Tips & Tricks: Some of the best resources and shortcuts we’ve found to get the most out of Splunk after working with it for a year.

File: Splunk Tips and Tricks

General Splunk Configuration: An introduction to Splunk’s CLI illustrating initial configuration and customization of Splunk including setting custom ports for processes and creating user roles with specific capabilities. Also covers the installation and initial configuration of a universal forwarder.

File: General Splunk Configuration

Data Manipulation with Splunk: Ingesting .csv and configuring fields, lookups, deep-dive dashboards, and conducting simpleXML edits to customize visualizations.

Files: Splunk Workshop, countries.csv, airports.csv

Dashboarding Cisco Security Data: Focuses on manipulating data dealing with Cisco events. Relevant to any security data within your environment but will show the variety of different dashboards and visualizations you can create and customize.

Files: Dashboarding Cisco, cisco.csv

Dashboarding Windows Operational Data: 

Focuses on manipulating data dealing with IT operations within Windows data. Relevant to any IT operations data within your environment but will show you the variety of different dashboards and visualizations you can create and customize.  

Files: Windows IT Ops, windowsitops.csv

Data Ingestion: Creating a website monitoring input in Splunk and then looking at examples of other data ingestion methods and where they can be used.

File: Data Ingestion