Where to find best scenarios related to SIEM to get familiar with Splunk search commands?

[lal37]

Hi All,

Is there any way to get some scenarios so that i can try and get familiar with the search commands in Splunk. It will be good if any one can suggest me with the some sites where we could find the best scenarios related to SIEM in general.

Thanks
Shiva

[somesoni2]

How about Splunk's Search Tutorial? They have many good examples with sample data that you can practice upon.

http://docs.splunk.com/Documentation/Splunk/6.1.2/SearchTutorial/WelcometotheSearchTutorial

[strive]

Splunk has got very good documentation. For each search command they have given scenarios for understanding.

http://docs.splunk.com/Documentation/Splunk/6.1.2/SearchReference/Abstract
http://docs.splunk.com/Documentation/Splunk/6.1.2/AdvancedDev/Searchscripts
http://docs.splunk.com/images/a/a3/Splunk_4.x_cheatsheet.pdf

[strive]

Also answers.splunk.com has many questions and answers related to search commands.