February 2026 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this month’s edition of indexEducation, the newsletter that takes an untraditional twist on what’s new with Splunk Education. We hope the updates about our courses, certification program, and self-paced training will feed your obsession to learn, grow, and advance your careers. Let’s get started with an index for maximum performance readability:  Training You Gotta Take | Things You Needa Know | Places You’ll Wanna Go      Training You Gotta Take    New Releases | Add these to your “Brainy Early Friday Morning” playlist  If your 2025 Spotify Wrapped leaned more guilty pleasure than graduate program, allow us to recalibrate your aura. Each month, Splunk Education releases new and updated courses built for the realities of modern security operations including automation, analytics, visualization, and beyond. Consider these new courses – some that are free, some including labs, and many delivered by experts – part of your intellectual soundtrack for 2026. Curate a new vibe and then hit fast forward on your professional development.  Gotta take the latest courses | You’ll look good and get noticed (in tech)    Splunk Lantern | Practical guidance is center stage  While the Super Bowl halftime show gave Bad Bunny a much-talked-about spotlight, another kind of light is shining on how you can learn Splunk. Check your feed because Splunk Lantern has entered the chat. This month’s Lantern guidance features the premiere of Splunk Enterprise Security 8.3 – complete with new Premier and Essentials tiers that reshape how your SOC runs the show. Not to be overshadowed, but there’s also a new Solution Accelerator to help financial services teams tackle data compliance.   Gotta learn with Lantern | Highlights in the spotlight      Things You Needa Know    Keeping it Simple | A new recipe for recertification  You know that feeling when you’ve got only 5 of the 14 ingredients to make Mongolian Beef and yet those 5 simple ingredients somehow make it taste better? That’s what’s happening with Splunk Certification recertification. We’re simplifying the process so it’s clearer, cleaner, and easier to follow – with the coursework renewal option being retired. To maintain your certification, you’ll either retake the same exam within the final year of your recertification window or earn a higher-level certification in the same track. Think: Splunk Core Certified Power User to Splunk Enterprise Certified Admin.   Needa know about recertification | It’s simple and sufficient      Main Character Moments | Don’t be an NPC in your career  We live in a world obsessed with origin stories, plot twists, and “how it started vs. how it’s going.” And we’re here for it! Welcome to Main Character Moments – a new Splunk Education series where Splunk users play the protagonists in their own life story. Episode 1 features Kwentin Shelton, a cybersecurity analyst navigating a big life and an exciting journey through tech. He shares how curiosity opened the first door, how continuous learning is growth serum, and why asking for help when you’re neurodivergent isn’t a weakness but a superpower.   Needa know Kwentin | Let his story fuel you      Places You’ll Wanna Go    Splunk University at GovSummit | We’re in session  While news headlines have been about shutdowns and budget battles, the nation’s Capital will still be buzzing when Splunk GovSummit lands in Washington, DC on April 8, 2026. Expect deep dives into AI, Zero Trust, cloud, compliance, fraud prevention, and edge security, plus keynotes, breakouts, peer conversations that lead to action. And, attendees can further their education with hands-on experience at Splunk University the day before -- on April 7.    Gotta go where learning is never shut down | Registration today!    Splunk Classroom Chronicles | This is no sitcom, but it’s fun  When you think back to a typical classroom, you might picture an OG chalkboard, late homework, detention, and maybe watching Saved By the Bell on Saturday morning. But Episode 4 of Splunk Classroom Chronicles proves this isn’t Bayside High, it’s real-world tech enablement. In this episode, we head to Egypt for a Partner Strength & Depth Accelerator where Gary and Adham delivered the training with combined skill and curiosity – creating the vibe that generated a buzz.   Gotta go to class | Read about the grown-up experience      Find Your Way | Learning Bits and Breadcrumbs    Go Chat | Join our Community User Group Slack Channel  Go Stream It | The Latest Course Releases (Some with Non-English Captions!)  Go to STEP | Get Upskilled  Go Discuss Stuff | Join the Community  Go Social | LinkedIn for News  Go Index It | Subscribe to our Newsletter     Thanks for sharing a few minutes of your day with us – whether you’re looking to grow your mind, career, or spirit, you can bet your sweet SaaS, we got you. If you think of anything else we may have missed, please reach out to us at indexEducation@splunk.com.     Answer to Index This: Silence  ... View more

March 1 marked the start of a simpler approach to maintaining your Splunk Certifications.  As we’ve been sharing over the last few months, we’ve updated our Recertification Policy to make it clearer and more consistent across tracks. Moving forward, recertification through coursework completion has been retired. Instead, there are now two straightforward ways to keep your certification current:  Retake your certification exam within the final year of your recertification window, or  Earn a higher-level certification in the same track.  If your recertification window is approaching, now’s a great time to plan your next move—whether that’s leveling up or locking in your current credential. Check out the FAQs.  For complete details, including timelines and requirements, review the full Splunk Recertification Policy. If you have additional questions, please reach out to the Splunk Certification team at splunk_certification@cisco.com.  ... View more

If you’re low-key depressed that the 2026 Winter Olympics are over, we get it. But here in Splunk Education, we’re still committed to our training plans and want to share those with you. Maybe having the February New Course Releases to review will give you something else to occupy your downtime.   Instructor-led Training  Our instructors continue to stand tall at the virtual ‘podium,’ so if you are energized by learning from the experts then these courses are for you.   Full Observability Pipeline with Splunk OpenTelemetry: This course will help you to build, configure, and troubleshoot a full observability pipeline using the Splunk Distribution of the OpenTelemetry Collector. Enroll today.   Splunk Search Expert Fast Start: This updated course helps you refine advanced search techniques and accelerate your expertise. This course is delivered by our Authorized Learning Partners. Enroll today.   Splunk Power User Fast Start: Our refreshed Splunk Power User Fast Start ensures power users can confidently create reports, dashboards, and visualizations that drive real decisions. This course is delivered by our Authorized Learning Partners. Enroll today.   eLearning with Labs  If you’re a self-motivated human with a passion for hands-on learning, we have a new eLearning with Labs course to help you compete at the service level.  Using Splunk IT Service Intelligence 4.2: In this 6-hour course, you'll learn how to use Splunk IT Service Intelligence features, such as Service Analyzer, Notable Events Review, Glass Tables, Deep Dives, KPI Alerts and more.  Building Excellence Everyday  The Olympic spotlight may shift every few years, but excellence is built daily. At Splunk Education, we believe this is also true for us mere mortals who are just looking to excel in our careers. Explore February’s releases, enroll in your next challenge, and bask in the glory of a win.   Happy Learning to all of our champions!  ... View more

On April 8, 2026, Splunk GovSummit returns to the Marriott Marquis in Washington, D.C., bringing together public sector technology leaders who are navigating one of the most complex threat landscapes in history. And, if you’re obsessed with building a more modern Security Operations Center (SOC), then the real action begins on April 7 with Splunk University.    Registration is open for Splunk GovSummit on April 8  From safeguarding national security and protecting critical systems to safely adopting AI and meeting strict compliance baselines, agencies today are balancing innovation with responsibility in real time. GovSummit is where those conversations get real — with deep   dives into reducing fraud, closing cybersecurity workforce gaps, managing federated data at scale, and building a SOC that’s ready for whatever comes next.   Register here for Splunk GovSummit  Step Into the SOC at Splunk University on April 7  The day before Splunk GovSummit officially kicks off, the real action begins. April 7 is your opportunity to move from theory to practice – working inside a modern SOC.  Enhancing SOC Operations with Attack Simulations is an instructor-led course where you’ll take on the role of a SOC analyst, detection engineer, or automation engineer and work through realistic attack scenarios. Leveraging Splunk SOAR or Adaptive Response in Enterprise Security, you’ll test detections, refine remediation strategies, and collaborate across SOC roles to strengthen investigative and incident response skills. It’s immersive, hands-on, and designed for beginner to intermediate practitioners ready to elevate their game.  Watch Alex, from Splunk Education, describe what you'll learn in class from our YouTube Shorts channel.     Splunk University registration details  This full-day course (9:00 a.m. – 5:00 p.m.) is priced at $500 or 50 Training Units and requires GovSummit registration to participate. Payment can be made via credit card or Training Units, with TU submissions reviewed by the Splunk Education team prior to confirmation. Previous experience with Splunk Enterprise Security or Splunk SOAR is recommended to maximize the experience.  Learn more about registration    If Splunk GovSummit is about enterprise strategy, Splunk University is about security execution. Don’t just attend GovSummit — come with valuable knowledge!       ... View more

Welcome to Main Character Moments — where we hand the mic to our Splunk community members so they can tell their story. They take the stage to give us a glimpse into their path, perspective, and problem-solving so we all can learn from each other.  I’m your host, Callie Skokos, and for Episode 1, I couldn’t be more excited to kick things off with Kwentin Shelton, a Cybersecurity Analyst whose path into security is rooted in curiosity, persistence, and community-powered learning.  Callie Skokos: Hi Kwentin, welcome to Main Character Moments! Where are you joining us from right now?  Kwentin Shelton: Hi Callie! Thanks for having me. I live in the Atlanta area, and I currently work with an MSSP based in Alpharetta, GA where I’m a Cybersecurity Analyst.  Callie: We love to get to know our community. Outside of work, what do you enjoy doing?  Kwentin: I love to travel — both solo and with groups. I’ve been to places like California, New York City, Boston, Florida, the Carolinas, and internationally to Costa Rica and Portugal. I’m also really into rock climbing, hiking, zip lining, and playing open-world games in my spare time.   Callie: How did you first get introduced to Splunk?  Kwentin: I was introduced to Splunk while working in IT at Kennesaw State University. KSU had a partnership with the Splunk Academic Alliance, which gave me access to training and certifications. Because of that program, I was able to train on Splunk and take my certification exam for free.  Callie: How has Splunk influenced your career growth?  Kwentin: I started using Splunk in 2022 and by 2024, I realized how highly respected Splunk is in the cybersecurity job market. Learning Splunk made it easier to pick up other data tools, like KQL for Microsoft Sentinel. I earned my Splunk Core Certified User Certification and honestly, having Splunk listed on my resume — with real hands-on experience — was enough to help me land my current role at an MSSP.  Callie: What was one of the most exciting things you learned about using Splunk?  Kwentin: One thing that really stood out as I was learning Splunk was the ability to build dashboards and tables where you didn’t need deep SPL knowledge. The syntax was embedded into buttons, charts, and visualizations, which gives IT teams a more UI-friendly way to investigate issues instead of digging through raw data.  Callie: Who inspires you professionally?  Kwentin: I’d say Henri Davis host of the Techtual Chatter YouTube channel. Around 2024, I knew I wanted to move into a more mature role outside of the service desk at KSU. Watching Henri’s content helped me realize that I was already doing cross-functional cybersecurity and IAM work. Watching his channel made me realize that the tools I was already using — like Duo, KnowBe4, Splunk, Active Directory, Jamf, and Intune — were all critical to shaping my skill set. That confidence carried into interviews and opened doors I didn’t think were possible before. That realization helped me restructure my resume and ultimately land a cybersecurity role. I was later featured on his channel and shared my experience breaking into tech with autism to help guide others.  Callie: I watched your interview on the Techtual Chatter podcast! It was so good. You were very open about accessibility and inclusion. Can you tell us more about what you shared?  Kwentin: Absolutely. As someone on the autism spectrum, navigating the world can be challenging. I wanted to give others hope and confidence that people with autism can pursue tech opportunities. I gave the audience some suggestions about submitting applications, interviewing, and testing. In fact, because test-taking can be challenging, I reached out to Splunk Education before taking my Splunk Certification exam and the team helped me secure testing accommodations, including extended time. That made a huge difference. I really appreciate how intentional Splunk has been about making certification accessible and inclusive for people with learning disabilities.  Callie: Tell us more about your experience with the Splunk Academic Alliance Program.  Kwentin: The Splunk Academic Alliance Program gave me free access to training and certification exams. The program really helped me deepen my Splunk knowledge. I learned to use Splunk through self-paced training, quizzes, and especially the hands-on labs on the Splunk Education platform. The labs were huge for me because I’m a visual learner. Being able to interact with a temporary cloud environment and follow step-by-step guides helped me retain the material much better than just reading and lectures alone. I passed my certification on the first attempt in October 2025.  Callie: What’s next for you with Splunk?  Kwentin: I want to earn more Splunk Certifications so I can use Splunk more effectively across different cloud environments, system and network protocols, and eventually expand my opportunities nationally and internationally.  Callie: Final question — what would you say to someone just getting started?  Kwentin: Use the resources available to you, especially hands-on labs. Don’t underestimate the experience you already have, and don’t be afraid to ask for support. Programs like Splunk Academic Alliance really do change lives.  Callie: Thank you so much, Kwentin. It’s been a pleasure getting to know you and learn from you.  Kwentin: Thank you so much!   That’s it for Episode 1 of Main Character Moments. Huge thanks to Kwentin for sharing his story — and for reminding us that learning, accessibility, and community can be career-defining. Stay tuned for more conversations that spotlight the people powering the Splunk ecosystem, one main character at a time.  ... View more

Welcome back to Splunk Classroom Chronicles, our ongoing series where we shine a light on what really happens inside a Splunk classroom. This time, we’re giving you an insider’s view of a recent Partner Strength & Depth (PSD) Accelerator in Egypt. Traveling across the globe, two of our seasoned Splunk instructors—partnering with Silicon21—delivered more than just training; they brought the energy, shared real-world expertise, and helped strengthen a growing community of Splunk users.    One big location, hundreds of big ideas  The PSD Accelerator is part of our Splunk Funded Partner Training initiative, designed to help partners level up together. The idea is simple but powerful: bring a large group of partners into one location, deliver instructor-led Splunk Education onsite, and focus on building a deep, shared foundation of Splunk knowledge. These programs are ideal for reaching larger audiences (often more than 50 learners at a time), with Splunk covering the cost of training, instructor travel, and certification exam vouchers. These PSD sessions are typically hands-on, lab-infused, and taught by certified Splunk instructors who know how to keep the room engaged from initial login to final feedback form.   Egyptian learners tackle Enterprise Administrator bootcamp  For the Egyptian audience, we combined the core content from Splunk Enterprise System Administration and Splunk Enterprise Data Administration into a streamlined Enterprise Administrator bootcamp. This allowed learners to move efficiently through core concepts—managing License Managers, Indexers, and Search Heads, then diving into Forwarders, Data Ingestion, and Deployment Servers—seamlessly and in less time. Same depth, slightly tighter format, and a whole lot of ah-ha moments.  Go to the head of the class  Oh, but those instructors, though. Gary Swanson and Adham Labib Ali showed up with a rare mix of deep technical fluency and real-world perspective that immediately set the tone for the week. They knew when to go deep, when to zoom out, and how to turn complex concepts into practical, usable knowledge. Their curiosity and authenticity sparked thoughtful questions, generated lively discussions, and created a classroom vibe that felt more like a collaborative workshop than a traditional lecture.  People are talking  The learner feedback posted publicly on LinkedIn illustrated how many learners experienced the bootcamp. Yousef AbdulFattah, Cyber Security Solution Engineer at Silicon21, responded to Adham’s overview post saying, “It was truly a pleasure meeting you and attending this session. The energy in the room and engaging discussions made it a very impactful experience. Many thanks to Adham and Gary for the valuable insights and for making this session such a great one.”  Another note submitted directly into the team summed up the vibe perfectly, calling out how interactive, collaborative, and genuinely enjoyable the week was—driven by instructors who showed up with professionalism, clarity, and a real passion for teaching.  In a classroom or in your own room  Whether you’re interested in learning collaboratively and building community, or appreciate going solo, Splunk Education offers a learning modality that’s sure to suit your needs. If we’ve piqued your interest in the value of Splunk Education and you’d like to increase your Splunk knowledge or get started on your own journey, here are some useful resources:  Course Registration: Ready to take the next step? Register for any of our courses here.   Splunk Education: Visit the official Splunk Education website to explore more courses and certification details.  Splunk Lantern: Get field-tested guidance on use cases and best practices using Splunk Lantern.  Community Insights: Join the Splunk Community to connect with other users and get insights into best practices and troubleshooting.  Splunk Certification: Validate your Splunk proficiency with any of our Splunk Certifications.  Stay tuned for the next episode of Splunk Classroom Chronicles—we’ve got plenty more training tales to tell. Stay curious, keep learning, and we look forward to seeing you in one of our upcoming classes – virtually or in person!  ... View more

January 2026 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this month’s edition of indexEducation, the newsletter that takes an untraditional twist on what’s new with Splunk Education. We hope the updates about our courses, certification program, and self-paced training will feed your obsession to learn, grow, and advance your careers. Let’s get started with an index for maximum performance readability:  Training You Gotta Take | Things You Needa Know | Places You’ll Wanna Go   Training You Gotta Take Developing SOAR Playbooks for Splunk Enterprise Security | For the win  Write the play. Run the play. Win the game. Like every great football team, every strong security team has a playbook. Developing SOAR Playbooks for Splunk Enterprise Security is a brand-new paid eLearning course that shows you how to run circles around threats using Splunk SOAR and Splunk Enterprise Security (ES). You’ll learn how to design, test, and troubleshoot playbooks that execute directly from ES, with hands-on labs to illustrate how it works.   Gotta run the right plays | Build automation that actually executes   Using Splunk UEBA to Detect Insider Threats | Think like an insider  Being an insider isn’t always about backstage passes and early access—it’s sometimes about malicious behavior. In Using Splunk UEBA to Detect Insider Threats, you’ll step into a one-hour hands-on lab built for SOC analysts and threat hunters who want to spot risky behavior before it becomes a headline. You’ll investigate anomalies, tune detections, and cut through the noise to focus on what actually matters. Prior Splunk Enterprise Security experience recommended, curiosity required.  Gotta train at your pace | Build your security muscle anytime  Things You Needa Know Splunk University at GovSummit | Back to school, civics edition  Fresh notebooks. New ballpoints. Big goals. Splunk GovSummit is bringing that energy back to Washington, DC on April 8, 2026—with Splunk University kicking things off the day before at the Marriott Marquis. This two-day public sector event is built for government and government-focused organizations ready to tackle today’s threat landscape head-on. Expect deep dives into AI, Zero Trust, cloud, compliance, fraud prevention, and edge security—plus keynotes, breakouts, and plenty of peer talk. Join the one-day class, then stay for the experience that ties it all together.  Need know where policy meets practice | Registration opens early 2026  Legacy Certifications | In the New year, we’re going vintage  New year, new changes. Starting January 1, we’ve introduced Legacy Certifications—credentials that still mean something, but won’t be refreshed going forward. Think of these like a classic band tee: it’s still cool even if the band isn’t touring anymore. Splunk Enterprise Security Certified Admin, Splunk SOAR Certified Automation Developer, and   Splunk IT Service Intelligence Certified Admin are now officially “legacy.” Don’t worry, though, these certs continue to hold value for the right roles and environments, they’re just no longer evolving with product releases.  Needa know what’s changed | Some Splunk certifications are legacy now  Places You'll Wanna Go Boss of the SOC for Higher Ed | Step up to the mic  Bruce Springsteen is The Boss because he is relentless in pursuing artistic excellence. Show your relentless pursuit of excellence by participating in the Boss of the SOC: Higher Ed Edition on Wednesday, April 15 (1–5 PM ET). This is a live, hands-on threat detection challenge built exclusively for colleges and universities using Splunk. You’ll battle realistic attack scenarios, sharpen investigation speed, and pressure-test detection workflows alongside peer institutions. You’ll walk away with skills, greater stamina, and serious SOC street cred.   Gotta go take on the battle | Prove you run the SOC  Splunk Lantern | A smarter site, guided by how you use it  If you haven’t clicked around Splunk Lantern lately, the October refresh is worth a scroll. We updated navigation, streamlined content, and added a no-login feedback button to make sharing input fast and friction-free. The result? More feedback in six weeks than we received in the previous five years combined — helping us prioritize updates, tune guidance, and keep Lantern aligned to how Splunk is really used in the field. You’ll find the feedback button on almost all of our articles. Use it—we’re listening.  Gotta go read the blog | Help shape what comes next  Find Your Way | Learning Bits and Breadcrumbs  Go Chat | Join our Community User Group Slack Channel  Go Stream It | The Latest Course Releases (Some with Non-English Captions!)  Go to STEP | Get Upskilled  Go Discuss Stuff | Join the Community  Go Social | LinkedIn for News  Go Index It | Subscribe to our Newsletter    Thanks for sharing a few minutes of your day with us – whether you’re looking to grow your mind, career, or spirit, you can bet your sweet SaaS, we got you. If you think of anything else we may have missed, please reach out to us at indexEducation@splunk.com.     Answer to Index This: Your age    ... View more

At Cisco, purpose isn’t a tagline—it’s a commitment. Cisco’s FY25 Purpose Report outlines how the company is working to power an inclusive future for all, with education recognized as the ultimate equalizer for building opportunity in the digital era. That vision is grounded in four pillars—Community Resilience, Our People, Responsible Innovation, and Energy and Sustainability—and brought to life through programs that create real access to skills, careers, and technology.  We’re proud that the Splunk Academic Alliance is featured in this year’s report as a small but mighty example of that purpose in action. The program is designed to meet learners where they are—providing students, faculty, and IT staff at nonprofit colleges and universities with free Splunk training and industry-recognized certifications. As cybersecurity and data roles continue to evolve, Splunk Academic Alliance has expanded to include hands-on learning with Splunk Enterprise Security and Splunk SOAR, helping learners build skills in incident detection, response, and automation—areas the Splunk Community knows are more critical than ever.  The impact is global and growing. In the past year alone, Splunk Academic Alliance supported more than 31,000 enrollments and trained 16,000 learners across 44 countries, with innovative programs at institutions like the University of Nevada, Las Vegas, Louisiana State University, and California Polytechnic State University.   For Splunk users, educators, and practitioners, this is a reminder that the tools we use every day are also shaping the next generation of technologists. Whether you’re already involved—or curious about getting your institution involved—we invite you to explore the Cisco FY25 Purpose Report, share it with your network, and see how Splunk is helping turn education into opportunity at scale.  See how the Splunk Academic Alliance is featured in Cisco’s FY25 Purpose Report—and why it matters to the Splunk Community.  ... View more

A new year often inspires reflection—and reinvention. Whether your goals include strengthening your security posture, automating incident response, or turning data into clearer insights, one thing remains true: greater proficiency creates greater opportunity.  To kick off 2026, Splunk Education is rolling out a series of new and updated courses designed to help you stay current, confident, and promotion-ready. These releases reflect the real-world skills Splunk users need most right now—across security operations, automation, analytics, and visualization. Let’s take a look at what’s new.  Strengthen Your Security Foundation with Updated Splunk ES Training  Security teams are under constant pressure to do more with less and expertise matters.  That’s why we’ve updated two of our most critical instructor-led Splunk Enterprise Security (ES) courses:  Administering Splunk Enterprise Security  Using Splunk Enterprise Security (Version 8 – Updated)  These refreshed courses align with the latest ES capabilities, helping practitioners like you manage, tune, and operationalize Splunk ES more effectively. If you’re responsible for maintaining or using ES in a production environment, these updates ensure your skills keep pace with the platform—and with today’s threat landscape.  Automate, Orchestrate, Accelerate: New Splunk SOAR 7.0 Courses  Automation is no longer optional—it’s essential. To support security teams adopting the latest version of Splunk SOAR, we’ve updated four instructor-led training (ILT) courses for Splunk SOAR 7.0.0:  Developing SOAR Playbooks  Administering Splunk SOAR  Investigating Incidents with Splunk SOAR  Advanced SOAR Implementation  Together, these courses guide learners from foundational concepts to advanced implementation, helping teams reduce response times, standardize processes, and scale security operations with confidence.  Get Started Faster with Updated ES Fundamentals  New to Splunk Enterprise Security—or looking to refresh the basics? The updated Introduction to Enterprise Security (ES) eLearning course for ES 8.x provides a clear, accessible on-ramp to the platform. This fundamentals course helps learners understand core ES concepts, workflows, and use cases—making it an ideal starting point for analysts, engineers, or anyone supporting a security operations team.  Detect Insider Threats with Hands-On UEBA Training  Insider threats are complex, subtle, and increasingly costly. Our new interactive lab course, Using Splunk UEBA to Detect Insider Threats, gives learners hands-on experience identifying risky behaviors and potential threats using UEBA analytics. If your role involves threat detection, investigation, or risk management, this lab-focused experience builds practical skills you can apply immediately.  Turn Data into Insight with Updated Dashboard Courses  Dashboards make data visible and actionable. We’ve released updated versions of two popular eLearning courses:   Introduction to Dashboards  Dynamic Dashboards  These refreshed courses help learners design more effective, interactive, and insightful dashboards—so stakeholders can see what matters most, faster.  Why It Matters: Proficiency Powers Possibility  Every new skill you build expands what you can do—with Splunk and beyond. These new and updated courses are more than content refreshes; they’re opportunities to:  Stay current with the latest Splunk releases  Build confidence in high-impact tools like ES, SOAR, and UEBA  Increase your value to your team and organization  Prepare for what’s next in your career    Whether you’re leveling up in your current role or preparing for your next one, learning momentum matters. Bookmark our New Course Release page for all the latest course releases with links and head over to education.splunk.com to browse the catalog.   Happy new year of learning!   ... View more

As we embrace a new year, we’re making a small but important update to the Splunk Certification program. We’ve introduced a new category called Legacy Certifications — think of these as credentials that still hold value, but won’t be refreshed going forward.  The following certifications have been reclassified as Legacy Certifications:  Splunk Enterprise Security Certified Admin  Splunk SOAR Certified Automation Developer  Splunk IT Service Intelligence Certified Admin    While these exams won’t be updated with future product releases, they can still be meaningful for professionals working in specific roles or industries.  If your 2026 goals include sharpening your skills in Enterprise Security or SOAR, now’s a great time to look ahead. We recommend checking out our next-generation cybersecurity certifications:  Splunk Certified Cybersecurity Defense Analyst  Splunk Certified Cybersecurity Defense Engineer  These certifications are built around today’s security challenges and reflect the latest tools, techniques, and best practices for defending modern environments with Splunk. For more details check out the FAQs.  Thank you for being part of the Splunk Certified Community and for continuing to grow your expertise with us. Cheers to what’s next.  ... View more

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this month’s edition of indexEducation, the newsletter that takes an untraditional twist on what’s new with Splunk Education.  This month, we’re riffing on some very popular New Year’s resolutions. We hope the updates about our courses, certification program, and self-paced training will feed your obsession to learn, grow, and advance your careers. Let’s get started with an index for maximum performance readability:  Training You Gotta Take | Things You Needa Know | Places You’ll Wanna Go   Training You Gotta Take Resolution #1 | Improve your health with experienced instructors   Whether it’s feeding our bodies or feeding our minds, we often start the year off trying to do better. Well, that’s the plan until the sleeve of Oreos mysteriously disappears. While Splunk Education can’t stop your snack attacks, we can boost your brain health with courses that feel better than binging Netflix. Take Advanced SOAR Implementation 6.4.1 -- a 13.5-hour deep dive built for seasoned SOAR consultants ready to architect complex, high-impact solutions or wait for training on the latest version coming in mid-January. If one of your New Year’s resolutions is to spend less time on social media and more time improving your career, we are right there with you.   Gotta take steps to better health | Feed your mind with instructor-led training   Resolution #2 | Exercise regularly using labs  We know that sticking with a New Year’s resolution that requires a 5 a.m. wake-up call to claim a treadmill before everyone else does can be tough. But with self-paced learning from Splunk Education, you can build your muscle memory anytime – now with lab-only exercises.   Splunk Enterprise Security: Investigating and Responding in AWS is a new hands-on lab that places you in the investigator’s seat within the Wonderland SOC, guiding you through real-world incident response using Splunk Enterprise Security (ES) and SOAR in an AWS environment. Keeping this resolution should be no sweat.   Gotta be at your pace | Build your security muscle anytime  Things You Needa Know Resolution #3 | Get organized with Splunk Certifications  You know what they say, “Clear your space, clear your mind.” It’s a common New Year’s resolution especially for those who identify as borderline hoarders. In Splunk Certification, we get it. That’s why we’re doing a bit of cleanup in our program by consolidating three certifications into a new legacy category and simplifying our recertification policy. We know that by simplifying things, you’ll experience more clarity and will be able to focus on Splunk Certifications that fit your needs and your career goals more closely. Cheers to channeling your inner Marie Kondo. “Does this spark joy?”  Needa clear your mind | Get the details in this FAQ  Resolution #4 | Save more, spend less   Spend a little too freely on all the holiday festivities, so you resolved to follow a strict budget for the rest of 2026? That’s a common New Year's resolution, so you're not alone. If you’re determined to pinch those pennies, but you’re also prone to FOMO, we got you. The Splunk Education catalog offers over 80 free, self-paced eLearning courses. Get started with Splunk basics at your own pace and then move through the curriculum onto more advanced courses for Splunk Enterprise and Cloud, Security, and Observability. Remember, when you’re saving, you can also be investing.  So, let Splunk help you invest in your career with no money down.   Needa save and invest |  Try free eLearning courses from Splunk Education  Places You'll Wanna Go Resolution #5 | Learn a new skill  Every January 1, you swear this is the year you’ll finally learn piano… and by February 1, the keyboard is just an expensive piece of décor. If you’re craving a more realistic skill upgrade – one that fits right in your pocket – head over to the Splunk YouTube How-To channel. You’ll be in good company with 30,000 subscribers who prefer quick, visual learning without the guilt trip or steep learning curve. Make learning a habit and turn your resolution into one that grows your career and hits all the right notes.  Wanna go skill-up | The solution is in your pocket  Resolution #6 | Reduce stress with a guide  Daily meditation is probably one of those New Year’s resolutions that sounds great until that first Monday back to the office. And while mindfulness is a noble, research-backed path to calm, there are far easier ways to reduce stress at work. Enter Splunk Lantern, the online guide your nervous system didn’t know it needed. Built to light your path through key use cases, data insights, and smoother Splunk management, Lantern will have you breathing easier in no time.  Wanna find your zen | Breathe easier with Lantern  Find Your Way | Learning Bits and Breadcrumbs  Go Chat | Join our Community User Group Slack Channel  Go Stream It | The Latest Course Releases (Some with Non-English Captions!)  Go to STEP | Get Upskilled  Go Discuss Stuff | Join the Community  Go Social | LinkedIn for News  Go Index It | Subscribe to our Newsletter     Thanks for sharing a few minutes of your day with us – whether you’re looking to grow your mind, career, or spirit, you can bet your sweet SaaS, we got you. If you think of anything else we may have missed, please reach out to us at indexEducation@splunk.com.     Answer to Index This: A New Year’s Resolution  ... View more

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the nostalgia, or maybe it’s the collective sense that we’re all ready to close one chapter and set the stage for something new.   At Splunk Education, this season always reminds us how grateful we are for you: the learners, the admins, the analysts, the partners, and the ever-curious humans who make this community sparkle a little brighter every month.  With that spirit of gratitude, we’re excited to share our latest round of instructor-led courses and translated offerings – new offerings designed to strengthen your skills before we turn the page on the calendar and welcome 2026. Whether you’re planning to spend the holidays curled up with cocoa or still charging ahead with your last big projects, there’s something here to help you step into the new year feeling confident and ready.  New Instructor-Led Training – Security   Advanced SOAR Implementation 6.4.1: This 13.5-hour course is intended for experienced SOAR consultants who will be responsible for complex SOAR solution development. (Enroll)  New Lab-Only Course – Security  Splunk Enterprise Security: Investigating and Responding in AWS: This hands-on lab places you in the investigator’s seat within the Wonderland SOC, guiding you through real-world incident response using Splunk Enterprise Security (ES) and SOAR in an AWS environment. (Enroll) Instructor-Led Translated Training -- Japanese    Splunk Enterprise System Administration 9.4: Build strong system administration fundamentals with localized instruction. (Enroll)  Splunk Enterprise Data Administration 9.4: Explore data ingest, management, and governance in your preferred language. (Enroll)    Quick Notes Before You Register  Splunk Training Units (TUs) do expire—something to keep an eye on as we roll toward year-end.  If your organization uses TUs, check in with your Org Manager before enrolling in paid classes.    As we toast to what’s ahead, we want to thank you for another year of learning, experimenting, troubleshooting, and championing Splunk in your organizations. You continue to inspire the courses we build, the content we share, and the community we’re proud to be part of.  Cheers to using your Splunk proficiency to earn that new promotion next year.    See you in class and see you in 2026.  ... View more

November 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this month’s edition of indexEducation, the newsletter that takes an untraditional twist on what’s new with Splunk Education.  This month, we’re sharing our thanks with a gratitude-filled edition. We hope the updates about our courses, certification program, and self-paced training will feed your obsession to learn, grow, and advance your careers. Let’s get started with an index for maximum performance readability:   Training You Gotta Take | Things You Needa Know | Places You’ll Wanna Go   Training You Gotta Take Developing Splunk UI Dashboards | Almost as fun as building with Lego bricks  It’s that feeling when you finally have a day off to build that 3,600 Lego piece Star Trek U.S.S. Enterprise and now you’re ready to devour grandma’s homemade mashed potatoes. But instead, you’re building Splunk UI Dashboards with an experienced Splunk instructor because you’re enrolled in the Developing Splunk UI Dashboards class. This course is designed for developers looking to build dashboards using React and the Splunk UI toolkit. Almost as satisfying as snapping Legos in place, you’ll get hands-on experience creating dashboards with React components that match the native Splunk look and feel. Although the class day won’t end with a slice of grandma’s pumpkin pie, you’ll be thankful for gaining some new skills.    Gotta get developing | Grateful for dashboards and days off  Splunk Lantern | Learn from featured articles  There’s something magical about holiday lights this time of year. And, we’re even grateful for that one house on the block that outshines us all with a gazillion tiny bulbs generating a million watts. The brightest place in our community is Splunk Lantern and it’s also magical. If you haven’t stopped by Splunk Lantern in a while, you’ll notice we’ve made some glowing upgrades including a revamped home page and refreshed navigation experience – all thanks to feedback from our super users and amazing customers. Lantern offers so many ways to learn and increase your knowledge of Splunk – just follow the light.   Gotta get trained on use cases | Bright lights, big visualizations  Things You Needa Know Legacy certifications | Leaving behind three certifications  At the holiday table, we all have that great-uncle who toasts to the importance of leaving behind a legacy. FWIW, we never really know what he’s talking about. But at Splunk, we’re introducing Legacy Certifications – and clearly defining what that means. While the certifications in this category remain valuable, they will no longer be actively maintained or updated. These include Splunk Enterprise Security Certified Admin, Splunk SOAR Certified Automation Developer, and Splunk IT Service Intelligence Certified Admin. We are so thankful for all our Splunk Certified users and their relentless pursuit of skills validation. Hey, maybe becoming Splunk Certified could be the toast at this holiday family feast.  Needa know about certifications | Grateful for the validation  Getting data in | Now streaming  Maybe you’ve got Netflix, Hulu, or HBO cued up when the dinner dishes are cleared and the family is ready to relax. But did you know there’s also the latest episode of “Getting Data In” streaming from Splunk Academic Alliance? Part of our expanded Splunk Academic Alliance membership, we hosted a special Cybersecurity Awareness Month webinar and the replay is available to help you prepare and optimize your data for Splunk Enterprise Security (ES). The episode may not be as riveting as the first episode of the Game of Thrones, but it’s definitely more rewarding than the final one. Use your holiday downtime to learn more about getting data into Splunk.   Needa learn during that holiday downtime | Streaming on Splunk  Places You’ll Wanna Go Splunk How-To YouTube | Are we in your algorithm?  Sometimes all this new technology can seem daunting and feel super-sci-fi. But we’re thankful for all the different ways we can quickly reach our curious learners with valuable learning content. As an education organization, we know that our 30,000 YouTube subscribers like traditional training coursework, but are also looking for quick, visual ways to increase their Splunk proficiency. We appreciate that we’re part of your algorithm, and if we’re not, we’d be grateful if we were. Plus, if your sister is driving, you can actually learn some stuff on that annoying drive to Aunt Carol’s holiday brunch.   You’ll wanna go to YouTube | For how-tos and to meet Alex, from Splunk Education  Sarah’s blog | For a Cybersecurity Awareness Month wrap up  If you want to be the real hero at your upcoming holiday gatherings, then brush up on ways to keep your Nana and third-cousin Jimmy safe from cybercriminals – since it’s getting even harder these days to detect what's safe and what’s not. Sarah Ernst leads a team of security-focused technical training curriculum developers, so she lives and breathes cybersecurity education and training. She wants to help everyone understand the value of cybersecurity education so we can all stay sharp, stay curious, and stay vigilant – and it’s not just needed by your Boomer family members anymore.   Wanna go get some tips | Cybersecurity awareness is an intergenerational issue  Find Your Way | Learning Bits and Breadcrumbs Go Chat | Join our Community User Group Slack Channel  Go Stream It | The Latest Course Releases (Some with Non-English Captions!)  Go to STEP | Get Upskilled  Go Discuss Stuff | Join the Community  Go Social | LinkedIn for News  Go Index It | Subscribe to our Newsletter       Thanks for sharing a few minutes of your day with us – whether you’re looking to grow your mind, career, or spirit, you can bet your sweet SaaS, we got you. If you think of anything else we may have missed, please reach out to us at indexEducation@splunk.com.     Answer to Index This:To prove he wasn’t a chicken  ... View more

October 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this month’s edition of indexEducation, the newsletter that takes an untraditional twist on what’s new with Splunk Education. This month, we’re celebrating Rocktober with a music-inspired edition. We hope the updates about our courses, certification program, and self-paced training will feed your obsession to learn, grow, and advance your careers. Let’s get started with an index for maximum performance readability:  Training You Gotta Take | Things You Needa Know | Places You’ll Wanna Go   Training You Gotta Take Free Fallin’ | An ode to learning without limits  Cue Tom Petty, because we’re free fallin’ with over 80 free Splunk self-paced training courses! There’s no “freeway running through the yard,” but our self-paced training courses are accessible online, anytime - covering a wide range of topics from basic Splunk functionalities to advanced security operations. Get obsessed with dashboards, detections, and data, so you can show up at work like a rock star making a big stage entrance.  Gotta show up online | eLearning that rocks  Paradise by the Dashboard Light | Data visualizations on display  “Stop right there! Before you go any further,” learn how to create Splunk Dashboards that highlight your most important data. With our Introduction to Dashboards course, our instructors will show you how to use source code, layouts, and data sources to create dashboards that sing. Then, dial it up with Dynamic Dashboards, where you’ll add user inputs, drilldowns, and learn to create dynamically colored dashboards. Your dashboards will go from “meh” to Meat Loaf-epic.  Gotta know right now | Light up your visualizations  Things You Needa Know Start Me Up | New releases that never stop   Learning Splunk is so addictive that once you start, you’ll never stop. That’s why, every month we release new courses so you can “give it all you got.”  Whether you’re tuning up your security skills, humming along with new SOAR knowledge, or remixing data insights with Observability, Splunk Education has the set list you need. The Splunk Community blog includes the full review of new hits each month so you can “get the moves like Jagger.”  Gotta know the score | Latest releases on The Community  We Are the Champions | Certified and validated  “No time for losers ‘cause…” Splunk Certified Cybersecurity Defense Engineers are the champions. They are certified champions within the SOC and they’ll “keep fighting ‘til the end!” This Splunk certification proves you’ve got what it takes to optimize workflows, fine-tune detections, and automate like a pro using Splunk Enterprise Security and SOAR. And now? No prerequisites stand in your way of victory and validation.   Gotta know how to defend | Become a Splunk Certified champion  Places You’ll Wanna Go You Really Got Me | Help contribute to Lantern’s new vibe  “You really got us goin’,” so let’s go further together. Splunk Lantern is getting a major glow-up, and your voice can help shape the way we show up online. We’re redesigning the site to make finding expert insights, use cases, and Splunk tips faster than the Kinks’ most complex drum fill. Take a look at our new homepage wireframe and share your thoughts, because the best performances are always powered by the fans.  You’ll wanna go to Lantern | Help us rock the new Lantern experience  Come Together | Follow us on LinkedIn   The Splunk Training and Certification LinkedIn is your ticket to staying connected about Splunk Education. “I know you, you know me,” and we all know the value of Splunk Education. On our LinkedIn, we share new course releases, Last Minute Learning opportunities, certification news, and backstage insights about how you can experience technical training on using Splunk. There are so many ways to learn Splunk, so we’re making sure you have a place to get all the top hits.    Gotta follow the band | Splunk Education on LinkedIn  Find Your Way | Learning Bits and Breadcrumbs Go Chat | Join our Community User Group Slack Channel  Go Stream It  | The Latest Course Releases (Some with Non-English Captions!)  Go to STEP | Get Upskilled  Go Discuss Stuff | Join the Community  Go Social | LinkedIn for News  Go Index It | Subscribe to our Newsletter      Thanks for sharing a few minutes of your day with us – whether you’re looking to grow your mind, career, or spirit, you can bet your sweet SaaS, we got you. If you think of anything else we may have missed, please reach out to us at indexEducation@splunk.com.     Answer to Index This: When it’s Rocktober at Splunk  ... View more

Every day, the world feels like it’s moving faster with new technological breakthroughs, AI innovation, and cybersecurity headlines that make you rethink your online security hygiene. In a world that never stops bringing us new challenges, Splunk Education is here to help you keep pace.  No matter what’s happening across industries, governments, and the planet, confidence can be found in knowledge. So, we regularly deliver new courses to help you adapt, respond, and lead in an era defined by massive data and digital resilience needs. Below are the latest course releases for the month of October: Splunk Enterprise Security: Investigating with AWS CloudTrail is a new lab-only exercise designed for SOC Analysts. This hands-on lab guides participants through investigating suspicious activity in AWS environments using Splunk Enterprise Security and AWS CloudTrail logs. Learners should have completed “SOC Essentials: Investigating with Splunk” or possess equivalent knowledge. Through four practical exercises, participants will interpret cloud audit logs, detect threats, and reconstruct an attack timeline to uncover attacker techniques and methods.   The world’s shifting toward automation, and Splunk’s right there with it. Continue your SOAR journey with Developing Splunk SOAR Playbooks in the Visual Playbook Editor: Part Two. This eLearning with labs course is the second part of a two-part series for Splunk SOAR developers, analysts, and automation engineers. Building on the fundamentals from part one, you’ll discover how to create more advanced and powerful playbooks using the Visual Playbook Editor.   From global market data to internal ops metrics, data storytelling is how organizations make decisions that matter. Developing Splunk UI Dashboards is an instructor-led course that empowers developers to create dynamic, native-looking Splunk applications by leveraging React components and the comprehensive SUI library. Gain hands-on experience to transform data into powerful, interactive visualizations that seamlessly integrate with the Splunk environment.   In an increasingly borderless digital world, we’re expanding accessibility. Our Dynamic Dashboards and Multivalue Fields eLearning courses are now available in Japanese, empowering learners across regions to master Splunk in their native language.   In times of rapid change, knowledge isn’t just power, it’s adaptability. Keep your skills as agile as the world around you. Explore the latest courses and enroll today at education.splunk.com.  Happy Learning!  Callie Skokos on behalf of the Splunk Education Crew ... View more

October might be wrapping up, but for Splunk Education, cybersecurity awareness never goes out of season. Every alert, every log, every phishing event – it all comes back to one thing: how we learn to defend our organizations smarter and faster. So, as Cybersecurity Awareness Month comes to a close, here’s a fresh reminder about what Splunk Education offers to help you (and your teams) stay sharp, confident, and one step ahead of the bad actors. Use Splunk Training to Improve Your Security Skills Splunk’s security tools are powerful in their own right, but knowing how to use them to their fullest potential is where the magic really happens. That’s where Splunk Education comes in. Whether you’re an analyst tracking threats in Splunk Enterprise Security (ES), an engineer automating workflows in Splunk SOAR, or just getting started with the Cybersecurity Defense Analyst (CDA) or Cybersecurity Defense Engineer (CDE) certifications, our hands-on, instructor-led, and self-paced courses help you turn “what’s this?” into “watch this.” You’ll learn to think like a threat hunter and act like an incident responder, all while gaining real-world, lab-based experience that you can apply immediately. Expanding Access Around the Globe Security training only matters if people can access it. That’s why more than 300 universities worldwide are teaching Splunk in the classroom as members of the Splunk Academic Alliance program. This program is designed to grow talent today for the benefit of society tomorrow by offering Splunk training and industry-recognized Splunk certifications at no cost to university students, faculty and IT staff. The end result is preparing students to graduate and be job-ready to help their new organizations on day one. And with Authorized Learning Partners (ALPs) delivering high-quality instruction globally, learners can grow their skills anywhere. It’s the same great Splunk training, same expert guidance, just closer to your home and your culture. No Classroom Necessary Learning shouldn’t stop after class ends. Splunk Education offers 80+ free self-paced courses – many designed with non-English captions – to help you sharpen your skills on your schedule. If you’re looking for a use case guide with real world impact, check out Splunk Lantern, which is our go-to hub for practical tips, how-tos, and use cases written by Splunk experts. With cybersecurity awareness on our minds, there’s a new Lantern Prep Tips for the Cybersecurity Defense Analyst certification which helps you figure out where to start based on your existing experience. And when you’re ready for some face-to-face fun, there’s Splunk University—our pre-.conf training event offering one-, two-, and three-day security tracks for every level of security, cybersecurity, and SOC experience. Watch and Learn: Splunk How-To Videos Prefer to learn by watching? We’ve got you covered. Head over to the Splunk How-To YouTube channel for bite-sized videos that show you how to get hands-on with Splunk’s security products. In the spirit of Cybersecurity Awareness Month, you might want to start with Introduction to Security Domain - A little history, learn about common cyberthreats with the Once Upon an Attack web series, and What's NEW in Splunk SOAR 6.4.1. And for anyone who’s ready for Detection as Code, there’s the new  Splunk ContentCTL: A closer look video. All these videos are quick, clear, and perfect for brushing up on the products and concepts or sharing within your team. Quick Resources to Keep You Looped In Courses and Certifications: Splunk Education Training & Certification Social Connections: Splunk Training & Certification on LinkedIn How-Tos and Use Cases: Splunk Lantern New Certification Prep Tips on Lantern:  Cybersecurity Defense Analyst Video Learning: Splunk How-To Channel on YouTube Latest Education Updates: Splunk Community Blog Never Stop Expanding Your Cybersecurity Mindset Cybersecurity awareness isn’t just for October – It’s a mindset. Splunk Education helps make sure that mindset turns into real-world skills. So whether you’re building out your SOC or just starting your Splunk security journey, we’re here to keep the learning (and defending) going all year long. And now that Splunk is part of the Cisco family, our training ecosystem is getting even stronger—uniting analytics, automation, and AI-driven operations into new learning paths designed to help you do more, faster. Happy Learning! Callie Skokos on behalf of the Splunk Education Crew ... View more

Every month, Splunk Education releases new courses to help you branch out, strengthen your data science roots, and explore new directions. Whether you’re tasked with monitoring security, looking to excel in the SOC, or you’re exploring SOAR automation, we’ve got new training you need.   Grow your security skills Get hands-on with our latest eLearning with Labs to deepen your SOAR expertise: Developing Splunk SOAR Apps (Enroll)  Developing Splunk SOAR Playbooks in the Visual Playbook Editor: Part Two (Enroll)  And don’t miss our Free eLearning offering, perfect for curious learners eager to investigate faster and smarter in today’s ever-changing threat landscape. SOC Essentials: Investigating With Splunk (Enroll)  Learn without borders We’re making it easier for learners around the world to grow their skills. This month, we’ve added: Multivalue Fields (ILT) in Japanese (Enroll)  Get ahead of change Just as fall reminds us that change is constant, so is the need to keep your Splunk knowledge fresh. Explore all the new courses in our monthly course release guide and see what sparks your curiosity. And don’t forget: Training Units do expire, so check in with your Org Manager to make the most of your learning opportunities before they’re done and dusted too.  Happy learning!    Callie Skokos on behalf of the entire Splunk Education Team ... View more

September 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this month’s edition of indexEducation, and we’re leveling up our usual untraditional twist on the news with six riddles instead of one!  We hope the updates about our courses, certification program, and self-paced training will feed your obsession to learn, grow, and advance your careers. Let’s get started with an index for maximum performance readability: Training You Gotta Take | Things You Needa Know | Places You’ll Wanna Go  Training you gotta take It’s how to relive the .conf25 main stage magic Sharing Splunk news on the main stage, Exciting AI is all the rage. Product power delivered via demo, For all the replays, where should you go?   It’s training for when procrastination is your motivation It fits right in when time is tight, To teach the skills so you can write, The SPL you need to know. What do we offer to help you grow? Things you needa know It’s where to go for ‘shorts’   When you’re stumped about running detections,  And you need threat intelligence protection, But you’re under stress and need a quick view,  Where on the web offers what Splunk TIM can do?   It offers the latest expert advice on data insights  If use case guidance is what feels right,  There’s a place to go when you need the light. Guides, use cases, data galore, What offers a path to help you explore?   Places you'll wanna go It makes you the main character in the story  You’ve worked hard to grow and learn, Seeing an increase in what you earn. When others hear about your glory,  Where can you start to tell this story?   Buttercup was there and maybe you were too When .conf25 is over and you’re feeling blue,   Don’t despair because we’ve got you. Highlights curated with fun photos galore,  What’s on the Community that’ll make you want more? Find your way | Learning bits and breadcrumbs Go Chat | Join our Community User Group Slack Channel Go Stream It  | The Latest Course Releases (Some with Non-English Captions!) Go to STEP | Get Upskilled Go Discuss Stuff | Join the Community Go Social | LinkedIn for News Go Index It | Subscribe to our Newsletter Thanks for sharing a few minutes of your day with us – whether you’re looking to grow your mind, career, or spirit, you can bet your sweet SaaS, we got you. If you think of anything else we may have missed, please reach out to us at indexEducation@splunk.com.  Answer to Index This: This riddle-filled edition ... View more

At .conf25, Splunk proudly recognized Fast Lane as the 2025 Authorized Learning Partner of the Year. This award honors a partner that has gone above and beyond to empower Splunk learners across the globe – helping customers and partners achieve their learning goals, get the most from their Splunk investment, and grow adoption through education. By building innovative education plans, proactively reaching learners, and driving measurable improvements in customer satisfaction, Fast Lane has demonstrated the very best of what it means to be a Splunk Authorized Learning Partner (ALP). The Splunk ALP program was created to address the global demand for skilled professionals in data, security, and observability roles. With millions of open jobs projected in the coming years, the need for scalable, localized, and culturally relevant education is more critical than ever. ALPs like Fast Lane extend the reach of Splunk Education, delivering high-quality Splunk-developed content through Splunk-certified instructors in regions around the world. Fast Lane exemplifies this mission. This partner has not only supported learners in becoming proficient with Splunk but also reduced the reliance on customer support by teaching users how to configure and apply the technology to their specific challenges. This approach creates a true win-win: learners gain confidence and independence, while organizations experience increased adoption, improved ROI, and stronger digital resilience. By continuously investing in their training offerings and leveraging innovative delivery methods, Fast Lane has set a new standard for how ALPs can drive both business outcomes and learner success. The Splunk Partner Awards celebrate those who drive business impact, create positive change, and deliver innovative solutions in a data-driven world. Fast Lane’s recognition as Authorized Learning Partner of the Year underscores the essential role our ALPs play in building global Splunk skills and bridging the talent gap. On behalf of Splunk Education, congratulations to Fast Lane for this outstanding achievement. We also want to thank all our ALPs for empowering learners everywhere to thrive in the digital age.   ... View more

Thank you to everyone in the Splunk Community who joined us for .conf25, which kicked off with our iconic Splunk University classroom tracks and ended with an unforgettable three days in Boston. It was your energy, curiosity, and commitment to learning that made this year’s user conference so impactful and memorable. Splunk University at our new Boston campus Splunk University once again proved why it’s the best way to kick off .conf. Over three days, our instructors led 17 intensive courses across 1-, 2-, and 3-day tracks. Nearly 2,400 seats were filled, and 912 unique students walked away with fresh Splunk skills, hands-on practice, and connections that we believe extend far beyond the classroom. Consider attending next year to round out your Splunk skills and experience or to get a taste of what Splunk Education offers all year round.  Certifications validate that you’re ‘wicked smaht’   The Certification pop-up exam room was buzzing with activity, delivering 753 exams on-site. Certification continues to be a career game-changer, and we celebrated that success with the always-popular Bragging Rights Spotlight, our networking event where certified users connect, share their wins, and raise a glass together.  Find out more about getting Splunk Certified today! Hands-on workshops and Pavilion fun Splunk Education was everywhere at .conf25. In addition to Splunk University, our instructors delivered four interactive workshops, seamlessly tying Splunk training content into the broader conference experience. At the Education Station in the Pavilion, almost 600 visitors stopped by to explore Drop-in Labs, explore all our Splunk Education programs, and create custom flip books on our “Flipping Fun” stage.  Learn more about everything that Splunk Education has to offer. Community moments to remember Our very own Splunk Education leader, Eric Fusilero, was an honorary host for the Splunk Trust Induction Ceremony, celebrating our most dedicated community champions. It was a powerful reminder about the devotion our users have to each other.  And, the unique teaching style of Haya Husain was showcased on the Global Broadcast, she delivered “Unlock Your Power: Splunk Basics,” which is now available on replay.  As we reflect on these incredible moments, we want to extend our deepest gratitude to you – the Splunk Community. Your drive to learn, share, and grow is what makes Splunk University and .conf25 so special. You are the heartbeat of these events, and we can’t wait to see you on your learning journey in the months ahead. Until next year’s .conf in Denver,    – Callie Skokos on behalf of the entire Splunk Education Crew ... View more

Boston may be buzzing this September with Splunk University and .conf25, but you don’t have to pack a bag to be part of the action. The .conf25 Global Broadcast brings the magic straight to you—streaming keynotes, deep dives, and exclusive virtual content designed to keep you in the know on all things Splunk. Learn with Haya Among the standout sessions is one from our very own Haya Husain, Staff Technical Instructor, Splunk Education. Haya will lead Unlock Your Power: Splunk Basics on Tuesday, September 9, 2:30–3:30 PM MDT, offering a sneak peek into what it takes to become a Splunk Core Certified Power User. From writing searches to building visualizations, this session is all about helping you sharpen your skills and boost your digital resilience. In good company Haya joins an incredible lineup of speakers, including the Welcome Keynote with Kamal Hathi & Jeetu Patel on September 8 and the Product Keynote with Splunk Product Leaders on September 9. (Check the schedule for sessions in your timezones.) And that’s just the start. The broadcast continues with keynote deep dives, select breakout sessions, and more content curated just for virtual attendees. No ticket or travel required Can’t make it to Boston? Watch the Global Broadcast live or check out the replays on demand after the event ends. Whether you’re chasing certifications or chasing insights, .conf25 has you covered. ... View more

August 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this month’s edition of indexEducation, the newsletter that takes an untraditional twist on what’s new with Splunk Education. We hope the updates about our courses, certification program, and self-paced training will feed your obsession to learn, grow, and advance your careers. Let’s get started with an index for maximum performance readability: Training You Gotta Take | Things You Needa Know | Places You’ll Wanna Go Training You Gotta Take Observability Tracks at Splunk University | Look no further than .conf25 It’s like when you’re driving with a fogged up windshield and you can’t see all the signs clearly. That’s what it’s like when you don’t have visibility into all your data. Splunk University (Sept 6–8) is here to help improve your view with four observability tracks to give you greater visibility into your logs, metrics, traces, and events. From mastering OpenTelemetry to owning ITSI like a boss (analyst or admin), these 2- and 3-day, hands-on courses give you a clearer lens into faster resolutions, slicker investigations, and real-time insights. Seats? Still available. Excuses? Not necessary. Fun? Always to be had at Splunk. Gotta get observant | Enroll in Splunk University classes now Splunk University | Your pre-game strategy Splunk University is the ultimate warm-up before .conf25, with three days of expert-led, hands-on training designed to improve your Splunk skills and connect you with a community of like-minded Splunk aficionados. Whether you’re responsible for security, observability, platform, or administration, you’ll leave with sharper skills, real-world know-how, and maybe a few new Splunk friends. In our latest YouTube How-To video, Alex walks you through how to prep like a pro for Splunk University, from reviewing prerequisites to packing those must-have tech essentials. It’s quick, practical, and sprinkled with a little love from Alex. Gotta get prepped | Watch now Things You Needa Know Brains, bytes, and Boston | Interactive workshops from your friends in Splunk Education Sure, Boston’s got cobblestones, chowdah, and championship rings, but this September, it’s all about you getting hands-on with Splunk. At .conf25, our interactive workshops are designed to help you connect with Splunk and our Splunk Education rockstar instructors. These experienced trainers will guide you through real-world scenarios like tracking AWS data exfiltration, decoding detections in ES 8.0, unleashing machine learning on risk-based alerting, and building no-code SOAR playbooks. These aren’t just demos, they’re do-it-yourself, ask-all-your-questions, leave-with-new-skills sessions. Come curious and leave content.  Needa skill-up on Splunk | Add workshops to your schedule MCP | Your AI’s new superpower Umm, although it sounds hip, MCP does not stand for Main Character Playlist. It means Model Context Protocol (MCP) and the Lantern team pushed out another helpful blog post on how Splunk’s MCP is upping AI strength in IT operations and security investigations. And we’re not talking about just incremental tweaks. Think beyond “pattern matching” to “problem solving.” Take a look at the latest articles to get hands-on setup guidance and real-world examples to put MCP into action. Oh, and you can learn more about the Lantern team at .conf25 and they may or may not be giving out THE BEST swag.  Needa get context | Read the blog from Lantern Places You’ll Wanna Go Splunk Authorized Learning Partners | Splunk skills, your way We love different cultures and diverse experiences – oh, and snacks, we love snacks. And what better way to encourage these than to offer Splunk training in your language, your location, and your style. Our global network of Authorized Learning Partners (ALPs) brings official Splunk courses and education services to you, wherever you are. Need a specific course? Boom! Want dedicated training for your team? Heck yeah!  ALPs offer localized instruction tailored to your culture, time zone, and learning preferences, with flexible delivery options and a broad schedule in multiple languages. It’s the same trusted Splunk content, no passport or global travel required. Gotta go local | Explore training from an ALP. Certification Testing Center | Level up for less at .conf25 A framed med school diploma. A military medal. A chef’s coat. These are the things that say, I’ve mastered my craft. At .conf25, Splunk Certification is your way to show that you’ve mastered your craft – proof that you’ve got the skills to back up your swagger. Renew your certs or earn a new one, fast, easy, and just $25 per exam. Register in advance or walk up in Boston with your valid .conf25 badge. Then celebrate your win at the Bragging Rights Spotlight networking event on September 9. Check the .conf25 schedule for all the Splunky details. Gotta go get Splunk Certified | Register for .conf25 in Boston Find Your Way | Learning Bits and Breadcrumbs Go Chat | Join our Community User Group Slack Channel Go Stream It  | The Latest Course Releases (Some with Non-English Captions!) Go Last Minute | Seats Still Available for ILT Go to STEP | Get Upskilled Go Discuss Stuff | Join the Community Go Social | LinkedIn for News Go Index It | Subscribe to our Newsletter   Thanks for sharing a few minutes of your day with us – whether you’re looking to grow your mind, career, or spirit, you can bet your sweet SaaS, we got you. If you think of anything else we may have missed, please reach out to us at indexEducation@splunk.com.  Answer to Index This: 20 ... View more

Building Splunk skills is a lot like training for a marathon. It’s about consistent progress, celebrating milestones, and having the right guidance to push you forward. Our newest instructor-led courses and How-To videos are here to help you stay ‘on course’ and keep your momentum strong. Hitting your stride: Learning at your own pace Even seasoned runners know the importance of good pacing. Our latest eLearning courses help you fine-tune your Splunk performance: Observability: AppDynamics 25.4 Updates and Splunk Cloud Setup for Observability Cloud Content Security: Developing SOAR Playbooks for Enterprise Security 8.0 These sessions will help you stay on pace with the evolving platforms and security needs. Fueling stations along the route Just as hydration stations give runners a boost mid-race, our How-To YouTube videos provide quick, accessible insights when you need them: Splunk University and .conf25 Playlist:  Catch highlights and learning moments from our premier events taking place in Boston next month. Last Minute Learning:  These are tips for those who like to sign up right before the gun goes off. These videos are designed to keep you energized with bite-sized learning that fits into any schedule. For the long run There are no new eLearning courses this month, but remember, every race has stretches where you simply need to keep a steady pace. Now’s the perfect time to revisit the basics, explore our YouTube playlists, or plan ahead for the next leg of your Splunk learning journey. And don’t forget: Training Units do expire, so check in with your Org Manager to make the most of your learning opportunities before they’re done and dusted too.    Happy Training! Callie Skokos on behalf of the entire Splunk Education Team ... View more

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from logs, metrics, traces, and events?  Splunk University (Sept 6–8) is the place to be and as luck may have it, there are still seats available in our four Splunk Observability tracks! Whether you're keen to learn OpenTelemetry, need training on monitoring microservices and user experience with Splunk Observability Cloud, or want to use IT Service Intelligence (ITSI) as an analyst or admin, we’ve got the Splunk University hands-on tracks to help you succeed.  Enroll now in one of our 2- or 3-day courses so you can begin to drive faster resolution, streamline investigations, and unlock real-time insights across your environment.  Track schedule 2-day track: Sep 7 – Sep 8 3-day track: Sep 6 – Sep 8   Course names Full Observability Pipeline with Splunk OpenTelemetry Collector (2-day) Splunk IT Service Intelligence (2-day) Splunk IT Service Intelligence Admin (3-day) Monitoring Applications Using Splunk Observability Cloud (3-day)   Register here for Splunk University ... View more