CST 03372 - Knowledge Management in IDS/IPS

Credits: 3

This course focuses on additional Splunk search commands as well as advanced use of knowledge objects. Major topics include advanced statistics and eval commands, advanced lookup topics, advanced alert actions, using regex and erex to extract fields, using spath to work with self-referencing data, creating nested macros and macros with event types, and accelerating reports and data models. This course directly maps to Splunk Fundamentals 3 Certification.

Prerequisite Courses: CST 03270 with a minimum grade of D-
Course Attributes: CAT, UGRD