Splunk Knowledge Objects: Analyze & Visualize Data

This course is part of Splunk Analytics & Visualization: From Data to Insights Specialization

Instructor: EDUCBA

Access provided by UNext Learning

5 modules

Gain insight into a topic and learn the fundamentals.

2 weeks to complete

at 10 hours a week

Flexible schedule

Learn at your own pace

5 modules

Gain insight into a topic and learn the fundamentals.

2 weeks to complete

at 10 hours a week

Flexible schedule

Learn at your own pace

What you'll learn

Create and manage Splunk knowledge objects and data models.
Implement lookups, regex extractions, and workflow actions.
Build automated alerts, dashboards, and pivot visualizations.

Skills you'll gain

Tools you'll learn

Details to know

Shareable certificate

Add to your LinkedIn profile

Assessments

20 assignments

Taught in English

See how employees at top companies are mastering in-demand skills

Learn more about Coursera for Business

logos of Petrobras, TATA, Danone, Capgemini, P&G and L'Oreal

Build your subject-matter expertise

This course is part of the Splunk Analytics & Visualization: From Data to Insights Specialization

When you enroll in this course, you'll also be enrolled in this Specialization.

Learn new concepts from industry experts
Gain a foundational understanding of a subject or tool
Develop job-relevant skills with hands-on projects
Earn a shareable career certificate

There are 5 modules in this course

By the end of this course, learners will be able to define Splunk knowledge objects, implement lookups, apply regex and delimiter-based field extractions, execute workflow actions, categorize data with tags and event types, design automated alerts, manage scheduled reports, develop dashboards, create reusable macros, and build accelerated data models with pivot visualizations.

This advanced-level course is designed for professionals who want to move beyond basic Splunk searches and analyze, enrich, and visualize data with precision. Participants will benefit by gaining practical, hands-on skills in transforming raw event data into structured insights, enabling faster investigations and more effective decision-making. What makes this course unique is its modular approach, where each section builds progressively from foundational knowledge objects to advanced data models and pivot analytics. Learners will not only master technical configurations but also understand how to optimize Splunk for scalable, real-world business use cases. Whether you are a data analyst, security professional, or IT operations specialist, this course empowers you to leverage Splunk as a strategic platform for operational intelligence.

This module introduces learners to the concept of Splunk knowledge objects, permissions, and the foundational role of lookups. Participants explore how knowledge objects enrich raw data, manage access, and provide consistent structures for efficient analysis.

What's included

12 videos4 assignments

12 videos Total 111 minutes

Introduction Splunk Knowledge Objects 11 minutes
Command Information Models in Splunk 3 minutes
Splunk Permissions Options 10 minutes
Splunk Lookups 8 minutes
Splunks Lookups Continues 9 minutes
How to Define a Lookups 9 minutes
Lookups Commands in Splunk 10 minutes
Automatic Lookups in Splunks 11 minutes
Time Based Lookups 8 minutes
Splunk Field Aliases 12 minutes
Splunk Calculated Fields 9 minutes
Introduction Splunk Field Extractions 12 minutes

4 assignments Total 60 minutes

Graded - Mastering Knowledge Objects Foundations 30 minutes
Getting Started with Knowledge Objects 10 minutes
Deep Dive into Lookups 10 minutes
Advanced Lookup Techniques 10 minutes

This module focuses on extracting fields from raw events using regex and delimiters, and enhancing searches with workflow actions. Learners practice parsing unstructured data and applying workflow actions to integrate Splunk with external systems.

What's included

12 videos4 assignments

12 videos Total 106 minutes

Field Extraction Regex Settings in Splunk 8 minutes
Field Extraction Regex Settings in Splunk Continues 9 minutes
Splunk Field Extraction Regex Sidebar 11 minutes
Splunk Field Extraction Regex Event Actions 11 minutes
Splunk Field Extractions Delimiters Settings Menu 10 minutes
Splunk Field Extractions Delimiters Settings Menu Continues 10 minutes
Splunk Field Extractions Delimiters Fields Sidebar 8 minutes
Splunk Field Extractions Delimiters Event Actions 7 minutes
Splunk Workflow Actions GET 8 minutes
Splunk Workflow Actions GET Continues 11 minutes
Splunk Workflow Actions POST 6 minutes
How to Create Post Action 7 minutes

4 assignments Total 60 minutes

Graded - Extracting and Enriching Data 30 minutes
Regex Field Extractions 10 minutes
Delimiter-Based Extractions 10 minutes
Workflow Actions Essentials 10 minutes

This module covers workflow search actions, tagging strategies, and event types for better classification of Splunk data. It also introduces alert fundamentals, enabling learners to detect, categorize, and respond to event conditions.

What's included

12 videos4 assignments

12 videos Total 103 minutes

Splunk workflow Actions Search 6 minutes
Example Splunk Workflow Actions Search 6 minutes
How to Create a Tag in Splunk 8 minutes
How to Use a Tag in Splunk 9 minutes
Unique Tag Object 7 minutes
How to Create Event type 11 minutes
Highlight Event Type Using Colors 10 minutes
Patterns Tab 9 minutes
Splunks Alters 11 minutes
Tiggers Conditions Splunks 9 minutes
Tiggers Action Alters 8 minutes
Tiggers Action Alters Continues 8 minutes

4 assignments Total 60 minutes

Graded - Workflow, Tagging & Event Types 30 minutes
Workflow Search and Actions 10 minutes
Event Types & Tagging Power 10 minutes
Splunk Alerts Fundamentals 10 minutes

This module enables learners to manage scheduled reports, design dashboards, and apply Splunk macros for efficient query reuse. Participants gain practical skills in reporting automation, dashboard visualization, and macro-driven search optimization.

What's included

12 videos4 assignments

12 videos Total 111 minutes

Alters using Patterns Tab 10 minutes
Splunk Scheduled Reports 11 minutes
Editing the Scheduled Reports 10 minutes
Managing Splunk Scheduled Reports 11 minutes
Managing Splunk Scheduled Reports Continues 12 minutes
Creating a Splunk Dash Board 11 minutes
Formats of Dashboard 6 minutes
HTML Dash Board 6 minutes
Splunk Macros 10 minutes
Splunk Macros with Arguments 12 minutes
Splunk Macros with Arguments Continues 9 minutes
Managing Splunk Macros 2 minutes

4 assignments Total 60 minutes

Graded - Reports, Dashboards & Macros 30 minutes
Alert Patterns & Scheduled Reports 10 minutes
Dashboards and Visualizations 10 minutes
Harnessing Macros 10 minutes

This module dives into Splunk data models, hierarchies, transactions, and pivots to create advanced analytical structures. Learners enhance reporting by leveraging accelerated data models and pivot visualizations to uncover actionable insights.