and environments become more distributed, managing and optimizing data effectively has become one of the most important responsibilities for modern security and platform teams. Organizations are constantly balancing the need to retain valuable data for investigations and analytics while also controlling storage costs and improving search performance.
To help practitioners build a stronger foundation, we launched the Data Management & Federation Bootcamp Series: A hands-on learning series designed to guide you through managing data across its lifecycle, from ingestion and routing to storage and optimization.
Missed Session 1? where we covered key fundamentals like index organization, dynamic data types and object storage with Amazon S3. Watch It On Demand here
Session 2 on May 6: Event-Based Data Management and Processing
In Session 2, we shift focus to one of the most impactful areas of data management - optimizing your data before it even lands in Splunk indexes.
Event-based data management allows you to control what data gets ingested, how it is processed and where it is routed. This is critical for reducing unnecessary ingestion costs, improving data quality and ensuring that your data is usable and actionable.
In this session, we’ll cover:
- An overview of Edge Processor (EP), Ingest Processor (IP), and Ingest Actions (IA)
- How SPL2 can be used for data transformation
- Common data processing techniques including: Routing, Filtering, Masking and Transformation
- Best practices for routing data to Amazon S3 and promoting it when needed
- How to use templates to simplify and standardize data processing workflows
By the end of this session, you’ll understand how to build more efficient data pipelines and ensure that the right data lands in the right place at the right time.
Register for Session 2 here
What You’ll Gain from the Series
Across the bootcamp series, you’ll learn how to:
- Improve search performance
- Reduce data ingestion and storage costs
- Optimize data routing and transformation
- Leverage object storage for scalable data retention
- Implement modern data processing pipelines
Each session is designed to provide practical, actionable guidance that you can apply directly to your Splunk environment.
Don’t miss the opportunity to continue your learning and take the next step in optimizing your data strategy.
Register for Session 2 today
We look forward to seeing you there!
Want updates like this sent straight to you? Learn how to subscribe to this blog (and follow Labels you care about) in our quick guide.
