Where can I find test data to index so I can redo the lab portion of Splunk Fundamentals 2?

[fzuazo]

Greetings all,

I recently took Splunk Fundamentals 2 and am curious to see if any data exists that I can index which will allow me to work through the labs again at my leisure. Similar to the data that was provided in Fundamentals 1 which allowed me to work through the labs over and over to reinforce the concepts.

It's sad that I was only able to go through the labs once during the course and then now have the opportunity to do so ever again.

I'm not looking for the exact data set from the course, just something small sample that will have the same indexes, sourcetypes, hosts, fields, etc.

Thanks !

[mstjohn_splunk]

hi @fzuazo

Did the answer below solve your problem? If so, please resolve this post by approving it!
If your problem is still not solved, keep us updated so that someone else can help ya. Thanks for posting!

[493669 · Accepted solution]

You can get some tutorial data files here-
http://docs.splunk.com/Documentation/Splunk/latest/SearchTutorial/Systemrequirements#Download_the_tu...
also you can work on internal index like index=_internal