Module 00 · Sare
Splunk / SIEM Fundamentals Deep Dive
Splunk / SIEM Fundamentals Deep Dive
Waxaad si adag u fahmi doontaa Splunk architecture, SPL search language, dashboards, alerts, iyo data onboarding.
8 cashar 2 saac 0/8 dhammaystiran
Casharrada
1Splunk Architecture OverviewSplunk Architecture OverviewFaham qaab-dhismeedka Splunk — indexers, forwarders, iyo search heads.13 daq2SPL: Search Processing Language BasicsSPL: Search Processing Language BasicsFaham syntax-ka aasaasiga ah ee SPL — search commands iyo pipes.15 daq3Splunk Fields & ExtractionSplunk Fields and ExtractionFaham sida fields loo soo saaro raw events, iyo automatic vs manual extraction.13 daq4Splunk Statistical CommandsSplunk Statistical CommandsFaham commands-ka statistics ee ugu badan la isticmaalo — stats, timechart, top.14 daq5Building Splunk DashboardsBuilding Splunk DashboardsFaham sida dashboards loo dhiso si loo muuqdo security metrics.12 daq6Splunk Alerts & Correlation SearchesSplunk Alerts and Correlation SearchesFaham sida alerts loo naqshadeeyo, iyo mabaadi'da correlation searches.14 daq7Splunk Data OnboardingSplunk Data OnboardingFaham habka data sources cusub loogu daro Splunk (log ingestion).12 daq8Splunk Capstone: InvestigationSplunk Capstone: InvestigationKu dar dhammaan waxa aad baratay — samee full investigation Splunk SPL isticmaalaya.15 daq