Getting Started with Splunk Power User e Learning

Getting Started with Splunk Power User e. Learning A getting started guide for Lockheed Martin A paid subscription provided by the EBS LMi. NTEL Program LM i. NTEL > Splunk Analytics & Intelligence as a Service Version 1. 3

Introduction What • Splunk is a “big data” analytics tool that allows the collection and visualization of machine and computer log data. – Visit this URL for more basic information about Splunk: http: //www. splunk. com/en_us/resources/operational-intelligence. html Why • The EBS LMi. NTEL Program is making this e. Learning available to anyone within Lockheed Martin with an e-mail address ending in ‘@lmco. com’ on a 12 month trial basis – The objective is to make this training available to LM in to help increase overall knowledge about how to use big data tools such as Splunk – This benefit may continue beyond the initial 12 month trial period based upon actual usage • Labor Charging – A labor charge number will not be provided for participating in this training. Please ask your Functional Manager or Program Manager for labor charging instructions. 2

Splunk e. Learning Courses • Free Splunk e. Learning – Splunk Tutorial (e. Learning) http: //www. splunk. com/view/SP-CAAAH 9 U – Building Add-ons (e. Learning) http: //www. splunk. com/view/SP-CAAAHUC – Creating Modular Inputs (e. Learning) http: //www. splunk. com/view/SP-CAAAHUD • LM Subscribed e. Learning – Using Splunk (e. Learning) http: //www. splunk. com/view/SP-CAAAPBR – Searching & Reporting (e. Learning) http: //www. splunk. com/view/SP-CAAANMG – Creating Splunk Knowledge Objects (e. Learning) http: //www. splunk. com/view/SP-CAAANUN – Splunk Infrastructure Overview (e. Learning) http: //www. splunk. com/view/SP-CAAAPB 2 Terms and Conditions: 1. The e. Learning courses must be completed within 30 days of signing up. 2. Each e. Learning course may only be taken once. 3. At the end of the subscription period, Splunk will allow anyone who has signed up before the closure date the full 30 days in which to complete the class. Best Practices: 1. Don’t sign up for more than one course at a time. 2. Use an HTML 5 compatible Web browser for best experience (e. g. , Chrome, Firefox, Edge on Windows 10). 3

How to Sign Up 1. Go to https: //inter. viewcentral. com/reg/splunk/login and login to your existing Splunk. com account. To launch the e. Learning class, you must be logged into the Splunk Learning Management System. 2. Follow the steps to create your account. Please note that the e. Learning subscription is allocated to the URL mentioned above only, and the email address that you register with must match that domain. Use the “Sign Up Now” link if you do not already have a Splunk. com account Your Splunk. com account must be associated with your Lockheed Martin ( …. @lmco. com) email address. 4

Searching for the LM Subscribed e. Learning Courses Once you have created your Splunk. com account and are able to login, you should see the main Search page. Use this page to search for the LM Subscribed e. Learning. Select e-Learning option from the Delivery Method list then click Search 5

Searching for “Using Splunk” (e. Learning) Lockheed Martin e. Learning Subscription Verify the subscription cost is $0. 00 USD before adding to Cart Using Splunk (e. Learning) Course details: http: //www. splunk. com/view/SP-CAAAPBR 6

Searching for “Searching & Reporting” (e. Learning) Lockheed Martin e. Learning Subscription Verify the subscription cost is $0. 00 USD before adding to Cart Searching & Reporting (e. Learning) Course Details http: //www. splunk. com/view/SP-CAAANMG 7

Searching for “Creating Splunk Knowledge Objects ” (e. Learning) Lockheed Martin e. Learning Subscription Verify the subscription cost is $0. 00 USD before adding to Cart Creating Splunk Knowledge Objects (e. Learning) Course Details http: //www. splunk. com/view/SP-CAAANUN 8

Searching for “Splunk Infrastructure Overview ” (e. Learning) Lockheed Martin e. Learning Subscription Verify the subscription cost is $0. 00 USD before adding to Cart Splunk Infrastructure Overview (e. Learning) Course Details http: //www. splunk. com/view/SP-CAAAPB 2 9

Splunk e. Learning Support • DO – Review the Splunk Education Frequently Asked Questions https: //inter. viewcentral. com/events/uploads/splunk/wbtfaq. html – Contact Splunk Education if you are having problems with your Splunk. com account or e. Learning course Splunk Education Email: Education_AMER@splunk. com – Get involved with the LM Splunk Communities • Analytics Center of Exellence (ACE) on Eureka Streams https: //eureka. isgs. lmco. com/#activity/group/ace • Splunk User Group on Eureka Streams https: //eureka. isgs. lmco. com/#activity/group/splunk • DO NOT – Contact the Lockheed Martin Help Desk. This e. Learning is only supported by the Splunk vendor – Attempt to transmit or use Lockheed Martin Sensitive Information in the Splunk Labs. Please operate the labs only using the Splunk provided course material. 10

Take Credit for Your Splunk Training in My. Learning Once you have completed the e. Learning training, follow these steps to take credit for the course: 1. Navigate to My Learning, Learner home page https: //mylearning. external. lmco. com/ 2. 3. 4. 5. Enter the course code number in the "Search Catalog" field. Click the Find button Click the course name link Scroll to the "Self-Completion" section and click the Take Credit for this Course link Provide the Date Completed, Training Hours and Remarks (optional) as appropriate, then click Take Credit. 6. Once you have taken credit you may select "Return to Internal Training History" to view the completion. Allow up to a few hours for the Learning Plan and other views to update. My. Learning Course Code Course Title 214141 SSM 01 Using Splunk 6 214141 SSM 02 Splunk Searching and Reporting 214141 SSM 03 Creating Splunk 6 Knowledge Objects 214141 SSM 04 Splunk Infrastructure Overview 11