VIRTUAL
Learn by doing with Splunk experts. Hands-On Workshops are live virtual sessions that help you build practical skills through guided exercises, realistic scenarios, and hands-on work in a Splunk environment.
Choose from beginner, intermediate, and advanced topics across Splunk Platform, Security, Observability, dashboards, and AI resilience. Register for the session that fits your current experience, or select more than one to create your own learning path.
Sessions are start at 10.00 AM BST/11.00 AM CEST and vary between 3 and 4 hours in length.
What to expect?
Review the session descriptions below, choose your preferred date from the registration options, and reserve your place. These workshops are designed as hands-on taster sessions. Looking for official Splunk training? You can find more here.
| Workshop Title | Topic and Level | Details |
|---|---|---|
| Splunk4Rookies (3 hours) | Platform | Beginner | Go from Splunk Zero to Hero in 3 hours! Discover the value of Splunk hands-on in a matter of hours… Learn more Get hands-on with the Splunk platform in a supportive, guided environment. Through practical exercises, you will ingest data, create a Splunk app, run searches, and build an interactive dashboard. Along the way, you will explore how the same core platform supports use cases across IT operations, Security, DevOps, and business analytics.
What you’ll learn
Sessions are designed for Splunk beginners. Whether your organisation is just starting to consider using Splunk or you have just joined a team of Splunk users and need to understand the basics, Splunk4Rookies is for you! |
| Splunk4Rookies - Dashboard Studios (3 hours) | Platform | Beginner | Discover Splunk Dashboard Studio, along with hands-on experience creating a dashboard based on multiple use cases… Learn more Attendees get an introduction to Splunk Dashboard Studio and learn how to create clear, interactive data experiences in Dashboard Studio. You will build effective searches, configure foundational interactions, and apply practical design principles to create a functional dashboard from the ground up. The workshop focuses on turning results into a story users can understand and explore.
What you’ll learn
Target Audience Sessions are designed for individuals early in their Splunk journey. It is recommended that participants either attend a core Splunk4Rookies workshop first or have a small amount of previous Splunk experience. |
| Splunk4Rookies – Observability (3 hours) | Observability | Beginner | Experience an issue and discover how you can use Splunk Observability Cloud to troubleshoot and identify the root cause… Learn more Get hands-on with Splunk Observability Cloud and learn how modern teams use metrics, traces, and logs to understand application and infrastructure health. In a guided troubleshooting scenario, you will work with real-time telemetry generated from browser sessions, visualize performance, and identify the source of issues across digital experiences.
What you’ll learn
Target Audience The workshop is designed for DevOps and Site-Reliability Engineers, plus anyone else wanting to gain an understanding of Splunk Observability Cloud using a hands-on environment. This workshop is designed for people with little or no experience with Splunk Observability. |
| Splunk & AWS Observability Immersion Day (3 hours) | Observability | Beginner | Discover how Splunk Observability Cloud unifies metrics, traces, and logs across AWS services, containers, and applications… Learn more The cloud promises enormous opportunity, but realising it isn't simple. Hybrid infrastructure, ever-growing volumes of telemetry, and daily-evolving security risks make it harder than ever to know what's actually happening inside your environment. Observability is how you close that gap.
In this workshop, you'll see how Splunk Observability Cloud unifies metrics, traces, and logs across AWS services, containers, and applications to give you a single, real-time view of health and performance. Through expert-led demos and a guided workshop, you'll work with live telemetry, visualise service behaviour end to end, and troubleshoot a realistic incident to pinpoint root cause in minutes rather than hours. You'll also hear how Splunk and AWS work better together, and leave with practical tips for building a more agile, secure, and resilient future in the AWS Cloud. What you’ll learn
Target Audience This workshop is designed for DevOps engineers, Site Reliability Engineers, cloud and platform engineers, application developers, IT operations teams, and architects responsible for the performance and availability of workloads running on AWS. Technical leaders and managers evaluating an observability strategy will also find value in the demos and discussion. No prior experience with Splunk Observability Cloud is required — the hands-on environment is suited to people with little or no previous exposure. A general familiarity with AWS services and modern application architectures is helpful but not essential. |
| Investigating with Splunk (4 hours) | Security | Beginner | Gain experience searching in Splunk to answer specific questions related to an investigation… Learn more This workshop provides users a way to gain experience searching in Splunk to answer specific questions related to an investigation. Users will leave with a better understanding of how Splunk can be used to investigate in their enterprise.
Target Audience This workshop is ideal for individuals who are new to Splunk and are part of a Security Operations team responsible for security monitoring and incident response. |
| Splunk4Rookies – Machine Learning for Security (3 hours) | Security | Beginner | Explore AI in Splunk and how you can use it within your organisation for IT Security… Learn more Splunk4Rookies sessions are a great opportunity for you to discover the value of Splunk hands-on in a matter of hours. Attendees get an introduction to Splunk AI, along with hands-on experience utilising machine learning in Splunk for multiple use cases.
During a session, we will walk you through a series of exercises designed to get you to a point where you understand AI in Splunk and how you can use it within your organisation for IT Security. Attendees will get to solve multiple different use-cases using a mixture of capabilities in Splunk. Target Audience Whether your organisation is just starting to consider using AI or you have just joined a team of Splunk users and need to understand the basics, Splunk4Rookies - ML for Security is for you! |
| Splunk4Rookies - Platform AI (3 hours) | Platform | Beginners | Bridge the gap between cutting-edge AI innovation and your core data platform… Learn more The AI revolution is here, but are you ready to operationalize it? This session explores AI from both sides of the resilience challenge: using AI to accelerate work in Splunk and using Splunk to monitor and secure AI-powered systems. In guided exercises, you will build Model Context Protocol connections, use AI assistance to accelerate SPL development, and examine the operational and security practices required for responsible AI deployment.
What you’ll learn
Target Audience Whether you are new to Splunk or a seasoned user, this workshop is ideal for IT and security analysts that are ready to bridge the gap between AI curiosity and real-world, enterprise-grade application. For this session you will need a basic understanding of AI & MCP.. |
| Workshop Title | Topic and Level | Details |
|---|---|---|
| Enterprise Security 8 (4 hours) | Security | Intermediate | Explore how Splunk, Enterprise Security, and SOAR can be used to generate findings and investigate them as they occur… Learn more Go deeper into Splunk Enterprise Security 8 through a realistic analyst workflow. You will navigate the redesigned experience, manage notable events, author detections, and investigate adversary activity with and without automation. The lab follows the incident lifecycle from initial detection through investigation and response, including integrated SOAR capabilities.
What you’ll learn
Target Audience This workshop is ideal for individuals who are already familiar with Splunk and are on a Security Operations team responsible for threat detection and incident response. |
| SOAR (4 hours) | Security | Intermediate | Experience how Splunk SOAR can streamline the incident lifecycle through orchestration and automation… Learn more Experience how Splunk SOAR can streamline the incident lifecycle through orchestration and automation. Using a realistic scenario, you will work with incidents, cases, and artifacts; enrich alerts automatically; and apply standard operating procedures from initial notable event through resolution. The lab emphasizes where automation can improve consistency and analyst speed.
What you’ll learn
Target Audience The workshop is designed for all personas on a Security Operations team responsible for security monitoring and incident response. Some understanding of Splunk is recommended. |
| Splunk4Ninjas – Tokenomics Fundamentals (2 hours) | Observability | Intermediate | Ensure that you are getting token utilization feedback across the entire cycle of your AI applications… Learn more As AI agents move from experimental prototypes to critical business workflows, the "black box" of token consumption has become a primary concern for engineering teams. Unchecked token usage doesn't just inflate cloud bills; it obscures the relationship between infrastructure spend and actual model performance. To truly scale, practitioners need more than just high-level dashboards, they need the ability to correlate granular tokenomics with specific agent behaviors and business outcomes.
In this hands-on session, we will understand how to bring value to token usage so that outcomes remain positive while costs become controllable. We will work through reasons for token inefficiency, how to address them with Splunk Agent Observability (powered by Galileo), and how to ensure that you are getting token utilization feedback across the entire cycle of your AI applications. What you’ll learn
|
| Splunk Data Management (4 hours) | Platform | Intermediate | Uncover how Splunk Data Management puts flexibility and control in your hands to accelerate your data and security… Learn more Discover how Splunk Data Management puts flexibility and control in your hands to accelerate your data and security projects.
This workshop will allow you to discover all the possibilities offered by Ingest Actions (IA), Edge Processor (EP), and Ingest Processor (IP), and how these features enable you to quickly manage your data as it's transmitted to Splunk. You'll learn how to use these tools from a web browser and how to filter, mask, transform, enrich, and route your data to multiple destinations. Target Audience
|
| Splunk4Ninjas – Dashboard Studio (4 hours) | Platform | Intermediate | Delve into advanced dashboard configuration and discover performance best practices… Learn more During this workshop we will walk you through a series of exercises designed to help you understand advanced dashboard configuration, including configuring tokens and interactivity, performing advanced source code editing, and applying performance best practices.
What you’ll learn
Target Audience Sessions are designed for people who have hands-on experience with Dashboard Studio or who have already attended a Splunk4Rookies - Dashboard Studio workshop. |
| Splunk4Ninjas – SPL Best Practices (3 hours) | Platform | Intermediate/Advanced | Discover tips & tricks, best practices and practical examples on how to improve your SPL… Learn more SPL best practices sessions are a great opportunity for you to deepen your existing Splunk skills in a matter of hours. Attendees benefit from lots of useful information including tips & tricks, best practices and practical examples on how to improve their SPL in our hands-on lab environment.
During the session, we will show you how to write better and efficient searches. We’ll share some useful tips & tricks, deal with complex data sets, different commands, macros, multi-value fields, regex and we will provide you with useful resources at the end of the session as well as cover Q&A. Target Audience Sessions are designed for experienced Splunk users looking to take their skills to the next level. |
