Using Splunk Enterprise Security 6.6 Training
Build practical Splunk skills in investigating security events, using dashboards, notable events, risk, and analyst workflows in ES 6.6 through four structured lessons, guided labs, validation, troubleshooting, and governance.
-
-by SkillDynamo
- 0 Students
- Last updated
Course Description
SkillDynamo’s Using Splunk Enterprise Security 6.6 Training develops practical capability in investigating security events, using dashboards, notable events, risk, and analyst workflows in ES 6.6. Learners progress from core architecture and terminology through guided configuration, analysis, validation, troubleshooting, documentation, and operational governance. The curriculum is independently rewritten for SkillDynamo and is designed for instructor-led demonstrations and hands-on practice.
What You Will Learn
- Explain the architecture, terminology, data flow, personas, and business outcomes associated with investigating security events, using dashboards, notable events, risk, and analyst workflows in ES 6.6.
- Apply the relevant Splunk searches, configuration, integrations, security controls, and operational workflows.
- Validate results using realistic scenarios, diagnostics, logs, dashboards, test evidence, and troubleshooting methods.
- Document design and administration decisions while applying performance, security, release, maintenance, and governance practices.
Who Should Attend
Splunk users, administrators, analysts, developers, security practitioners, and operations professionals with foundational platform experience.
Recommended Prerequisites
Splunk fundamentals, basic SPL, data concepts, and familiarity with the relevant operational or security use case are recommended.
SkillDynamo Training Approach
Training combines instructor demonstrations, structured labs, scenario-based exercises, implementation or analysis worksheets, troubleshooting practice, knowledge checks, documentation, and a final practical review.
Version and Product Note
This source-aligned course references an older product release or legacy product name. Validate menus, APIs, supported deployment models, licensing, and migration guidance against the current delivery environment.
Curriculum
- 1 Section
- 4 Lessons
- 24 Hours
- Course Curriculum4 Items
- 1.1Lesson 1: ES 6.6 Analyst Orientation, Security Domains, Dashboards, Data, Assets, and Identities6 Hours
- 1.2Lesson 2: Searching Security Data, CIM Context, Panels, Filters, Drilldowns, and Investigation Methods6 Hours
- 1.3Lesson 3: Notable Events, Incident Review, Risk, Threat Intelligence, Evidence, and Collaboration6 Hours
- 1.4Lesson 4: Triage Scenarios, Documentation, Escalation, Metrics, Analyst Governance, and Version Review6 Hours
SkillDynamo Expert Team
SkillDynamo Expert Team
The SkillDynamo Expert Team delivers practical training across Splunk Enterprise, Splunk Cloud, Enterprise Security, IT Service Intelligence, SOAR, Observability Cloud, application development, data administration, analytics, and distributed architecture.
- Instructor demonstrations and hands-on exercises
- Search, configuration, integration, security, testing, and troubleshooting guidance
- Version-aware delivery, documentation, governance, and operational practices
Student Reviews
No published reviews yet.
Log in with your student account to submit a review. Register using your email.
Previously imported course feedback
Learner Reviews
Learner reviews will be added after verification and approval by the SkillDynamo team.
