I will post an update once I take the 'Power User' cert with my thoughts on that.Įdit: A tool to generate events for your Splunk lab: other things related to all of the above.Implementing CIM add-on for normalization.Creating data models/data model acceleration.Correlating events ('Transaction' command).Using transforming commands for visualizations.Fundamentals II is where you learn some of the fun stuff, like workflows, automatically correlating events, and making searches dynamic (or triggered/based off from alerts and/or other searches). Overall I would say I came out with way more knowledge than I went in with. So you have to be lazy to screw up the labs. With that said on day 1 they do give you the complete class PDF and both of the lab manuals (one standard, one with answers). The educator does review labs (you save queries and output as reports or dashboards for this reason) and if they think you missed the mark they will ask you to re-do the lab in question. Each day was 4:30 hours of instruction, walk through and 2-3 labs. The students are power users in this splunk app. The students are power users in this splunk app.Įach day was 4:30 hours of instruction, walk through and 2-3 labs. The class includes credentials to the splunk lab environment for the duration of the class, which is also populated with 4 million events from their fictional company (Buttercup Games).

The class includes credentials to the splunk lab environment for the duration of the class, which is also populated with ~4 million events from their fictional company (Buttercup Games). In my instance the trainer was formerly an internal splunk developer and REALLY knew this material inside and out. I just completed the 4 day 'Fundamentals II' splunk class, I have yet to take the certification that goes with this class but feel I can describe the class pretty well to give others an idea of what you can expect.Ĭlass delivery is 100% online, delivered with a live trainer.

Splunk fundamentals 1 exam prep