>> Hello and welcome to
an introduction to Splunk's final video.
I hope you've enjoyed this course.
At this point, I need to introduce
the assistant for this course, Page.
She has helped to make
most of the supplemental materials.
You probably want to keep an eye
out for courses coming out by her.
In Module 1, we learned about what
Splunk is and how learning it can help your career.
We talked about how Splunk is
a high paying prominent company and how
it's software and services
turn machine data into answers.
We found average salaries
for Splunk administrators are very
high and that many companies
wants Splunk knowledge for a variety of positions,
including that of IT leadership,
business analysts, security professionals,
web developers, etc.
In Module 2, we talked about
the many resources Splunk has available for learning,
collaborating, referencing,
and participating in the community.
We explored some important features
on the Splunk website,
like their training and documentation centers.
We discussed certification paths and went
over Splunk products besides Splunk core.
Here's a quick overview of some popular Splunk products.
We install a trial version of
the Splunk Enterprise in this video series.
Splunk Enterprise is considered an
option for core Splunk platform.
Alternatives include Splunk Light,
Splunk Free, and Splunk Cloud.
Splunk Enterprise Security is an app placed on top of
a Splunk platform that helps Splunk work more like a Sim.
It offers help correlating, organizing,
and prioritizing events with the security focus.
Splunk User Behavior Analytics helps detect
anomalies in your events that can
help identify risky user behavior,
find compromises, and perform other activities.
Phantom is an orchestration and
automation tool that can take in events from
many different sources and run playbooks to enact
automated actions in response to different conditions.
VictorOps helps with alerting by sending
notifications and tracking response times.
Of course, Splunk has other products as well
like Splunk for Industrial IoT,
Insights for Infrastructure and others.
In Module 3, we talked about the data pipeline,
the different parts of the Splunk
and how to install Splunk,
including Universal Florida installations
on Windows and Linux.
The parts of Splunk we focused on were forwarders,
indexers, and search heads.
There are other roles such as
deployment servers and licensed masters.
Forwarders, indexers,
and search heads correspond
to parts of the data pipeline.
Universal Florida generally just
handles taking the input and passing it
along to an indexer to parse index and
supply when a search header runs a search.
Module 4 covered how using the Splunk web interface,
different ways to get data into
Splunk and how to monitor our file
location by modifying
the inputs Splunk configuration file.
We talked about how you can set Splunk to
listen on different ports to receive data,
including dataset from forwarders and syslog events.
You can also directly upload data,
monitor files, and directories,
perform API calls and more.
Module 5 was about working with data.
We learned how to do simple searches, create alerts,
reports and dashboards, and how to install an app.
We learned some good tips such as how to make
more specific events to
improve Splunk performance as well as
setting alerts and reports to run at different times.
We also ran some
examples searches and talked about how you can
check supplemental materials for more examples.
Module 6, our last module helps you
prepare for the final test and future study.
I really hope you've enjoyed
this class and I wish you the
best of luck in your careers. Thank you.