Administering Splunk Enterprise Security (ASES)

 

Who should attend

This 13.5-hour course prepares architects and systems administrators to install and configure Splunk Enterprise Security (ES).

Certifications

This course is part of the following Certifications:

Prerequisites

Course Objectives

  • Provide an overview of Splunk Enterprise Security (ES)
  • Customize ES dashboards
  • Examine the ES Risk framework and Risk-based Alerting (RBA)
  • Customize the Investigation Workbench
  • Understand initial ES installation and configuration
  • Manage data intake and normalization for ES
  • Create and tune correlation searches
  • Configure ES lookups
  • Configure Assets & Identities and Threat Intelligence

Course Content

The course covers ES event processing and normalization, deployment requirements, technology add-ons, dashboard dependencies, data models, managing risk, and customizing threat intelligence.

Please note that this class may run over three days, with 4.5 hour sessions each day, to achieve the full nine hours of course content.

Prices & Delivery methods

Online Training

Duration
14 hours

Price
  • on request
Classroom Training

Duration
14 hours

Price
  • on request

Schedule

Instructor-led Online Training:   Course conducted online in a virtual classroom.
FLEX Classroom Training (hybrid course):   Course participation either on-site in the classroom or online from the workplace or from home.

English

Time zone: Central European Time (CET)   ±1 hour

Online Training Time zone: Central European Summer Time (CEST)
Online Training Time zone: Central European Summer Time (CEST)
Online Training Time zone: Central European Summer Time (CEST)
Online Training Time zone: Central European Time (CET)

6 hours difference

Online Training Time zone: Eastern Daylight Time (EDT)
Online Training Time zone: Eastern Daylight Time (EDT)
Online Training Time zone: Eastern Standard Time (EST)
Online Training Time zone: Eastern Standard Time (EST)

9 hours difference

Online Training Time zone: Pacific Daylight Time (PDT)
Online Training Time zone: Pacific Daylight Time (PDT)
FLEX Classroom Training (hybrid course):   Course participation either on-site in the classroom or online from the workplace or from home.

Europe

Poland

Warsaw

If you can't find a suitable date, don't forget to check our world-wide FLEX training schedule.