Managing Splunk Enterprise Security Data and Dashboards from Pluralsight

Splunk Enterprise Security is a premium application used within the Splunk deployment to help with SOC operations. This course will teach you how to manage your data, and manage the dashboards and feature using the data.

Splunk Enterprise Security (ES) solves many problems within our SOCs, including efficient operations. In this course, Managing Splunk Enterprise Security Data and Dashboards, you’ll learn how to get the data usable for Splunk Enterprise Security and see how it can add to the function and uses of dashboards and features within the application. First, you’ll learn about the data ingestion and work through examples taking data and making it CIM-compatible for use for specific dashboards and features. Next, you’ll discover how to manage the dashboards that are available to you and how to modify them and the data to correspond to each other. Finally, you’ll learn how to configure and use features like the glass tables, forensics and investigation dashboards, and others. When you’re finished with this course, you’ll have the skills and knowledge of Splunk Enterprise Security needed to start ingesting data and administering it appropriately.

What's inside

Syllabus

Course Overview

Configuring Data Inputs for Splunk Enterprise Security

Examining Security Posture and Metrics

Managing the Incident Review Dashboard

Exploring Additional Dashboards and Features

Managing Investigations in Splunk Enterprise Security

Good to know

Know what's good

, what to watch for

, and possible dealbreakers

Teaches how to make data usable in Splunk Enterprise Security and how the data can add to dashboards and features

Examines security posture and metrics to strengthen understanding and skills

Teaches students how to configure and use features like glass tables, forensics and investigation dashboards, and more

Provides real-world examples and scenarios to make concepts in the course more applicable

Taught by Joe Abraham, an expert in security and Splunk Enterprise Security

Offers opportunities to apply new skills and knowledge immediately to hands-on projects

Activities

Be better prepared before your course. Deepen your understanding during and after it. Supplement your coursework and achieve mastery of the topics covered in Managing Splunk Enterprise Security Data and Dashboards with these activities:

Review Data Ingestion Concepts

Show steps

Revisit the concepts of data ingestion to strengthen your understanding of how data is brought into Splunk Enterprise Security.

Browse courses on Data Ingestion

Show steps

Review documentation on data ingestion in Splunk.
Practice setting up data inputs in a test environment.

Follow Splunk Dashboards Tutorials

Show steps

Enhance your dashboard management skills by completing tutorials that guide you through creating and customizing dashboards specific to Splunk Enterprise Security.

Show steps

Search for Splunk Enterprise Security dashboard tutorials.
Follow a tutorial on creating a custom dashboard from scratch.
Modify an existing dashboard to meet your requirements.

Practice Incident Review

Show steps

Reinforce your understanding of incident review by practicing with sample incidents and using the Incident Review Dashboard in Splunk Enterprise Security.

Show steps

Import sample incidents into a test environment.
Review incidents using the Incident Review Dashboard.
Document your findings and recommendations.

One other activity

Expand to see all activities and additional details

Show all four activities

Build a Custom Security Dashboard

Show steps

Apply your knowledge by creating a custom security dashboard that meets your specific requirements and use case.

Show steps

Identify the security metrics and data you want to track.
Design the layout and visualizations for your dashboard.
Configure and deploy your dashboard.
Share and present your dashboard to stakeholders.

Career center

Learners who complete Managing Splunk Enterprise Security Data and Dashboards will develop knowledge and skills that may be useful to these careers:

Security Engineer

Security Engineers design, implement, and maintain security systems to protect an organization's computer networks and systems. They also investigate security breaches and develop and implement security policies and procedures. This course can help Security Engineers by teaching them how to use Splunk Enterprise Security to manage data, dashboards, and features. This knowledge can help Security Engineers to improve their ability to protect their organization's computer networks and systems from security threats.

See salaries and explore the career path for Security Engineer

Security Analyst

Security Analysts protect computer networks and systems from unauthorized access, use, and damage. They monitor networks for suspicious activity, investigate security breaches, and develop and implement security measures. This course can help Security Analysts by teaching them how to use Splunk Enterprise Security to manage data, dashboards, and features. This knowledge can help Security Analysts to improve their ability to detect and respond to security threats.

See salaries and explore the career path for Security Analyst

Information Security Analyst

Information Security Analysts plan and implement security measures to protect an organization's computer networks and systems. They also investigate security breaches and develop and implement security policies and procedures. This course can help Information Security Analysts by teaching them how to use Splunk Enterprise Security to manage data, dashboards, and features. This knowledge can help Information Security Analysts to improve their ability to protect their organization's computer networks and systems from security threats.

See salaries and explore the career path for Information Security Analyst

Security Consultant

Security Consultants advise organizations on how to protect their computer networks and systems from security threats. They also help organizations to develop and implement security policies and procedures. This course can help Security Consultants by teaching them how to use Splunk Enterprise Security to manage data, dashboards, and features. This knowledge can help Security Consultants to better advise their clients on how to protect their computer networks and systems from security threats.

See salaries and explore the career path for Security Consultant

Security Architect

Security Architects design and implement security systems to protect an organization's computer networks and systems. They also develop and implement security policies and procedures. This course can help Security Architects by teaching them how to use Splunk Enterprise Security to manage data, dashboards, and features. This knowledge can help Security Architects to improve their ability to design and implement security systems to protect their organization's computer networks and systems from security threats.

See salaries and explore the career path for Security Architect

Penetration Tester

Penetration Testers evaluate the security of computer networks and systems by simulating attacks. They also develop and implement security measures to protect computer networks and systems from security threats. This course can help Penetration Testers by teaching them how to use Splunk Enterprise Security to manage data, dashboards, and features. This knowledge can help Penetration Testers to improve their ability to evaluate the security of computer networks and systems.

See salaries and explore the career path for Penetration Tester

Incident Responder

Incident Responders investigate and respond to security breaches. They also develop and implement security policies and procedures. This course can help Incident Responders by teaching them how to use Splunk Enterprise Security to manage data, dashboards, and features. This knowledge can help Incident Responders to improve their ability to investigate and respond to security breaches.

See salaries and explore the career path for Incident Responder

Computer Forensics Analyst

Computer Forensics Analysts investigate computer crimes and collect and analyze evidence from computers. They also develop and implement security measures to protect computers from security threats. This course can help Computer Forensics Analysts by teaching them how to use Splunk Enterprise Security to manage data, dashboards, and features. This knowledge can help Computer Forensics Analysts to improve their ability to investigate computer crimes and collect and analyze evidence from computers.

See salaries and explore the career path for Computer Forensics Analyst

Cybersecurity Analyst

Cybersecurity Analysts protect computer networks and systems from unauthorized access, use, and damage. They also investigate security breaches and develop and implement security measures. This course can help Cybersecurity Analysts by teaching them how to use Splunk Enterprise Security to manage data, dashboards, and features. This knowledge can help Cybersecurity Analysts to improve their ability to protect their organization's computer networks and systems from security threats.

See salaries and explore the career path for Cybersecurity Analyst

Security Manager

Security Managers plan and direct the activities of an organization's security department. They also develop and implement security policies and procedures. This course may be useful for Security Managers who want to learn how to use Splunk Enterprise Security to manage data, dashboards, and features. This knowledge can help Security Managers to improve their ability to plan and direct the activities of their organization's security department and develop and implement security policies and procedures.

See salaries and explore the career path for Security Manager

Data Analyst

Data Analysts collect, clean, and analyze data to identify trends and patterns. They also develop and implement data visualization tools to communicate their findings. This course may be useful for Data Analysts who want to learn how to use Splunk Enterprise Security to manage data, dashboards, and features. This knowledge can help Data Analysts to improve their ability to collect, clean, and analyze data to identify trends and patterns.

See salaries and explore the career path for Data Analyst

Network Administrator

Network Administrators install, configure, and maintain computer networks. They also develop and implement security measures to protect computer networks from security threats. This course may be useful for Network Administrators who want to learn how to use Splunk Enterprise Security to manage data, dashboards, and features. This knowledge can help Network Administrators to improve their ability to install, configure, and maintain computer networks that are secure from security threats.

See salaries and explore the career path for Network Administrator

IT Manager

IT Managers plan and direct the activities of an organization's IT department. They also develop and implement IT policies and procedures. This course may be useful for IT Managers who want to learn how to use Splunk Enterprise Security to manage data, dashboards, and features. This knowledge can help IT Managers to improve their ability to plan and direct the activities of their organization's IT department and develop and implement IT policies and procedures.

See salaries and explore the career path for IT Manager

Systems Administrator

Systems Administrators install, configure, and maintain computer systems and networks. They also develop and implement security measures to protect computer systems and networks from security threats. This course may be useful for Systems Administrators who want to learn how to use Splunk Enterprise Security to manage data, dashboards, and features. This knowledge can help Systems Administrators to improve their ability to install, configure, and maintain computer systems and networks that are secure from security threats.

See salaries and explore the career path for Systems Administrator

Software Engineer

Software Engineers design, develop, and maintain software applications. They also develop and implement security measures to protect software applications from security threats. This course may be useful for Software Engineers who want to learn how to use Splunk Enterprise Security to manage data, dashboards, and features. This knowledge can help Software Engineers to improve their ability to design, develop, and maintain software applications that are secure from security threats.

See salaries and explore the career path for Software Engineer

Managing Splunk Enterprise Security Data and Dashboards

What's inside

Syllabus

Good to know

Save this course

Activities

Career center

Reading list

Share

Similar courses