Splunk Essentials Fundamental

This  Splunk Essentials session by Muhammed Asif  is a fundamental course in urdu language .It gives you an overview about log management and Splunk Enterprise Solution . It is a beginner level session but it gives  you a good idea about logs ,log management and Splunk approach to machine data . You will learn about Splunk Portfolio ,Data Input Types , Default Metadata settings , Splunk Architecture, Indexers, Search Heads, Splunk Forwarders and different types of Forwarders and their benefits. You will also learn about Splunk Setup Common Configuration  files ,their description and search Report Visualizations .

Presentation Topics have been breaken down below for your convenience.

00:00 – 02:53 Introduction and Agenda
02:54 – 05:40 About SIEM and What are Logs
05:41 – 07:50 What does a log look like?
07:51 – 11:13 What is log management?
11:14 – 14:11 What is LM, SIM, SEM, SEC, SIEM
14:12 – 18:29 About Splunk and Splunk Approach to Machine Data
18:30 – 25:48 Splunk Platform
25:50 – 31:05 Splunk Portfolio
31:06 – 33:27 Data Input Types
33:28 – 37:54 Default Metadata settings
37:55 – 40:45 Splunk Architecture
40:46 – 42:50 Indexers ,Search Head
42:52 – 45:29 Splunk Forwarders and Types of Forwarders
45:30 – 48:05 Benefits of Using Forwarders
48:06 – 52:09 Other Components of Splunk Distributed Environment and Typical Splunk Setup
52:11 – 55:33 Common Config files and Config file description
55:34 – 57:22 Search Report Visualization and Alert
57:23 – 01:02:13 Common Splunk commands , Reports ,Visualizations and Alerts
01:02:15 – 01:05:38 Splunk Add-on vs Apps and Splunkbase
01:05:40 – 01:07:48 Splunk Knowledge base

Posted on: 03/07/2020

Name: Muhammad Asif Bakali

Muhammad Asif Bakali currently works as a Staff Professional Services Consultant for Splunk EMEA. He is responsible to design enterprise architecture for customers like Banking, Oil & Gas, Airlines and law enforcement agencies where data generates starting from Giga Bytes to Tera Bytes of each day. As an experienced SIEM Expert, Muhammad Asif Bakali has worked across multiple SIEM technology vendors and delivered many successful projects in GCC region. His Profile can be seen here .