Updated some of the dashboards. Added references to over 130 youtube tutorials on Splunk, which is an increase of almost 80 videos from the last version. Removed the SOC dashboards links to make the app less dependent on other apps.
Understanding how to use Splunk is not always an easy task. Splunk provides amazing trainings, but the jump from Buttercup Games to the real world is not always intuitive. This application is specifically designed to provide additional training on how to work with Splunk logs utilizing logs that are often found on home networks.
L.A.M.E. Training provides written and video tutorials on how to build dashboards, ingest, modify, and search data. There are sections in this app to help Splunk System Admins, Splunk Data Admins, and Analysts.
Additionally, there is a section that puts everything together using data models and dashboards to provide insight into logs regardless of the tools that created those logs.
Understanding how to use Splunk is not always an easy task. Splunk provides amazing trainings, but the jump from Buttercup Games to the real world is not always intuitive. This application is specifically designed to provide additional training on how to work with Splunk logs utilizing logs that are often found on home networks.
This app is a constant work in progress as more and more tutorials get created and incorporated into the app. This app requires Splunk validation which may take some time, the most recent version is always available at the following Git Repo.
L.A.M.E. (Log Analysis Made Easy) Training app is a splunk app that focuses on training analysts how to use the SPL language and many of the features within Splunk such as saved searched, dashboards, datamodels and the SPL query language. The tutorials contain text writeups, links to working queries, and links to videos that address various learning styles.
This app will need an index called lame_training if you want to use the event generator tool.
The app often references the lame_training index and various sourcetypes within those sourcetypes.
The following Git link will provide a powershell scipt (the powershell script will work on any machine that has enabled powershell mac, linux, or windows) and creates logs that will imitate the same logs that are viewed in the tutorials. It is often easier to learn a concept when a person is using the same logs as the instructions.
L.A.M.E. (Log Analysis Made Easy) Training app is a splunk app that focuses on training analysts how to use the SPL language and many of the features within Splunk such as saved searched, dashboards, datamodels and the SPL query language. The tutorials contain text writeups, links to working queries, and links to videos that address various learning styles.
The app often references the lame_training index and various sourcetypes within those sourcetypes.
The following Git link will provide a powershell scipt (the powershell script will work on any machine that has enabled powershell mac, linux, or windows) and creates logs that will imitate the same logs that are viewed in the tutorials. It is often easier to learn a concept when a person is using the same logs as the instructions.
As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps from Splunk, our partners and our community. Find an app for most any data source and user need, or simply create your own with help from our developer portal.