There are various ways to get data to play with, the value will depend on the use case you're trying to explore If you are on a windows machine, you can export windows event log data or you can create CSV data with a spreadsheet and just create some simple formulas to create dummy data On *nix based machines, just look in /var/log You can even use Splunk log files to play with from $SPLUNK_HOME/var/log/splunkd. That data can easily be imported to a new index and you can set up sourcetypes to do things with that. Simple google for free datasets will give you numerous hits where you can get data to play with.   ... View more