Splunk Advanced Power User Fast Start (APU-FT) – Outline

Detailed Course Outline

Leveraging Lookups and Subsearches (SSC)
  • Topic 1 – Using Lookup Commands
  • Topic 2 – Adding a Subsearch
  • Topic 3 – Using the return Command
Multivalue Fields (SSC)
  • Topic 1 – What are Multivalue Fields?
  • Topic 2 – Creating Multivalue Fields
  • Topic 3 – Evaluating Multivalue Fields
Search Optimization (SSC)
  • Topic 1 – Optimizing Search
  • Topic 2 – Report Acceleration
  • Topic 3 – Data Model Acceleration
  • Topic 4 – Using the tstats Command
Enriching Data With Lookups (SSC)
  • Topic 1 – What is a Lookup?
  • Topic 2 – Creating Lookups
  • Topic 3 – Geospatial Lookups
  • Topic 4 – External Lookups
  • Topic 5 – KV Store Lookups
  • Topic 6 – Best Practices for Lookups
Intro To Dashboards (SSC)
  • Topic 1 – Dashboard Framework
  • Topic 2 – Create a Prototype
  • Topic 3 – Use Dynamic Coloring
Dynamic Dashboards (SSC)
  • Topic 1 – Selecting a Data Source
  • Topic 2 – Adding Inputs
  • Topic 3 – Improving Performance
  • Topic 4 – Comparing Temporary versus Persistent Fields
  • Topic 5 – Enriching Data