Searching & Reporting with Splunk 6.

3
This nine-hour follow-on to the Using Splunk class focuses on
Module 5 – Manipulating and Filtering Results
Splunk's search and reporting commands. Scenario-based examples
and hands-on challenges enable users to create robust searches, § Use the following commands and their functions:
reports and charts. o eval
o filnull
Course Topics o search
§ Search Fundamentals o where
§ Transforming Commands Module 6 – Correlating Events
o Deriving Statistics § Identify transactions
o Creating Visualizations § Group events using fields
o Enriching Visualizations § Group events using fields and time
§ Manipulating  and  Filtering  Results § Search with transactions
§ Correlating Events § Report on transactions
§ Determine when to use transactions vs. stats
Course Prerequisites
§ Splunk Tutorial (e-learning), Using Splunk 6 OR About Splunk Education
§ Equivalent Splunk experience.
Splunk classes are designed for specific roles such as Splunk
Class Format Administrator, Developer, User, Knowledge Manager, or Architect.
Instructor-led lecture with labs. Delivered via virtual classroom or at Certification Tracks
your site. Our certification tracks provide comprehensive education for Splunk
Course Objectives customer and partner personnel according to their areas of
responsibility.
Module 1 – Search Fundamentals
§ Review basic search commands and general search practices To view all of Splunk Education's course offerings, or to register for a
§ Examine the anatomy of a search course, go to http://www.splunk.com/goto/education
§ Use the following commands to perform searches: To contact us, email Education_AMER@splunk.com
o tables  
About Splunk Splunk Inc.
o rename   Splunk is software that indexes, 250 Brannan
o fields   manages and enables you to search
San Francisco, CA 94107
data from any application, server or
o dedup   network device in real time. 866.GET.SPLUNK
o sort (866.438.7758)
Visit our website at www.splunk.com sales@splunk.com
Module 2 – Transforming Commands, P1: Deriving Statistics to download your own free copy. support@splunk.com
§ Use the following commands and their functions:
o top
o rare
o stats
Module 3 – Transforming Commands, P2: Creating Visualizations
§ Data  structure  requirements
§ Create and format basic charts
§ Create and format timecharts
Module 4 – Transforming Commands, P3: Enriching Visualizations
§ Use the following commands and their functions:
o trendline
o iplocation
o geostats
o geom
o single values
o addtotals

Splunk Education Services