CST 03372Knowledge Management in IDS/IPS

Catalog

This course focuses on additional Splunk search commands as well as advanced use of knowledge objects. Major topics include advanced statistics and eval commands, advanced lookup topics, advanced alert actions, using regex and erex to extract fields, using spath to work with self-referencing data, creating nested macros and macros with event types, and accelerating reports and data models. This course directly maps to Splunk Fundamentals 3 Certification.