Description Using external search in SOAR Sending events from Splunk to SOAR Updating Splunk events from SOAR Running SOAR reports on Splunk Executing SOAR playbooks from Splunk Searching Splunk from SOAR the SOAR instance for externalization Configure the Splunk instance for externalization Use the Splunk Splunk events into SOAR Use Splunk search from playbooks Update Splunk notable events Module 5 – Custom Enterprise Splunk Data Administration Enterprise Splunk System Administration Either Using or Administering

Splunk Enterprise Administrators Learn to install, configure, manage, and use the Splunk App for Enterprise This path is intended for Splunk Administrators that manage Splunk Enterprise Security deployments. Splunk Enterprise Administrators Track Courses Splunk Fundamentals 1 Splunk Fundamentals 2 Creating Dashboards with Splunk Splunk Fundamentals 3 Advanced Dashboards and Visualisations Splunk Enterprise System Administration Splunk Enterprise Data Administration Architecting Splunk Enterprise Deployments Administering Splunk

This Advanced Searching and Reporting Splunk Courses have been replaced by shorter Splunk single-subject Delivered via virtual classroom or at your site Course Prerequisites Splunk Fundamentals 1 Splunk Fundamentals 2 Splunk Fundamentals 3 Highly recommend 6 months experience with the Splunk search language Related Certifications Splunk Core Certified Advanced Power User Splunk Core Certified Consultant Advanced Searching command Regroup fields of search results using untable and xyseries Create a template for performing

Enterprise System Administration Splunk Enterprise Data Administration Splunk Cloud Administration Architecting Using IT Service Intelligence Using Enterprise Security Administering Enterprise Security Administering Enterprise Security : Starts Dec 16, 2024, 9:00am AEDT Price $1,500.00 Splunk Cloud Administration : Starts Dec 16, 2024, 9:00am AEDT Price $2,000.00 Architecting Splunk Enterprise Deployments : Starts Price $1,500.00 Troubleshooting Splunk Enterprise : Starts Dec 5, 2024, 9:00am AEDT Price $1,000.00 Using

Splunk Credit Value : 100 Duration : 4.5 hours over 2 days Time : 11:00 am - 2:30 pm AEST *Course discounts apply for Splunk Partners. Splunk Training Credits Submit Thanks for submitting! Participant, Splunk Enterprise Data Administration Developing SOAR (Phantom) Playbooks - Course Topics Automation best practices The visual playbook editor Using actions and decisions Using action results

Our Education Consultants can help - call or email us and we'll be in touch. When remitting payment in AUD via EFT, please use the following information: Account Name: Bluechip Infotech Place, Sydney NSW 2000 BSB: 064-012 Account: 1007-1197 When remitting payment in NZD via EFT, please use 062-000 Account Number: 20298816 SWIFT Code: CTBAAU2S When remitting payment in USD via EFT, please use Participant, Splunk Enterprise Data Administration

Application of Terms These booking terms and conditions alone will form part of the agreement between Should the course or event be fully booked applicants will be placed on a waiting list. Splunk Training Credits Vendor training credits (purchased directly through Splunk) can be applied to Splunk Credits are non-refundable and expire 12 months after date of purchase. Booking requests for Splunk Training Credits must be submitted in writing and approval from Vendor has

rights), trade secret rights, and other intellectual property rights recognised by the law of each applicable Where a credit note is available under a then applicable policy of Ingeniq, such adjustments shall be , sale or performance of the Goods notified by Ingeniq to the Buyer. 14.1.2. not make any representations The Buyer will comply fully with all applicable laws relating to export and re-export of the Goods and The Buyer shall bear the entire risk as to the quality and the performance of the Goods and Services.

This policy serves as an indication of which APPs directly apply to our organisation and how our privacy Use and disclosure We use the information provided by you and may save your transaction information in The applicant must provide proof of their identity to the satisfaction of Ingeniq. Web Site Terms and Conditions of Use Statement By using the Ingeniq web site (www.Ingeniq.com.au ), you The information collected is used in aggregate to analyse and improve our web sites performance and usability