Understand the uses of Splunk

 Define Splunk Apps

Learn basic navigation in Splunk

 Run basic searches

Use autocomplete to help build a search

Set the time range of a search

Identify the contents of search results

Refine searches

Use the timeline

Work with events

Control a search job

Save search results

Understand fields

Use fields in searches

Use the fields sidebar

Use search modes (fast, verbose, and smart)

Save a search as a report

Edit reports

Create reports that display statistics (tables)

Create reports that display visualizations (charts)

Create a dashboard

Add a report to a dashboard

Edit a dashboard

Understand the search pipeline

Understand search syntax concepts

Use the following commands to perform searches:

tables

rename

fields

dedup

sort

The top command

The rare command

The stats command

Describe lookups

Examine a lookup file example

Create a lookup file and create a lookup definition

Configure an automatic lookup

Use the lookup in searches

Describe scheduled reports

Configure scheduled reports

Describe alerts

Create alerts

View fired alerts