Workshop Wednesdays

The Splunk SOAR Hands-On Workshop provides users an opportunity to explore Orchestration and Automation. With Splunk SOAR, you can automate tasks, orchestrate workflows, and support a broad range of SOC functions including event and case management, collaboration, and reporting.

Join our 3-hour workshop to experience the advantages that Splunk SOAR provides, and how you could apply these benefits to your organisation. The workshop will give you a detailed account of the Splunk SOAR software, and a brief on its most effective use cases.

Building on the content from 'Splunk4Rookies - Dashboard Studio', this workshop will help users learn how to configure tokens and interactivity, perform advanced source code editing, and apply performance best practices.

It is recommended that participants have previously attended a 'Splunk4Rookies - Dashboard Studio' workshop or has hands-on experience with Dashboard Studio.

This workshop gives users hands-on experience working with Dashboard Studio.

Existing Splunk users will learn how to migrate existing Classic Dashboards to the newer Dashboard Studio environment. All users will experience dashboard creation, adding charts and icons to a dashboard, connecting queries to those objects, additional configuration options of those objects, and working with Scalable Vector Graphics (SVGs) to add some punch and polish.

During this session, we will walk you through a series of exercises designed to teach you some basic ML techniques you can take back to work/home and use over and over.

Attendees will create their own ML Models, use them, and then repeat for a number of use cases across IT, Security and Business analytics.

Splunk4Rookies:Security is focused on security, where attendees get an introduction to what Splunk is, how Splunk can be used specifically for security, and hands-on experience where they are given the task to create some Splunk dashboards in their own hosted Splunk instance based on Splunk Boss of the SOC (BOTS) data sources.

Designed for Splunk beginners and anyone interested in getting hands-on experience working with machine data and gaining valuable Observability, Security, and Business Analytics insight from it.

This 3-hour workshop will provide an introduction to Splunk, along with hands-on experience creating a Splunk app and dashboard based on multiple use cases.

During this workshop, you will:
-Create your own Splunk distributed environment
-Collect and index data
-Perform searches
-Create interactive and dynamic dashboards for multiple use

Business Service Insights Hands-On is a hands-on workshop in a fully functioning IT Service Intelligence (ITSI) and Splunk Enterprise lab environment.
This covers the fundamental concepts of ITSI, and gives attendees the opportunity to apply their learnings in a lab environment to investigate, and get to the root cause of, a real-world incident impacting a critical business service. Attendees will leave with a strong understanding of ITSI’s Service Monitoring capabilities and how this functionality can complement traditional Infrastructure Monitoring to provide Operations teams and Line-of-Business owners realtime, end-to-end visibility of the health of their critical business services, from both a technical and functional perspective.

Get insights into your applications and infrastructure in real-time with the help of the monitoring, analytics and response tools of the Splunk Observability Cloud.
These workshops are going to take you through the best-in-class observability platform for ingesting, monitoring, visualizing and analyzing metrics, traces and logs.

Splunk4Ninjas - SPL Best Practices sessions are a great opportunity for you to deepen your existing Splunk skills in a matter of hours.
Attendees get lots of useful information including tips & tricks, best practices and practical examples on how to improve their SPL in our hands-on lab environment.

Security Essentials Hands-On is a modular, hands-on designed to familiarize participants with how to setup and use Security Essentials in multiple security scenarios.
The workshop leverages the popular Boss of the SOC (BOTS) dataset and is laid out in an interactive format. Users will leave with a better understanding of how Splunk and Security Essentials can be used to find security content, develop a content strategy, report on security progress and coverage as you would in a real environment.

Building Correlation Searches with Splunk Enterprise Security is a modular, hands-on workshop designed to familiarize participants with how to leverage Splunk to develop their own correlation searches.
This workshop provides users a way to gain familiarity with building correlation searches in Splunk, as well as introducing data models and the tstats command that can provide a user a method to further optimize their correlation searches. The workshop leverages the popular Boss of the SOC (BOTS) dataset with hands-on exercises that build on one another. Users will come away with a better understanding of how to build their own correlation searches in Splunk as well as how to customize their associated notable events to provide more immediate insights to their analysts.