Administering Splunk Enterprise Security (ASES)

 

Who should attend

This 13.5-hour course prepares architects and systems administrators to install and configure Splunk Enterprise Security (ES).

Certifications

This course is part of the following Certifications:

Prerequisites

Course Objectives

  • Provide an overview of Splunk Enterprise Security (ES)
  • Customize ES dashboards
  • Examine the ES Risk framework and Risk-based Alerting (RBA)
  • Customize the Investigation Workbench
  • Understand initial ES installation and configuration
  • Manage data intake and normalization for ES
  • Create and tune correlation searches
  • Configure ES lookups
  • Configure Assets & Identities and Threat Intelligence

Course Content

The course covers ES event processing and normalization, deployment requirements, technology add-ons, dashboard dependencies, data models, managing risk, and customizing threat intelligence.

Please note that this class may run over three days, with 4.5 hour sessions each day, to achieve the full nine hours of course content.

Prices & Delivery methods

Online Training

Duration
3 days

Price
  • on request
Classroom Training

Duration
3 days

Price
  • on request

Click on town name or "Online Training" to book Schedule

Europe

France

Online Training Time zone: Central European Summer Time (CEST) Course language: English
Online Training Time zone: Central European Summer Time (CEST) Course language: English

Poland

Warsaw 1 day

Slovenia

Online Training 1 day Time zone: Central European Summer Time (CEST) Course language: English
Online Training 1 day Time zone: Central European Summer Time (CEST) Course language: English
Online Training 1 day Time zone: Central European Time (CET) Course language: English
Guaranteed date:   iTLS will carry out all guaranteed training regardless of the number of attendees, exempt from force majeure or other unexpected events, like e.g. accidents or illness of the trainer, which prevent the course from being conducted.
Instructor-led Online Training:   This computer icon in the schedule indicates that this date/time will be conducted as Instructor-Led Online Training.
This is a FLEX course, which is delivered both virtually and in the classroom.