Course structure available

Stage 11 · Monitoring, Logging & Observability

Splunk Complete Course

Master Splunk Enterprise from data ingestion, indexing, SPL, knowledge objects, dashboards, and alerting through distributed search, clustering, security, observability, automation, performance, upgrades, and production operations.

Browse curriculum View all chapters

SPL

50chapters

250lessons

Intermediatestarting level

Hands-onlearning mode

Course stateCurriculum ready

Course brief

A production-focused Splunk curriculum for machine-data ingestion, search, dashboards, alerting, distributed architecture, security, and enterprise-scale operations.

This course is organized as a progressive operational curriculum. Lesson files are reserved in the repository structure so future content can be added without changing URLs or navigation.

By the end

You will be able to

Ingest, parse, index, normalize, and search machine data effectively
Write production SPL for analysis, dashboards, alerts, and operational investigations
Design knowledge objects, data models, field extraction, and reusable search content
Operate forwarders, indexer clusters, search-head clusters, and distributed deployments
Secure, automate, monitor, scale, upgrade, back up, and recover Splunk Enterprise

Complete syllabus

50 chapters in prerequisite order.

The structure goes beyond a service catalog and includes architecture, identity, security, networking, delivery, observability, reliability, governance, automation, cost, troubleshooting, and production operations.

Chapter 1

Splunk Platform Foundations, Machine Data, Operational Intelligence, and Use Cases

5 lessons

Splunk Platform Foundations, Machine Data, Operational Intelligence, and Use Cases: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

Splunk Platform Foundations, Machine Data, Operational Intelligence, and Use Cases: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

Splunk Platform Foundations, Machine Data, Operational Intelligence, and Use Cases: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

Splunk Platform Foundations, Machine Data, Operational Intelligence, and Use Cases: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — Splunk Platform Foundations, Machine Data, Operational Intelligence, and Use CasesReserved in course structure

Planned

Chapter 2

Splunk Enterprise 10.0.x, Splunk Cloud Awareness, Editions, and Release Lifecycle

5 lessons

Splunk Enterprise 10.0.x, Splunk Cloud Awareness, Editions, and Release Lifecycle: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

Splunk Enterprise 10.0.x, Splunk Cloud Awareness, Editions, and Release Lifecycle: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

Splunk Enterprise 10.0.x, Splunk Cloud Awareness, Editions, and Release Lifecycle: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

Splunk Enterprise 10.0.x, Splunk Cloud Awareness, Editions, and Release Lifecycle: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — Splunk Enterprise 10.0.x, Splunk Cloud Awareness, Editions, and Release LifecycleReserved in course structure

Planned

Chapter 3

Installing Splunk Enterprise, Free/Trial Labs, First Login, and CLI Basics

5 lessons

Installing Splunk Enterprise, Free/Trial Labs, First Login, and CLI Basics: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

Installing Splunk Enterprise, Free/Trial Labs, First Login, and CLI Basics: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

Installing Splunk Enterprise, Free/Trial Labs, First Login, and CLI Basics: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

Installing Splunk Enterprise, Free/Trial Labs, First Login, and CLI Basics: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — Installing Splunk Enterprise, Free/Trial Labs, First Login, and CLI BasicsReserved in course structure

Planned

Chapter 4

Splunk Architecture: Search Heads, Indexers, Forwarders, Management, and Data Flow

5 lessons

Splunk Architecture: Search Heads, Indexers, Forwarders, Management, and Data Flow: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

Splunk Architecture: Search Heads, Indexers, Forwarders, Management, and Data Flow: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

Splunk Architecture: Search Heads, Indexers, Forwarders, Management, and Data Flow: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

Splunk Architecture: Search Heads, Indexers, Forwarders, Management, and Data Flow: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — Splunk Architecture: Search Heads, Indexers, Forwarders, Management, and Data FlowReserved in course structure

Planned

Chapter 5

Data Inputs, Sources, Sourcetypes, Hosts, Indexes, and Metadata

5 lessons

Data Inputs, Sources, Sourcetypes, Hosts, Indexes, and Metadata: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

Data Inputs, Sources, Sourcetypes, Hosts, Indexes, and Metadata: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

Data Inputs, Sources, Sourcetypes, Hosts, Indexes, and Metadata: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

Data Inputs, Sources, Sourcetypes, Hosts, Indexes, and Metadata: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — Data Inputs, Sources, Sourcetypes, Hosts, Indexes, and MetadataReserved in course structure

Planned

Chapter 6

Universal Forwarder, Heavy Forwarder, Deployment Patterns, and Forwarding Tiers

5 lessons

Universal Forwarder, Heavy Forwarder, Deployment Patterns, and Forwarding Tiers: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

Universal Forwarder, Heavy Forwarder, Deployment Patterns, and Forwarding Tiers: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

Universal Forwarder, Heavy Forwarder, Deployment Patterns, and Forwarding Tiers: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

Universal Forwarder, Heavy Forwarder, Deployment Patterns, and Forwarding Tiers: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — Universal Forwarder, Heavy Forwarder, Deployment Patterns, and Forwarding TiersReserved in course structure

Planned

Chapter 7

Forwarder Installation, inputs.conf, outputs.conf, Deployment Server, and Effective Configuration

5 lessons

Forwarder Installation, inputs.conf, outputs.conf, Deployment Server, and Effective Configuration: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

Forwarder Installation, inputs.conf, outputs.conf, Deployment Server, and Effective Configuration: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

Forwarder Installation, inputs.conf, outputs.conf, Deployment Server, and Effective Configuration: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

Forwarder Installation, inputs.conf, outputs.conf, Deployment Server, and Effective Configuration: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — Forwarder Installation, inputs.conf, outputs.conf, Deployment Server, and Effective ConfigurationReserved in course structure

Planned

Chapter 8

TCP/UDP Inputs, HTTP Event Collector, Files/Directories, and Scripted Inputs

5 lessons

TCP/UDP Inputs, HTTP Event Collector, Files/Directories, and Scripted Inputs: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

TCP/UDP Inputs, HTTP Event Collector, Files/Directories, and Scripted Inputs: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

TCP/UDP Inputs, HTTP Event Collector, Files/Directories, and Scripted Inputs: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

TCP/UDP Inputs, HTTP Event Collector, Files/Directories, and Scripted Inputs: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — TCP/UDP Inputs, HTTP Event Collector, Files/Directories, and Scripted InputsReserved in course structure

Planned

Chapter 9

HTTP Event Collector Tokens, Acknowledgement, Load Balancing, and Secure Ingestion

5 lessons

HTTP Event Collector Tokens, Acknowledgement, Load Balancing, and Secure Ingestion: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

HTTP Event Collector Tokens, Acknowledgement, Load Balancing, and Secure Ingestion: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

HTTP Event Collector Tokens, Acknowledgement, Load Balancing, and Secure Ingestion: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

HTTP Event Collector Tokens, Acknowledgement, Load Balancing, and Secure Ingestion: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — HTTP Event Collector Tokens, Acknowledgement, Load Balancing, and Secure IngestionReserved in course structure

Planned

Chapter 10

Event Processing Pipeline: Input, Parsing, Merging, Typing, Indexing, and Search

5 lessons

Event Processing Pipeline: Input, Parsing, Merging, Typing, Indexing, and Search: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

Event Processing Pipeline: Input, Parsing, Merging, Typing, Indexing, and Search: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

Event Processing Pipeline: Input, Parsing, Merging, Typing, Indexing, and Search: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

Event Processing Pipeline: Input, Parsing, Merging, Typing, Indexing, and Search: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — Event Processing Pipeline: Input, Parsing, Merging, Typing, Indexing, and SearchReserved in course structure

Planned

Chapter 11

props.conf, transforms.conf, Sourcetype Design, Line Breaking, and Timestamp Extraction

5 lessons

props.conf, transforms.conf, Sourcetype Design, Line Breaking, and Timestamp Extraction: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

props.conf, transforms.conf, Sourcetype Design, Line Breaking, and Timestamp Extraction: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

props.conf, transforms.conf, Sourcetype Design, Line Breaking, and Timestamp Extraction: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

props.conf, transforms.conf, Sourcetype Design, Line Breaking, and Timestamp Extraction: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — props.conf, transforms.conf, Sourcetype Design, Line Breaking, and Timestamp ExtractionReserved in course structure

Planned

Chapter 12

Index-Time vs Search-Time Processing, Trade-Offs, and Data Quality

5 lessons

Index-Time vs Search-Time Processing, Trade-Offs, and Data Quality: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

Index-Time vs Search-Time Processing, Trade-Offs, and Data Quality: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

Index-Time vs Search-Time Processing, Trade-Offs, and Data Quality: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

Index-Time vs Search-Time Processing, Trade-Offs, and Data Quality: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — Index-Time vs Search-Time Processing, Trade-Offs, and Data QualityReserved in course structure

Planned

Chapter 13

Indexes, Buckets, Hot/Warm/Cold/Frozen Data, Retention, and Storage Architecture

5 lessons

Indexes, Buckets, Hot/Warm/Cold/Frozen Data, Retention, and Storage Architecture: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

Indexes, Buckets, Hot/Warm/Cold/Frozen Data, Retention, and Storage Architecture: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

Indexes, Buckets, Hot/Warm/Cold/Frozen Data, Retention, and Storage Architecture: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

Indexes, Buckets, Hot/Warm/Cold/Frozen Data, Retention, and Storage Architecture: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — Indexes, Buckets, Hot/Warm/Cold/Frozen Data, Retention, and Storage ArchitectureReserved in course structure

Planned

Chapter 14

SmartStore Concepts, Remote Object Storage, Cache, and Data Tiering

5 lessons

SmartStore Concepts, Remote Object Storage, Cache, and Data Tiering: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

SmartStore Concepts, Remote Object Storage, Cache, and Data Tiering: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

SmartStore Concepts, Remote Object Storage, Cache, and Data Tiering: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

SmartStore Concepts, Remote Object Storage, Cache, and Data Tiering: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — SmartStore Concepts, Remote Object Storage, Cache, and Data TieringReserved in course structure

Planned

Chapter 15

Search Fundamentals, Search Pipeline, Time Range, Fields, and Search Modes

5 lessons

Search Fundamentals, Search Pipeline, Time Range, Fields, and Search Modes: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

Search Fundamentals, Search Pipeline, Time Range, Fields, and Search Modes: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

Search Fundamentals, Search Pipeline, Time Range, Fields, and Search Modes: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

Search Fundamentals, Search Pipeline, Time Range, Fields, and Search Modes: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — Search Fundamentals, Search Pipeline, Time Range, Fields, and Search ModesReserved in course structure

Planned

Chapter 16

SPL Foundations: search, fields, table, sort, dedup, rename, and eval

5 lessons

SPL Foundations: search, fields, table, sort, dedup, rename, and eval: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

SPL Foundations: search, fields, table, sort, dedup, rename, and eval: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

SPL Foundations: search, fields, table, sort, dedup, rename, and eval: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

SPL Foundations: search, fields, table, sort, dedup, rename, and eval: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — SPL Foundations: search, fields, table, sort, dedup, rename, and evalReserved in course structure

Planned

Chapter 17

Filtering, Comparison, Boolean Logic, Wildcards, CIDR, and Search Optimization

5 lessons

Filtering, Comparison, Boolean Logic, Wildcards, CIDR, and Search Optimization: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

Filtering, Comparison, Boolean Logic, Wildcards, CIDR, and Search Optimization: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

Filtering, Comparison, Boolean Logic, Wildcards, CIDR, and Search Optimization: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

Filtering, Comparison, Boolean Logic, Wildcards, CIDR, and Search Optimization: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — Filtering, Comparison, Boolean Logic, Wildcards, CIDR, and Search OptimizationReserved in course structure

Planned

Chapter 18

Transforming Commands: stats, chart, timechart, top, rare, and eventstats

5 lessons

Transforming Commands: stats, chart, timechart, top, rare, and eventstats: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

Transforming Commands: stats, chart, timechart, top, rare, and eventstats: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

Transforming Commands: stats, chart, timechart, top, rare, and eventstats: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

Transforming Commands: stats, chart, timechart, top, rare, and eventstats: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — Transforming Commands: stats, chart, timechart, top, rare, and eventstatsReserved in course structure

Planned

Chapter 19

eval Expressions, Functions, Case Logic, Multivalue Fields, and Data Transformation

5 lessons

eval Expressions, Functions, Case Logic, Multivalue Fields, and Data Transformation: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

eval Expressions, Functions, Case Logic, Multivalue Fields, and Data Transformation: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

eval Expressions, Functions, Case Logic, Multivalue Fields, and Data Transformation: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

eval Expressions, Functions, Case Logic, Multivalue Fields, and Data Transformation: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — eval Expressions, Functions, Case Logic, Multivalue Fields, and Data TransformationReserved in course structure

Planned

Chapter 20

rex, regex, erex, Field Extraction, and Search-Time Parsing

5 lessons

rex, regex, erex, Field Extraction, and Search-Time Parsing: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

rex, regex, erex, Field Extraction, and Search-Time Parsing: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

rex, regex, erex, Field Extraction, and Search-Time Parsing: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

rex, regex, erex, Field Extraction, and Search-Time Parsing: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — rex, regex, erex, Field Extraction, and Search-Time ParsingReserved in course structure

Planned

Chapter 21

Transaction, Streamstats, Delta, Accum, Autoregress, and Sequence Analysis

5 lessons

Transaction, Streamstats, Delta, Accum, Autoregress, and Sequence Analysis: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

Transaction, Streamstats, Delta, Accum, Autoregress, and Sequence Analysis: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

Transaction, Streamstats, Delta, Accum, Autoregress, and Sequence Analysis: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

Transaction, Streamstats, Delta, Accum, Autoregress, and Sequence Analysis: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — Transaction, Streamstats, Delta, Accum, Autoregress, and Sequence AnalysisReserved in course structure

Planned

Chapter 22

Lookups, CSV/KV Store Concepts, Automatic Lookups, and Data Enrichment

5 lessons

Lookups, CSV/KV Store Concepts, Automatic Lookups, and Data Enrichment: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

Lookups, CSV/KV Store Concepts, Automatic Lookups, and Data Enrichment: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

Lookups, CSV/KV Store Concepts, Automatic Lookups, and Data Enrichment: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

Lookups, CSV/KV Store Concepts, Automatic Lookups, and Data Enrichment: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — Lookups, CSV/KV Store Concepts, Automatic Lookups, and Data EnrichmentReserved in course structure

Planned

Chapter 23

Subsearches, Joins, Append, Map, Set Operations, and Search Design Trade-Offs

5 lessons

Subsearches, Joins, Append, Map, Set Operations, and Search Design Trade-Offs: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

Subsearches, Joins, Append, Map, Set Operations, and Search Design Trade-Offs: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

Subsearches, Joins, Append, Map, Set Operations, and Search Design Trade-Offs: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

Subsearches, Joins, Append, Map, Set Operations, and Search Design Trade-Offs: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — Subsearches, Joins, Append, Map, Set Operations, and Search Design Trade-OffsReserved in course structure

Planned

Chapter 24

Macros, Event Types, Tags, Workflow Actions, and Reusable Knowledge Objects

5 lessons

Macros, Event Types, Tags, Workflow Actions, and Reusable Knowledge Objects: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

Macros, Event Types, Tags, Workflow Actions, and Reusable Knowledge Objects: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

Macros, Event Types, Tags, Workflow Actions, and Reusable Knowledge Objects: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

Macros, Event Types, Tags, Workflow Actions, and Reusable Knowledge Objects: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — Macros, Event Types, Tags, Workflow Actions, and Reusable Knowledge ObjectsReserved in course structure

Planned

Chapter 25

Calculated Fields, Field Aliases, Search-Time Operations, and Knowledge Precedence

5 lessons

Calculated Fields, Field Aliases, Search-Time Operations, and Knowledge Precedence: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

Calculated Fields, Field Aliases, Search-Time Operations, and Knowledge Precedence: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

Calculated Fields, Field Aliases, Search-Time Operations, and Knowledge Precedence: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

Calculated Fields, Field Aliases, Search-Time Operations, and Knowledge Precedence: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — Calculated Fields, Field Aliases, Search-Time Operations, and Knowledge PrecedenceReserved in course structure

Planned

Chapter 26

Data Models, Accelerations, Pivot, CIM Concepts, and Normalized Analytics

5 lessons

Data Models, Accelerations, Pivot, CIM Concepts, and Normalized Analytics: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

Data Models, Accelerations, Pivot, CIM Concepts, and Normalized Analytics: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

Data Models, Accelerations, Pivot, CIM Concepts, and Normalized Analytics: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

Data Models, Accelerations, Pivot, CIM Concepts, and Normalized Analytics: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — Data Models, Accelerations, Pivot, CIM Concepts, and Normalized AnalyticsReserved in course structure

Planned

Chapter 27

tstats, mstats, Metrics Indexes, Accelerated Data Models, and Fast Analytics

5 lessons

tstats, mstats, Metrics Indexes, Accelerated Data Models, and Fast Analytics: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

tstats, mstats, Metrics Indexes, Accelerated Data Models, and Fast Analytics: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

tstats, mstats, Metrics Indexes, Accelerated Data Models, and Fast Analytics: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

tstats, mstats, Metrics Indexes, Accelerated Data Models, and Fast Analytics: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — tstats, mstats, Metrics Indexes, Accelerated Data Models, and Fast AnalyticsReserved in course structure

Planned

Chapter 28

Saved Searches, Reports, Scheduled Searches, and Search Scheduler Fundamentals

5 lessons

Saved Searches, Reports, Scheduled Searches, and Search Scheduler Fundamentals: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

Saved Searches, Reports, Scheduled Searches, and Search Scheduler Fundamentals: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

Saved Searches, Reports, Scheduled Searches, and Search Scheduler Fundamentals: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

Saved Searches, Reports, Scheduled Searches, and Search Scheduler Fundamentals: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — Saved Searches, Reports, Scheduled Searches, and Search Scheduler FundamentalsReserved in course structure

Planned

Chapter 29

Alerts, Trigger Conditions, Throttling, Actions, Webhooks, and Incident Workflows

5 lessons

Alerts, Trigger Conditions, Throttling, Actions, Webhooks, and Incident Workflows: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

Alerts, Trigger Conditions, Throttling, Actions, Webhooks, and Incident Workflows: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

Alerts, Trigger Conditions, Throttling, Actions, Webhooks, and Incident Workflows: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

Alerts, Trigger Conditions, Throttling, Actions, Webhooks, and Incident Workflows: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — Alerts, Trigger Conditions, Throttling, Actions, Webhooks, and Incident WorkflowsReserved in course structure

Planned

Chapter 30

Dashboard Studio, Classic Dashboard Awareness, Tokens, Drilldowns, and Operational UX

5 lessons

Dashboard Studio, Classic Dashboard Awareness, Tokens, Drilldowns, and Operational UX: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

Dashboard Studio, Classic Dashboard Awareness, Tokens, Drilldowns, and Operational UX: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

Dashboard Studio, Classic Dashboard Awareness, Tokens, Drilldowns, and Operational UX: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

Dashboard Studio, Classic Dashboard Awareness, Tokens, Drilldowns, and Operational UX: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — Dashboard Studio, Classic Dashboard Awareness, Tokens, Drilldowns, and Operational UXReserved in course structure

Planned

Chapter 31

Dashboard Studio JSON, Inputs, Conditional Visibility, and Advanced Visualization

5 lessons

Dashboard Studio JSON, Inputs, Conditional Visibility, and Advanced Visualization: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

Dashboard Studio JSON, Inputs, Conditional Visibility, and Advanced Visualization: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

Dashboard Studio JSON, Inputs, Conditional Visibility, and Advanced Visualization: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

Dashboard Studio JSON, Inputs, Conditional Visibility, and Advanced Visualization: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — Dashboard Studio JSON, Inputs, Conditional Visibility, and Advanced VisualizationReserved in course structure

Planned

Chapter 32

Splunk Apps, Add-ons, Splunkbase, Packaging, app.conf, and Configuration Layering

5 lessons

Splunk Apps, Add-ons, Splunkbase, Packaging, app.conf, and Configuration Layering: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

Splunk Apps, Add-ons, Splunkbase, Packaging, app.conf, and Configuration Layering: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

Splunk Apps, Add-ons, Splunkbase, Packaging, app.conf, and Configuration Layering: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

Splunk Apps, Add-ons, Splunkbase, Packaging, app.conf, and Configuration Layering: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — Splunk Apps, Add-ons, Splunkbase, Packaging, app.conf, and Configuration LayeringReserved in course structure

Planned

Chapter 33

REST API, Search API v2, Authentication, Jobs, Results, and Automation

5 lessons

REST API, Search API v2, Authentication, Jobs, Results, and Automation: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

REST API, Search API v2, Authentication, Jobs, Results, and Automation: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

REST API, Search API v2, Authentication, Jobs, Results, and Automation: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

REST API, Search API v2, Authentication, Jobs, Results, and Automation: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — REST API, Search API v2, Authentication, Jobs, Results, and AutomationReserved in course structure

Planned

Chapter 34

Splunk SDKs, Python Integration, Custom Commands Concepts, and Application Automation

5 lessons

Splunk SDKs, Python Integration, Custom Commands Concepts, and Application Automation: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

Splunk SDKs, Python Integration, Custom Commands Concepts, and Application Automation: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

Splunk SDKs, Python Integration, Custom Commands Concepts, and Application Automation: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

Splunk SDKs, Python Integration, Custom Commands Concepts, and Application Automation: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — Splunk SDKs, Python Integration, Custom Commands Concepts, and Application AutomationReserved in course structure

Planned

Chapter 35

Authentication, Native Users, LDAP, SAML, MFA, Tokens, and Role-Based Access

5 lessons

Authentication, Native Users, LDAP, SAML, MFA, Tokens, and Role-Based Access: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

Authentication, Native Users, LDAP, SAML, MFA, Tokens, and Role-Based Access: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

Authentication, Native Users, LDAP, SAML, MFA, Tokens, and Role-Based Access: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

Authentication, Native Users, LDAP, SAML, MFA, Tokens, and Role-Based Access: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — Authentication, Native Users, LDAP, SAML, MFA, Tokens, and Role-Based AccessReserved in course structure

Planned

Chapter 36

TLS, mTLS, Certificates, FIPS 140-3 Awareness, and Secure Distributed Communication

5 lessons

TLS, mTLS, Certificates, FIPS 140-3 Awareness, and Secure Distributed Communication: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

TLS, mTLS, Certificates, FIPS 140-3 Awareness, and Secure Distributed Communication: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

TLS, mTLS, Certificates, FIPS 140-3 Awareness, and Secure Distributed Communication: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

TLS, mTLS, Certificates, FIPS 140-3 Awareness, and Secure Distributed Communication: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — TLS, mTLS, Certificates, FIPS 140-3 Awareness, and Secure Distributed CommunicationReserved in course structure

Planned

Chapter 37

Roles, Capabilities, Index Restrictions, Search Filters, and Fine-Grained Access

5 lessons

Roles, Capabilities, Index Restrictions, Search Filters, and Fine-Grained Access: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

Roles, Capabilities, Index Restrictions, Search Filters, and Fine-Grained Access: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

Roles, Capabilities, Index Restrictions, Search Filters, and Fine-Grained Access: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

Roles, Capabilities, Index Restrictions, Search Filters, and Fine-Grained Access: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — Roles, Capabilities, Index Restrictions, Search Filters, and Fine-Grained AccessReserved in course structure

Planned

Chapter 38

Sensitive Data, Field Filters, Masking, Anonymization, and Privacy Controls

5 lessons

Sensitive Data, Field Filters, Masking, Anonymization, and Privacy Controls: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

Sensitive Data, Field Filters, Masking, Anonymization, and Privacy Controls: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

Sensitive Data, Field Filters, Masking, Anonymization, and Privacy Controls: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

Sensitive Data, Field Filters, Masking, Anonymization, and Privacy Controls: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — Sensitive Data, Field Filters, Masking, Anonymization, and Privacy ControlsReserved in course structure

Planned

Chapter 39

Audit Logs, Internal Indexes, Configuration Changes, and Compliance Evidence

5 lessons

Audit Logs, Internal Indexes, Configuration Changes, and Compliance Evidence: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

Audit Logs, Internal Indexes, Configuration Changes, and Compliance Evidence: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

Audit Logs, Internal Indexes, Configuration Changes, and Compliance Evidence: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

Audit Logs, Internal Indexes, Configuration Changes, and Compliance Evidence: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — Audit Logs, Internal Indexes, Configuration Changes, and Compliance EvidenceReserved in course structure

Planned

Chapter 40

Indexer Clustering, Replication Factor, Search Factor, Manager Node, and Peers

5 lessons

Indexer Clustering, Replication Factor, Search Factor, Manager Node, and Peers: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

Indexer Clustering, Replication Factor, Search Factor, Manager Node, and Peers: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

Indexer Clustering, Replication Factor, Search Factor, Manager Node, and Peers: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

Indexer Clustering, Replication Factor, Search Factor, Manager Node, and Peers: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — Indexer Clustering, Replication Factor, Search Factor, Manager Node, and PeersReserved in course structure

Planned

Chapter 41

Search Head Clustering, Captain, Members, Deployer, Knowledge Replication, and HA

5 lessons

Search Head Clustering, Captain, Members, Deployer, Knowledge Replication, and HA: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

Search Head Clustering, Captain, Members, Deployer, Knowledge Replication, and HA: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

Search Head Clustering, Captain, Members, Deployer, Knowledge Replication, and HA: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

Search Head Clustering, Captain, Members, Deployer, Knowledge Replication, and HA: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — Search Head Clustering, Captain, Members, Deployer, Knowledge Replication, and HAReserved in course structure

Planned

Chapter 42

Distributed Search, Search Peers, Federated Search, and Multi-Site Architectures

5 lessons

Distributed Search, Search Peers, Federated Search, and Multi-Site Architectures: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

Distributed Search, Search Peers, Federated Search, and Multi-Site Architectures: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

Distributed Search, Search Peers, Federated Search, and Multi-Site Architectures: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

Distributed Search, Search Peers, Federated Search, and Multi-Site Architectures: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — Distributed Search, Search Peers, Federated Search, and Multi-Site ArchitecturesReserved in course structure

Planned

Chapter 43

Multi-Site Indexer Clusters, Site Affinity, Disaster Domains, and Resilience

5 lessons

Multi-Site Indexer Clusters, Site Affinity, Disaster Domains, and Resilience: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

Multi-Site Indexer Clusters, Site Affinity, Disaster Domains, and Resilience: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

Multi-Site Indexer Clusters, Site Affinity, Disaster Domains, and Resilience: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

Multi-Site Indexer Clusters, Site Affinity, Disaster Domains, and Resilience: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — Multi-Site Indexer Clusters, Site Affinity, Disaster Domains, and ResilienceReserved in course structure

Planned

Chapter 44

Monitoring Console, introspection, metrics.log, health checks, and Platform Observability

5 lessons

Monitoring Console, introspection, metrics.log, health checks, and Platform Observability: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

Monitoring Console, introspection, metrics.log, health checks, and Platform Observability: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

Monitoring Console, introspection, metrics.log, health checks, and Platform Observability: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

Monitoring Console, introspection, metrics.log, health checks, and Platform Observability: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — Monitoring Console, introspection, metrics.log, health checks, and Platform ObservabilityReserved in course structure

Planned

Chapter 45

Search Performance, Scheduler Concurrency, Workload Management, and Resource Controls

5 lessons

Search Performance, Scheduler Concurrency, Workload Management, and Resource Controls: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

Search Performance, Scheduler Concurrency, Workload Management, and Resource Controls: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

Search Performance, Scheduler Concurrency, Workload Management, and Resource Controls: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

Search Performance, Scheduler Concurrency, Workload Management, and Resource Controls: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — Search Performance, Scheduler Concurrency, Workload Management, and Resource ControlsReserved in course structure

Planned

Chapter 46

Indexing Performance, Queues, Throughput, Parallel Ingestion, and Capacity Planning

5 lessons

Indexing Performance, Queues, Throughput, Parallel Ingestion, and Capacity Planning: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

Indexing Performance, Queues, Throughput, Parallel Ingestion, and Capacity Planning: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

Indexing Performance, Queues, Throughput, Parallel Ingestion, and Capacity Planning: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

Indexing Performance, Queues, Throughput, Parallel Ingestion, and Capacity Planning: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — Indexing Performance, Queues, Throughput, Parallel Ingestion, and Capacity PlanningReserved in course structure

Planned

Chapter 47

OpenTelemetry Collectors, Edge Processor, Modern Ingestion, Filtering, and Routing

5 lessons

OpenTelemetry Collectors, Edge Processor, Modern Ingestion, Filtering, and Routing: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

OpenTelemetry Collectors, Edge Processor, Modern Ingestion, Filtering, and Routing: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

OpenTelemetry Collectors, Edge Processor, Modern Ingestion, Filtering, and Routing: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

OpenTelemetry Collectors, Edge Processor, Modern Ingestion, Filtering, and Routing: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — OpenTelemetry Collectors, Edge Processor, Modern Ingestion, Filtering, and RoutingReserved in course structure

Planned

Chapter 48

Backup, Restore, Cluster Recovery, Configuration Recovery, and Disaster Planning

5 lessons

Backup, Restore, Cluster Recovery, Configuration Recovery, and Disaster Planning: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

Backup, Restore, Cluster Recovery, Configuration Recovery, and Disaster Planning: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

Backup, Restore, Cluster Recovery, Configuration Recovery, and Disaster Planning: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

Backup, Restore, Cluster Recovery, Configuration Recovery, and Disaster Planning: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — Backup, Restore, Cluster Recovery, Configuration Recovery, and Disaster PlanningReserved in course structure

Planned

Chapter 49

Upgrades, Rolling Cluster Upgrades, App Compatibility, Python 3.9, and 9.x-to-10.x Migration

5 lessons

Upgrades, Rolling Cluster Upgrades, App Compatibility, Python 3.9, and 9.x-to-10.x Migration: Concepts, Vocabulary, and Mental ModelReserved in course structure

Planned

Upgrades, Rolling Cluster Upgrades, App Compatibility, Python 3.9, and 9.x-to-10.x Migration: Guided Configuration and Hands-On WorkflowReserved in course structure

Planned

Upgrades, Rolling Cluster Upgrades, App Compatibility, Python 3.9, and 9.x-to-10.x Migration: Architecture Patterns, Trade-Offs, and Production DecisionsReserved in course structure

Planned

Upgrades, Rolling Cluster Upgrades, App Compatibility, Python 3.9, and 9.x-to-10.x Migration: Security, Diagnostics, Failure Modes, and TroubleshootingReserved in course structure

Planned

Checkpoint Lab — Upgrades, Rolling Cluster Upgrades, App Compatibility, Python 3.9, and 9.x-to-10.x MigrationReserved in course structure

Planned

Chapter 50

Production Capstone: Design, Secure, Scale, Search, Observe, Upgrade, and Recover Splunk Enterprise

5 lessons

Capstone Requirements, Architecture, SLOs, Threat Model, and Success CriteriaReserved in course structure

Planned

Build the End-to-End Production Environment and Delivery WorkflowReserved in course structure

Planned

Integrate Security, Governance, Observability, Cost Controls, and AutomationReserved in course structure

Planned

Inject Failures, Diagnose Behavior, Recover Safely, and Verify ResilienceReserved in course structure

Planned

Final Validation, Runbook, Operational Handoff, and Improvement BacklogReserved in course structure

Planned

Keep the academy open

Support free, practical DevOps education.

Every lesson is designed to remain readable in a browser, downloadable from GitHub, and usable without a paid learning platform. Contributions help expand and maintain the curriculum.

Ethereum / ERC-20

0x716c4Ab160C4B66F31a28AE2448BfF68fc3a2ef0Send only Ethereum/ERC-20 compatible assets to this address.

Splunk Complete Course

A production-focused Splunk curriculum for machine-data ingestion, search, dashboards, alerting, distributed architecture, security, and enterprise-scale operations.

You will be able to

50 chapters in prerequisite order.

Splunk Platform Foundations, Machine Data, Operational Intelligence, and Use Cases

Splunk Enterprise 10.0.x, Splunk Cloud Awareness, Editions, and Release Lifecycle

Installing Splunk Enterprise, Free/Trial Labs, First Login, and CLI Basics

Splunk Architecture: Search Heads, Indexers, Forwarders, Management, and Data Flow

Data Inputs, Sources, Sourcetypes, Hosts, Indexes, and Metadata

Universal Forwarder, Heavy Forwarder, Deployment Patterns, and Forwarding Tiers

Forwarder Installation, inputs.conf, outputs.conf, Deployment Server, and Effective Configuration

TCP/UDP Inputs, HTTP Event Collector, Files/Directories, and Scripted Inputs

HTTP Event Collector Tokens, Acknowledgement, Load Balancing, and Secure Ingestion

Event Processing Pipeline: Input, Parsing, Merging, Typing, Indexing, and Search

props.conf, transforms.conf, Sourcetype Design, Line Breaking, and Timestamp Extraction

Index-Time vs Search-Time Processing, Trade-Offs, and Data Quality

Indexes, Buckets, Hot/Warm/Cold/Frozen Data, Retention, and Storage Architecture

SmartStore Concepts, Remote Object Storage, Cache, and Data Tiering

Search Fundamentals, Search Pipeline, Time Range, Fields, and Search Modes

SPL Foundations: search, fields, table, sort, dedup, rename, and eval

Filtering, Comparison, Boolean Logic, Wildcards, CIDR, and Search Optimization

Transforming Commands: stats, chart, timechart, top, rare, and eventstats

eval Expressions, Functions, Case Logic, Multivalue Fields, and Data Transformation

rex, regex, erex, Field Extraction, and Search-Time Parsing

Transaction, Streamstats, Delta, Accum, Autoregress, and Sequence Analysis

Lookups, CSV/KV Store Concepts, Automatic Lookups, and Data Enrichment

Subsearches, Joins, Append, Map, Set Operations, and Search Design Trade-Offs

Macros, Event Types, Tags, Workflow Actions, and Reusable Knowledge Objects

Calculated Fields, Field Aliases, Search-Time Operations, and Knowledge Precedence

Data Models, Accelerations, Pivot, CIM Concepts, and Normalized Analytics

tstats, mstats, Metrics Indexes, Accelerated Data Models, and Fast Analytics

Saved Searches, Reports, Scheduled Searches, and Search Scheduler Fundamentals

Alerts, Trigger Conditions, Throttling, Actions, Webhooks, and Incident Workflows

Dashboard Studio, Classic Dashboard Awareness, Tokens, Drilldowns, and Operational UX

Dashboard Studio JSON, Inputs, Conditional Visibility, and Advanced Visualization

Splunk Apps, Add-ons, Splunkbase, Packaging, app.conf, and Configuration Layering

REST API, Search API v2, Authentication, Jobs, Results, and Automation

Splunk SDKs, Python Integration, Custom Commands Concepts, and Application Automation

Authentication, Native Users, LDAP, SAML, MFA, Tokens, and Role-Based Access

TLS, mTLS, Certificates, FIPS 140-3 Awareness, and Secure Distributed Communication

Roles, Capabilities, Index Restrictions, Search Filters, and Fine-Grained Access

Sensitive Data, Field Filters, Masking, Anonymization, and Privacy Controls

Audit Logs, Internal Indexes, Configuration Changes, and Compliance Evidence

Indexer Clustering, Replication Factor, Search Factor, Manager Node, and Peers

Search Head Clustering, Captain, Members, Deployer, Knowledge Replication, and HA

Distributed Search, Search Peers, Federated Search, and Multi-Site Architectures

Multi-Site Indexer Clusters, Site Affinity, Disaster Domains, and Resilience

Monitoring Console, introspection, metrics.log, health checks, and Platform Observability

Search Performance, Scheduler Concurrency, Workload Management, and Resource Controls

Indexing Performance, Queues, Throughput, Parallel Ingestion, and Capacity Planning

OpenTelemetry Collectors, Edge Processor, Modern Ingestion, Filtering, and Routing

Backup, Restore, Cluster Recovery, Configuration Recovery, and Disaster Planning

Upgrades, Rolling Cluster Upgrades, App Compatibility, Python 3.9, and 9.x-to-10.x Migration

Production Capstone: Design, Secure, Scale, Search, Observe, Upgrade, and Recover Splunk Enterprise

No lesson matches that search.

Support free, practical DevOps education.