Splunk Series II: Visualizations
Splunk visualization types - line charts, bubble charts, cluster maps, choropleth maps, single-value panels - turning search results into dashboards.
Posts
Splunk Series: Basic Search
Get started with Splunk basic search - using the search assistant, pipes, commands, and reading results in the SPL editor to query indexed data fast.
Splunk Series: Components
Splunk core components - Indexer, Search Head, and Forwarders - and how each role processes machine data, runs searches, and delivers results.
Splunk Series: Feeding Data to Splunk
How Splunk ingests data - input, parsing, and indexing phases - plus supported sources: files, network data, scripts, Windows logs, and HTTP events.
Splunk Series: Field searches
Run Splunk field searches using key/value pairs, AND/OR/NOT operators, meta fields, and the Selected vs Interesting Fields sidebar to narrow results.
Splunk Series: Overview of Splunk
What Splunk does and the data sources it ingests - logs, configs, network devices, scripts - so security and ops teams can analyze machine data.
Splunk Series: Saving Search Jobs
Save and share Splunk search jobs: default 10-minute lifetime, extending to 7 days, scheduling reports, and setting Private vs Everyone permissions.
Splunk Series: Search Language Syntax
Splunk SPL syntax breakdown - search terms, commands, functions, arguments, and clauses - plus the search pipeline and how to build tables from fields.
Splunk Series: Splunk Deployments
Splunk deployment models - standalone vs distributed - plus the supporting components: Deployment Server, Cluster Master, and License Master.
Palo Alto Networks - PCNSE Certification - Part 2 - Building a Lab (Where to get Started)
Build a PCNSE study lab - get a PA-VM auth code, download the OVA, deploy on ESXi, and wire it into an existing home network alongside an ASA edge.