Welcome to ONLC Training Centers

Splunk On-Demand: Comprehensive (Level 1 & Level 2)


Need a price quote?

Follow the link to our self-service price quote form to generate an email with a price quote.

Splunk On-Demand: Comprehensive (Level 1 & Level 2) Course Outline

**Note: This is an On-Demand Self-Study Course, 4 days of content, 6-months unlimited access, $795**
(Applicable State and Local taxes may be added for On-Demand purchases, depending on your location.)
You may take this course at any time, there are no set dates. This On-Demand (self-study) training course includes expert lectures, demonstrations and lab exercises that cover the same content that is included in our instructor-led (ILT) class. Note: The 6-month course access will begin at time of purchase

Splunk is an industry leader in operational intelligence. With Splunk, machine data is accessible, usable and valuable to IT and business users.
In Level 1, you will learn the fundamentals of using Splunk. You will get familiar with the interface, how to bring in data, how to search and report data. In addition, you will be able to create alerts and dashboards to help spot problems and track trends. Data models and Pivots are also explored.
Level 2 will bring you deeper into Splunk features. Features that will help you capture and index data so that you can generate graphs, reports, alerts, dashboards, and visualizations.

General understanding of the Windows interface.

Do You Still Prefer a Live, Instructor-led Class?
Already know On-Demand training is not right for you? We also offer this course in a live, instructor-led format. For details, click on the link below:
Splunk Training Classes

Splunk Level 1 Course Content:

Splunk - Getting Started
Installing Splunk
Creating a Splunk App
Populating data with Eventgen
Controlling Splunk
Configuring Eventgen
Viewing the Destinations app
Creating your first dashboard

Bringing in Data
Splunk and big data
Splunk data sources
Creating Indexes
Log Files as data input
Splunk events and fields
Extracting new fields

Search Processing Language
Anatomy of a search
Time modifiers
Filtering search results
Additional Search commands

Reporting, Alerts, and Search Optimization
Data classification with Event Types
Data normalization with Tags
Data enrichment with Lookups
Creating and scheduling reports
Creating alerts
Search and Report acceleration
Scheduling options
Summary indexing

Dynamic Dashboarding
Creating effective dashboards
Types of dashboards
Form inputs
Creating a time range input
Static real-time dashboard
Creating a choropleth map

Data Models and Pivots
Creating a data model
Data model acceleration
Rearranging your dashboard

Splunk Level 2 Course Content:

Introduction and review
Splunk Enterprise Features
Search Review
The Search pipeline
Search modes
Search best practices

Getting data into Splunk
Data Inputs
Indexing files and directories
Indexing the Windows Event Logs
Getting data through network ports
Scripted inputs
Configuring a Universal Forwarder
Using the HTTP Event Collector (HEC)
Getting data from databases using DB Connect
Regular Expressions (“rex”,”regex”) in Splunk field extractions
Adding structure & meaning to data

Building an Operational Intelligence App
Application Architecture
App folder structure
Creating an app from another app
Adding Assets
Creating & customizing reports & dashboards
Adding geographical maps
Highlighting Data by Range
Scheduling PDF Delivery

Advanced Querying
The search command
The where command
The eval command
The fields command
The fillnull command
SUM(), AVG(), MIN(), MAX(), COUNT(), etc…
The join command
The trendline command

Analytics and Machine Learning
Linear regression on timeseries
The Machine Learning Toolkit
Finding anomalies
Identifying clusters
Detecting outliers
Forecasting Time Series

Optimizing Splunk
Summary indexing
Backfilling a summary index
Report Acceleration

View outline in Word


Attend hands-on, instructor-led Splunk On-Demand: Comprehensive (Level 1 & Level 2) training classes at ONLC's more than 300 locations. Not near one of our locations? Attend these same live classes from your home/office PC via our Remote Classroom Instruction (RCI) technology.

For additional training options, check out our list of Courses and select the one that's right for you.


Class Format
Class Policies
Student Reviews

First Name

Last Name