Splunk 6 Knowledge Objects

Splunk 6 Knowledge Objects Prerequisites

Using Splunk
Searching and Reporting with Splunk

What You'll Get in Splunk 6 Knowledge Objects

What You'll Learn in Splunk 6 Knowledge Objects

No Certification Test Available For This Course

No Certification Test Available For This Course

Splunk 6 Knowledge Objects Outline

Course Outline

Module 1 - Introduction

• Overview of Buttercup Games Inc.
• Lab Environment

Module 2 - Implementing Knowledge Objects

• Describe the Common Information Model (CIM)
• Understand the relationship between the CIM and knowledge objects
• Define naming conventions
• Review permissions

Module 3 - Creating Lookups

• Describe lookups
• Create a lookup file and create a lookup definition
• Configure an automatic lookup

Module 4 - Creating Field Aliases and Calculated Fields

• Create and use field aliases
• Create and use calculated fields

Module 5 - Creating Field Extractions

• Perform regex field extractions using the Field Extractor (FX)
• Perform delimiter field extractions using the FX

Module 6 - Creating Tags and Event Types

• Create and use tags
• Describe event types and their uses
• Create an event type

Module 7 - Creating Workflow Actions

• Describe the function of GET, POST, and Search workflow actions
• Create a GET workflow action
• Create a Search workflow action

Module 8 - Creating Alerts and Scheduled Reports

• Describe alerts
• Create alerts
• View fired alerts
• Describe scheduled reports
• Configure scheduled reports

Module 9 - Creating and Using Macros

• Describe macros
• Create and use a basic macro
• Define arguments and variables for a macro
• Add and use arguments with a macro

Module 10 - Creating Data Models

• Describe the relationship between data models and pivot
• Identify data model attributes
• Create a data model
• Use a data model in pivot

Testimonials