Day in the life of a Splunk or SIEM Analyst

Splunk and SIEM Engineering and Architecture

Welcome Video Engineering and Architect Program

Welcome Video for Engineering and Architect Program (1:05)
About me Section (1:46)
What to Expect. (3:41)
Business Scenario
Course Curriculum (Instructor Lead Program)

Understanding Splunk Components (Part 1/Module 1)

Day in the life of a Splunk or SIEM Engineer/Admin (5:51)
Day in the life of a Splunk or SIEM Architect (5:04)
Day in the life of a Splunk or SIEM Analyst (5:49)
Assignment
Quiz

Identifying Splunk Components (Module 2)

Module 2 Splunk Components (15:50)
Module 2 Splunk Deployment Architectures (17:08)
Module 2 Steps to Install Splunk Enterprise (12:51)
Module 2 Basic Splunk Commands to Know (5:50)
Assignment
Quiz

Forwarder Components (Module 3)

Test and Production Environment Best Practices (14:03)
Splunk Universal Forwarder Break Down (9:15)
Setting up a Splunk Universal Forwarder on Linux Server Part 1 (19:15)
Installing Splunk Universal Forwarder on Linux Server Part 2 (4:52)
Splunk Heavy Forwarder Overview (8:49)
Splunk Intermediate Forwarder (4:42)
Assignment
Quiz

Forwarder Management (Module 4)

Deployment Server Overview (9:06)
Setting up a Splunk Deployment Server Part One (21:08)
Setting Up Splunk Deployment Server Part 2 (14:34)
Forwarder Monitoring Metrics (7:50)
Assignment
Quiz

Managing Users (Module 5)

Understanding User Roles in Splunk (10:48)
Best Practices when Creating Users in Splunk (7:12)
Creating Roles in Splunk (7:35)
Assignment
Quiz

SIEM Architecting (Part 2)/ Introduction/Project Requirements (Module 6)

Comparing Other SIEM Platforms (8:51)
Splunk Planning Process (14:02)
Meeting Stakeholders_Gather Requirements with Chloe Burton (14:47)
Creating Checklist for Requirements Process (17:53)
Assignment
Article
Quiz

Index and Resource Planning/Infrastructure Planning (Module 7)

Indexing Planning and Design (10:40)
Storage Requirements (14:17)
Needed Apps in Splunk (7:48)
Splunk Reference Architecture (7:01)
Cloud Deployments (7:33)
Assignment
Quiz

Forwarder and Deployment Best Practices (Module 8)

Reviewing Forwarders Types (4:35)
Infrastructure as Code Options (11:01)
Setting up a Heavy Forwarder in Splunk (28:38)
Best Practices Splunk Deployment (6:56)
Assignment
Quiz

Planning Integration with Various tools (Module 9)

Various Intergration Methods Part 2 (4:51)
Different Intergrations with Splunk (11:04)
What Should you Integrate? (7:06)
Assignment
Quiz

Performance Monitoring / Test environment (Module 10)

Test Environment Requirements Demo (11:01)
Monitoring Console Overview Part 1 (9:37)
Monitoring Console Part 2 Adding Search Peers (8:49)
Splunk Health Check (9:49)
Assignment
Quiz

Use Case Building (Module 11)

Building Out Use Cases (12:40)
Discussing Different Architecture Options Based on Use Cases (9:32)
Filtering out Bad Use Cases (4:47)
Capstone 1 Project
Quiz

SIEM Deployment (Part 3)/ Preparing for Deployment (Module 12)

Preparing for Deployment (23:02)
Assignment

Setting up Splunk Deployment (Module 13)

Installing Splunk Enterprise on Linux Severs Part 1 (11:49)
Assignment
Article

License Management (Module 14)

Understanding License Types (10:13)
Understanding How License Violations Work (5:07)
Adding a License in Splunk (5:43)
Quiz

Understand the Configuration Files in Splunk (Module 15)

.conf File in Splunk (11:03)
Index Vs Search Time (4:12)
Assignment
Quiz

Downloading and Configuring a Splunk Forwarder (Module 16)

Installing and Configuring Splunk Forwarders Run Through (10:59)
Assignment

Data Onboarding (Part 4)/ Getting Linux Data into Splunk System (Module 17)

Setting up .SSH_ File Transfer Linux (14:09)
Installing Linux Add-On Splunk Forwarder (18:17)
Splunking Linux Logs (10:29)
Assignment
Article

Getting Windows Data into Splunk System (Module 18)

Getting Windows Data into Splunk System (9:40)
Splunking Windows Logs Data Onboarding (13:18)
Assignment

Creating visualizations out of Forwarder metrics (Module 19)

Dashboard for Forwarder Metrics (19:05)
Creating Dashboard panels with new Windows and Linux data Use Cases (25:18)
Assignment

Parsing Phase and Data Preview (Module 20)

Parsing Phase Concepts Splunk (9:08)
Optimize and Configure Event Line Breaking Splunk (5:31)
Assignment
Quiz

Troubleshooting Splunk (Module 21)

Troubling Shooting Basics (6:04)
Running Splunk .diag_Splunking/Diag Logs (10:51)
Capstone 2 Project
Quiz

Designing and Implementing Cluster's Deployment's (Module 22)

Understanding what Clusters are in Splunk (18:45)
Installing and setting up Cluster's inside of a Splunk Environment (50:39)
Setting up Distributed Searching within Clustered Environment (12:47)
Assignment
Quiz

Day in the life of a Splunk or SIEM Analyst

Complete and Continue