Splunk for Security Analytics and Monitoring

Focused View

Daniel Lachance

3:18:34

296 View

01 - Introduction

01 - Splunk explained.mp4

00:49

02 - What you should know.mp4

04:29

02 - 1. The Splunk Ecosystem

01 - SIEM and SOAR overview.mp4

09:14

02 - Splunk overview.mp4

09:36

03 - Splunk components.mp4

09:07

04 - Splunk data ingestion.mp4

09:07

03 - 2. Deploying Splunk

01 - Splunk deployment planning.mp4

09:01

02 - Installing Splunk on Linux.mp4

06:31

03 - Installing Splunk on Windows.mp4

04:47

04 - Splunk users and roles.mp4

08:51

05 - Using the Splunk web GUI.mp4

10:19

06 - Using the Splunk CLI.mp4

08:06

04 - 3. Splunk and the Cloud

01 - Deploying the AWS Splunk AMI.mp4

06:16

02 - Deploying Splunk Cloud.mp4

04:08

05 - 4. Splunk Data Ingestion

01 - Forwarding Linux logs to Splunk.mp4

10:16

02 - Forwarding Windows log events to Splunk.mp4

10:48

03 - Monitoring Windows files.mp4

08:46

04 - Monitoring Windows printers.mp4

07:16

05 - Configuring Snort IDS alerts for Splunk.mp4

07:32

06 - Configuring an HTTP Event Collector (HEC).mp4

07:54

07 - Forwarding Microsoft AD events to Splunk Cloud.mp4

09:01

06 - 5. Splunk Insights

01 - Splunk searching overview.mp4

07:37

02 - Performing Splunk queries.mp4

10:20

03 - Working with Splunk dashboards and reports.mp4

08:05

04 - Managing Splunk alerts.mp4

06:26

07 - Conclusion

01 - Whats next.mp4

04:12

Description

Splunk offers IT technicians a single-pane inventory, performance and security monitoring interface for on-premises and cloud-based devices, servers, apps and services. In this course, learn how to plan the deployment and management of a Splunk ecosystem to provide a centralized way to monitor the performance and security of on-premises and cloud-based IT devices and software services.

Instructor Daniel Lachance shows you how to deploy Splunk servers on-premises and in the cloud followed by configuring a variety of data sources such as Microsoft Active Directory and LInux log files, to forward their events to a Splunk indexer. Then, work with the Splunk web GUI, perform queries, manage dashboards, reports and alerts, and learn how to use playbooks to automate event workflows.

More details

User Reviews

Rating

average 0

Total votes0

Focused display

Cyber Security

Network Security

Information Security

Daniel Lachance

Instructor's Courses

Highly motivated and passionate IT evangelist

Linkedin Learning

View courses Linkedin Learning

LinkedIn Learning is an American online learning provider. It provides video courses taught by industry experts in software, creative, and business skills. It is a subsidiary of LinkedIn. All the courses on LinkedIn fall into four categories: Business, Creative, Technology and Certifications. It was founded in 1995 by Lynda Weinman as Lynda.com before being acquired by LinkedIn in 2015. Microsoft acquired LinkedIn in December 2016.