Detailed Course Outline
Topic 1 – Splunk REST API
- Introduce REST
- Review HTTP requests
- Describe the Splunk REST API
- Discuss authentication methods
Topic 2 – Response Data
- Review HTTP responses
- Describe the Atom specification
- Demonstrate how to retrieve JSON
- Explain how to parse a response
Topic 3 – Administration APIs
- Introduce the administration APIs
- Update configuration files
- Work with indexes
- Manage users
Topic 4 – Namespaces and Access Control
- Introduce namespaces
- Explain namespace use cases
- Implement access control
Topic 5 – Search
- Identify search components
- Review search best practices
- Create a search and retrieve results
- Discuss oneshot searches
Topic 6 – Advanced Search
- Utilize real-time searches
- Summarize export searches
- Construct saved searches
- Understand search job management
Topic 7 – HTTP Event Collector
- Describe the HTTP Event Collector
- Explain token management
- Explore data ingestion
- Implement data acknowledgement
Topic 8 – Key-Value Store
- Examine the Key-Value Store
- Define and manage a collection
- Create and manage records