Tips & Tricks: Some of the best resources and shortcuts we’ve found to get the most out of Splunk after working with it for a year.

General Splunk Configuration: An introduction to Splunk’s CLI illustrating initial configuration and customization of Splunk including setting custom ports for processes and creating user roles with specific capabilities. Also covers the installation and initial configuration of a universal forwarder.

Data Manipulation with Splunk: Ingesting .csv and configuring fields, lookups, deep-dive dashboards, and conducting simpleXML edits to customize visualizations.

Dashboarding Cisco Security Data: Creating security relevant dashboards and alerts to showcase how Splunk can reduce MTTI & MTTR and streamline looking at security posture (logs uploaded via provided .csv).

Dashboarding Windows Operational Data: Creating monitoring visualizations for Windows data (logs uploaded via provided .csv) and utilizing it to quickly identify and solve discrepancies in your environment.

Data Ingestion: Creating a website monitoring input in Splunk and then looking at examples of other data ingestion methods and where they can be used.