*All lab exercises are run in a Linux environment. A Windows environment can be provided upon request. 

Part 1: Introduction to Splunk

1. What’s Splunk?
2. Authentication Methods
3. Access Controls & Users
4. Products, Licensing, and Costs
5. Quick Tour Guide: User Interface
6. Exercise: Lab Environment and Configuration

Part 2: Indexes

1. Splunk Data
2. What are Indexes?
3. What are Indexers?
4. Exercise: Create Your First Index
5. Search-Head
6. Index Clusters
7. Index Pipeline
8. Exercise: Upload Data Manually
9. Events
10. Fields & Field Extraction
11. Exercise: Using the Field Extractor Tool
12. Forwarders
13. Metrics
14. Exercise: Using the Forwarder to Send Data
15. Removing Data

Part 3: Splunk Architecture

1. Components of Splunk Deployments
2. Deployment Scenarios

Part 4: Search Processing Language

1. What is Search Processing Language (SPL)?
2. Searching Operators
3. Search Commands
4. Search Pipeline
5. Exercise: Search Examples
6. Subsearches
7. Commonly Used Search Commands
8. Exercise: Search Examples II
9. Drilldowns
10. Lookups
11. Exercise: Using Lookups
12. Optimize Searches
13. Exercise: Search Examples III

Part 5: Dashboard & Visualizations

1. Dashboards in Splunk
2. Creating Dashboards
3. Visualization Types
4. Search as Reports
5. Dashboards
6. Exercise: Creating a Dashboard
7. Drilldown
8. Forms
9. Exercise: Add Input Forms
10. Exercise: Drilldown

Part 6: Alerts

1. Creating Alerts
2. Scheduling Alerts
3. Alerts Notifications
4. Exercise: Creating Alerts

Part 7: Scheduled Reports

1. Creating Scheduled Reports
2. Exercise: Create a Scheduled Report

Part 8: Putting All Pieces Together

Exercise: As a final lab, you’ll configure a typical scenario when using Splunk. You'll install and configure an NGINX, then the Splunk forwarder to collect logs in Splunk. The idea is that you can apply everything you've learned within the Bootcamp: creating searches, visualizations, dashboards, etc.