This two-day course is for administrators new to Splunk Cloud and those wanting to become more experienced in managing Splunk Cloud instances. It provides the opportunity to gain the skills, knowledge, and best practices for data management and system configuration for data collection and ingestion required in a Splunk Cloud environment.

This two-day track is designed for power users who want to learn best practices for building dashboards and forms in Dashboard Studio. It combines content from Creating Maps, Introduction to Dashboards, and Dynamic Dashboards.

This 2-day track is for developers who will build user interfaces and dashboards with the Splunk UI (SUI) toolkit. The SUI toolkit provides a comprehensive library of React components designed to provide the look and feel of native Splunk apps. You will learn to build dynamic and responsive UIs, use the Splunk REST API to manage data, display the results of SPL searches, package apps for deployment, and build custom dashboards.

This track covers the fundamentals for SOC automation developers, including Administering Splunk SOAR, Developing Splunk SOAR Playbooks, and a new course on integrating open-source attack simulation tools with Splunk for testing detections and responses.

This track includes Architecting Splunk Enterprise Deployments, plus new courses focused on security data architecture, integrating open-source attack simulation tools with Splunk, and exploring key SOC roles, tasks, and challenges.

This two-day track prepares IT practitioners to install, design, implement, monitor, and maintain mission-critical services in IT Service Intelligence. It includes new content and content from Using ITSI and Implementing ITSI.

This two-day track is a chance to practice your analyst skills and build your ITSI muscles. Graduate from the basics of using ITSI to richer and more difficult scenarios. You'll learn how to make visualizations with more impact, learn how to be more proactive in service monitoring, and speed up your root cause analysis.

This two-day practical training guides you from the basics of OTel and Splunk Observability Cloud to the deployment and configuration of the OTel Collector. You will learn advanced configuration with processors and exporters, collecting Kubernetes-specific telemetry, and enabling APM auto-instrumentation for real-time application insights. Visualize and alert on raw telemetry data in Splunk Observability Cloud.

This one-day course empowers experienced SOC staff to perform threat investigation, detection, and incident response using open-source attack simulation tools integrated with Splunk, while deepening their understanding of SOC roles, tasks, and challenges. Note: This course requires prior training and/or experience with Splunk security products (Enterprise Security and SOAR). Beginners should attend the SOC Analyst track.