Workshop Wednesdays

The Splunk SOAR Hands-On Workshop provides users an opportunity to explore Orchestration and Automation. With Splunk SOAR, you can automate tasks, orchestrate workflows, and support a broad range of SOC functions including event and case management, collaboration, and reporting. Join our 3-hour workshop to experience the advantages that Splunk SOAR provides, and how you could apply these benefits to your organisation. The workshop will give you a detailed account of the Splunk SOAR software, and a brief on its most effective use cases.

Designed for Splunk beginners and anyone interested in getting hands-on experience working with machine data and gaining valuable Observability, Security, and Business Analytics insight from it.
This 3-hour workshop will provide an introduction to Splunk, along with hands-on experience creating a Splunk app and dashboard based on multiple use cases.

This workshop gives users hands-on experience working with Dashboard Studio. Existing Splunk users will learn how to migrate existing Classic Dashboards to the newer Dashboard Studio environment. All users will experience dashboard creation, adding charts and icons to a dashboard, connecting queries to those objects, additional configuration options of those objects, and working with Scalable Vector Graphics (SVGs) to add some punch and polish.

Get insights into your applications and infrastructure in real-time with the help of the monitoring, analytics and response tools of the Splunk Observability Cloud.
These workshops are going to take you through the best-in-class observability platform for ingesting, monitoring, visualizing and analyzing metrics, traces and logs.

Splunk4Rookies:Security is focused on security, where attendees get an introduction to what Splunk is, how Splunk can be used specifically for security, and hands-on experience where they are given the task to create some Splunk dashboards in their own hosted Splunk instance based on Splunk Boss of the SOC (BOTS) data sources.

Enterprise Security is a modular, hands-on workshop designed to familiarise participants with how to investigate incidents using Splunk Enterprise and Splunk Enterprise Security. This workshop provides users an opportunity to walk through multiple scenarios and see first-hand how Enterprise Security can be used from the creation of a notable event to investigate all the way to the raw event that identifies the adversary’s action. The workshop leverages the popular Boss of the SOC (BOTS) dataset and is laid out in an interactive format. Users will leave with a better understanding of how Splunk and Enterprise Security can be used to generate notable events and investigate them as they occur in the enterprise.

During this session, we will walk you through a series of exercises designed to teach you some basic ML techniques you can take back to work/home and use over and over. Attendees will create their own ML Models, use them, and then repeat for a number of use cases across IT, Security and Business analytics.

Building on the content from 'Splunk4Rookies - Dashboard Studio', this workshop will help users learn how to configure tokens and interactivity, perform advanced source code editing, and apply performance best practices.

It is recommended that participants have previously attended a 'Splunk4Rookies - Dashboard Studio' workshop or has hands-on experience with Dashboard Studio.

Splunk4Ninjas - SPL Best Practices sessions are a great opportunity for you to deepen your existing Splunk skills in a matter of hours.Attendees gets lots of useful information including tips & tricks, best practices and practical examples on how to improve their SPL in our hands-on lab environment.