Splunk for Beginners: Make the Most of Machine Data Using Splunk

1. What is Splunk?

This video provides a brief introduction of the main capabilities of Splunk. In order to understand this thoroughly, we'll learn about machine data.

2. Setting Up Splunk Locally

In this video, you'll be setting up Splunk locally. This video will be entirely hands-on; we will walk you through every step you need to set up Splunk locally.

3. Setting Up Splunk Cloud

In this video, you'll be setting up Splunk Cloud. This video will be hands-on, and we will be walking you through every step you need to do.

4. Choosing the Right Platform

This video explains the difference between Splunk Cloud and on-premises. Information shared in this video will help to decide if you want to set up Splunk Cloud or locally.

5. Installing Development Tools

In this video, you'll be installing development tools. This video will be hands-on, and we will walk you through the entire process of installing the development tools.

1. Splunk Enterprise Features

In this video, you'll be looking at Splunk enterprise features. you'll be learning about the dashboard and visualizations of data, how we monitor and report data and utilization of metrics data to boost search performance. Finally, you'll be exploring Splunk Search Processing Language (SPL).

2. Exploring Splunk Enterprise

In this video, you'll be focusing on uploading data and indexing. You'll learn how indexers and uploading works, explore the Add Data page in the Splunk web and talk about the importance of forwarders.

3. Splunk Enterprise Processing Components

In this video, you'll dive deeper into forwarders. There are three kinds of forwarders, and each of these forwarders has a part in Splunk enterprise. You'll also learn about indexers, search heads and deployment servers.

4. Splunk Enterprise Managing Components

In this video, you'll look at the license master, monitoring console and deployment server. You'll also take a deep look into the monitoring console and deployment server.

5. Splunk Deployment Types

In this video, you'll take a look at Splunk deployment types. Single-instance deployments and distributed deployments will be the key topics. You'll also be learning about small, medium and large enterprise.

6. Splunk Enterprise Users and Administration

In this video, you'll be discussing the five primary personas that use Splunk enterprise; capacity requirements; and a thorough explanation of the backups. After that, you'll analyze the steps of upgrading Splunk enterprise.

7. Splunk Enterprise Security

In this video, you'll be exploring the world of Splunk enterprise security. You'll start with user authentication and continue with important topics such as transport security, forwarder security, auditing Splunk activity, SSO with Splunk and LDAP integration.

8. Splunk Enterprise Troubleshooting and Optimization

In the last video, you'll study basic troubleshooting and optimization, and go through the Splunk enterprise logs one by one, and finally learn about the license violations.

1. What are Splunk Apps?

In this video, you'll be discussing Splunk apps: where Splunk apps are hosted, what Splunk add-ons are, and use cases of why you should make a Splunk app.

2. Creating the First Splunk App

In this video, you'll be going through the process of creating a Splunk app, creating dashboards, SplunkJS and creating files on the Splunk app.

3. Integrating Data Inputs

In this video, you'll take a deep dive into integrating data inputs. You'll look at how structured data and network security data work, the data input methods, network events, HTTP event collector, universal forwarders and heavy forwarders.

4. Release and Maintain Splunk Apps

In this video, you'll be learning when apps should be deployed. You'll explore how Splunk app packages are deployed; cloud vet and release; how managing private apps in Splunk Cloud works; and how to uninstall the private app in Splunk Cloud. Through different diagrams, you'll visualize some of the processes.

1. Splunk REST API

In this video, you'll be learning Splunk REST API. Request methods, encoding schema and interacting with the API.

2. Splunk SDK

In this video, you'll look at Splunk SDK. You'll understand the importance of authentication and authorization, the process of searching in different modes and to display search results.

3. Splunk KV-Store

In this video, you'll learn about the KV-Store or App Key-Value store. You'll see what KV-Store is used for, how we create KV collections, lookup and output lookup.

4. Splunk HTTP Event Collector (HEC)

In this video, you'll learn about HTTP Event Collector (HEC). You'll understand how data is sent to the HEC and logging libraries (JS).

1. Building a Splunk Web Application

In this video, you'll build a web application using Splunk. Python and Flask microframework will also be used. This app will enable the user to interact with the visualized data; like all other web applications, the standard templates will be used along with CSS to style web pages to build this app.