Administering Splunk Enterprise Security (ASES)

The course covers ES event processing and normalization, deployment requirements, technology add-ons, dashboard dependencies, data models, managing risk, and customizing threat intelligence.

Please note that this class may run over three days, with 4.5 hour sessions each day, to achieve the full 13.5 hours of course content.

To be successful, students should have a solid understanding of the following courses:\n\n\n\n- Using Splunk Enterprise Security (USES)\n- Intro to Splunk\n- Using Fields (SUF)\n- Intro to Knowledge Objects\n- Creating Knowledge Objects (CKO)\n- Creating Field Extractions (CFE)\n- Enriching Data with Lookups (EDL)\n- Data Models (SDM)\n- Splunk Enterprise System Administration (SESA)\n- Splunk Enterprise Data Administration (SEDA)

This 13.5-hour course prepares architects and systems administrators to install and configure Splunk Enterprise Security (ES).

8