Workshop Wednesdays

Enterprise Security is a modular, hands-on workshop designed to familiarise participants with how to investigate incidents using Splunk Enterprise and Splunk Enterprise Security.

This workshop provides users an opportunity to walk through multiple scenarios and see first-hand how Enterprise Security can be used from the creation of a notable event to investigate all the way to the raw event that identifies the adversary’s action. The workshop leverages the popular Boss of the SOC (BOTS) dataset and is laid out in an interactive format. Users will leave with a better understanding of how Splunk and Enterprise Security can be used to generate notable events and investigate them as they occur in the enterprise.

The Splunk SOAR Hands-On Workshop provides users an opportunity to explore Orchestration and Automation. With Splunk SOAR, you can automate tasks, orchestrate workflows, and support a broad range of SOC functions including event and case management, collaboration, and reporting.

Join our 3-hour workshop to experience the advantages that Splunk SOAR provides, and how you could apply these benefits to your organisation. The workshop will give you a detailed account of the Splunk SOAR software, and a brief on its most effective use cases.

Building on the content from 'Splunk4Rookies - Dashboard Studio', this workshop will help users learn how to configure tokens and interactivity, perform advanced source code editing, and apply performance best practices.

It is recommended that participants have previously attended a 'Splunk4Rookies - Dashboard Studio' workshop or has hands-on experience with Dashboard Studio.

Splunk4Ninjas - SPL Best Practices sessions are a great opportunity for you to deepen your existing Splunk skills in a matter of hours.
Attendees get lots of useful information including tips & tricks, best practices and practical examples on how to improve their SPL in our hands-on lab environment.

This workshop gives users hands-on experience working with Dashboard Studio.

Existing Splunk users will learn how to migrate existing Classic Dashboards to the newer Dashboard Studio environment. All users will experience dashboard creation, adding charts and icons to a dashboard, connecting queries to those objects, additional configuration options of those objects, and working with Scalable Vector Graphics (SVGs) to add some punch and polish.

Get insights into your applications and infrastructure in real-time with the help of the monitoring, analytics and response tools of the Splunk Observability Cloud.
These workshops are going to take you through the best-in-class observability platform for ingesting, monitoring, visualizing and analyzing metrics, traces and logs.

Splunk4Rookies sessions are a great opportunity for Splunk beginners to discover the value of Splunk, hands-on, in a matter of hours. The Splunk4Rookies for AWS takes attendees through a series of exercises designed to help them understand how to use Splunk with AWS data sources and how they can use it within their organization. They will explore some of the different AWS service data and go through different exercises that illustrate how to use Splunk to secure and monitor critical AWS environments and applications.

Splunk4Rookies:Security is focused on security, where attendees get an introduction to what Splunk is, how Splunk can be used specifically for security, and hands-on experience where they are given the task to create some Splunk dashboards in their own hosted Splunk instance based on Splunk Boss of the SOC (BOTS) data sources.

Business Service Insights Hands-On is a hands-on workshop in a fully functioning IT Service Intelligence (ITSI) and Splunk Enterprise lab environment.
This covers the fundamental concepts of ITSI, and gives attendees the opportunity to apply their learnings in a lab environment to investigate, and get to the root cause of, a real-world incident impacting a critical business service. Attendees will leave with a strong understanding of ITSI’s Service Monitoring capabilities and how this functionality can complement traditional Infrastructure Monitoring to provide Operations teams and Line-of-Business owners realtime, end-to-end visibility of the health of their critical business services, from both a technical and functional perspective.

Building Correlation Searches with Splunk Enterprise Security is a modular, hands-on workshop designed to familiarize participants with how to leverage Splunk to develop their own correlation searches.
This workshop provides users a way to gain familiarity with building correlation searches in Splunk, as well as introducing data models and the tstats command that can provide a user a method to further optimize their correlation searches. The workshop leverages the popular Boss of the SOC (BOTS) dataset with hands-on exercises that build on one another. Users will come away with a better understanding of how to build their own correlation searches in Splunk as well as how to customize their associated notable events to provide more immediate insights to their analysts.