This course is part of the Splunk Search Expert Specialization

4.7
stars
10 ratings
•
1 reviews

Splunk Instructor

Offered By

Splunk Search Expert SpecializationSplunk Inc.

About this Course

4,656 recent views

In this course, you will learn how to calculate co-occurrence between fields and analyze data from multiple datasets, increase your knowledge of searching and learn how to work with multivalue data. In addition, you will learn tips and tricks to improve search performance using accelerations.

Flexible deadlines

Reset deadlines in accordance to your schedule.

Shareable Certificate

Earn a Certificate upon completion

100% online

Start instantly and learn at your own schedule.

Course 3 of 3 in the

Splunk Search Expert Specialization

Beginner Level

Approx. 5 hours to complete

English

Subtitles: English

What you will learn

Use specific commands to calculate co-occurrence between fields and analyze data from multiple datasets.
Understand how components of a search are broken down and processed across the Splunk data pipeline and how to troubleshoot searches.
Manipulate, evaluate, and analyze multivalue data and create multivalue fields in search with multivalue eval commands and functions.
Improve search performance by understanding search best practices, accelerating repots and data models to optimize frequently accessed data.

Skills you will gain

Data Science
Business Analytics
Data Analysis
Big Data
Data Visualization (DataViz)

Flexible deadlines

Reset deadlines in accordance to your schedule.

Shareable Certificate

Earn a Certificate upon completion

100% online

Start instantly and learn at your own schedule.

Course 3 of 3 in the

Splunk Search Expert Specialization

Beginner Level

Approx. 5 hours to complete

English

Subtitles: English

Instructor

Splunk Instructor

Splunk Education

1,672 Learners

6 Courses

Offered by

Splunk Inc.

The Splunk platform is designed to remove the barriers between data and action, so that everyone thrives in the Data Age. We’re empowering IT, DevOps and security teams to transform their organizations with data from any source and on any timescale.

Syllabus - What you will learn from this course

Week

Week 1

1 hour to complete

Correlation Analysis

This module is for users who want to learn how to calculate co-occurrence between fields and analyze data from multiple datasets. Topics will focus on the transaction, append, appendcols, union, and join commands.

1 hour to complete

10 videos (Total 52 min), 2 readings, 1 quiz

Week

Week 2

1 hour to complete

Search Under the Hood

This eLearning module gives students additional insight into how Splunk processes searches. Students will learn about Splunk architecture, how components of a search are broken down and distributed across the pipeline, and how to troubleshoot searches when results are not returning as expected.

1 hour to complete

9 videos (Total 48 min), 2 readings, 1 quiz

Week

Week 3

1 hour to complete

Multivalve Fields

This module is for users who want to become experts on searching and manipulating multivalue data. Topics will focus on using multivalue eval functions and multivalue commands to create, evaluate, and analyze multivalue data.

1 hour to complete

20 videos (Total 67 min), 2 readings, 1 quiz

20 videos

Introduction26s

What are multivalue fields?8m

Spath Command14m

Spath Function1m

Multikv Command4m

List Function1m

Values Function1m

Transaction Command2m

Creating Multivalue Fields35s

Split Function2m

Makemv Command5m

Evaluating Multivalue Fields2m

Mvindex Function4m

Mvfilter Function1m

Manipulating Multivalue Data3m

Mvzip Function4m

Mvjoin Function1m

Mvmap Function1m

Mvappend Function2m

Mvexpand Command3m

2 readings

Learning Objectives5m

Lesson Notes5m

1 practice exercise

New Quiz5m

Week

Week 4

1 hour to complete

Search Optimization

This module is for users who want to improve search performance. Topics will cover how search modes affect performance, how to create an efficient basic search, how to accelerate reports and data models, and how to use the tstats command to quickly query data.

1 hour to complete

7 videos (Total 52 min), 2 readings, 1 quiz

Reviews

4.7

1 reviews

5 stars
76.92%
4 stars
23.07%

TOP REVIEWS FROM SPLUNK SEARCH EXPERT 103

by DPJun 15, 2022

Excellent materials, I totally recommend this course

View all reviews

About the Splunk Search Expert Specialization

By completing Search Expert 101, 102 & 103, you will be able to write efficient searches, perform correlations, create visualizations, and leverage subsearches and lookups. This course will also show you how to get started using your machine data to provide actionable reports and dashboards for your organization.

Frequently Asked Questions

When will I have access to the lectures and assignments?
Access to lectures and assignments depends on your type of enrollment. If you take a course in audit mode, you will be able to see most course materials for free. To access graded assignments and to earn a Certificate, you will need to purchase the Certificate experience, during or after your audit. If you don't see the audit option:
The course may not offer an audit option. You can try a Free Trial instead, or apply for Financial Aid.
The course may offer 'Full Course, No Certificate' instead. This option lets you see all course materials, submit required assessments, and get a final grade. This also means that you will not be able to purchase a Certificate experience.
What will I get if I subscribe to this Specialization?
When you enroll in the course, you get access to all of the courses in the Specialization, and you earn a certificate when you complete the work. Your electronic Certificate will be added to your Accomplishments page - from there, you can print your Certificate or add it to your LinkedIn profile. If you only want to read and view the course content, you can audit the course for free.
Is financial aid available?
Yes. In select learning programs, you can apply for financial aid or a scholarship if you can’t afford the enrollment fee. If fin aid or scholarship is available for your learning program selection, you’ll find a link to apply on the description page.

More questions? Visit the Learner Help Center.

Splunk Search Expert 103