When will I have access to the lectures and assignments?

To access the course materials, assignments and to earn a Certificate, you will need to purchase the Certificate experience when you enroll in a course. You can try a Free Trial instead, or apply for Financial Aid. The course may offer 'Full Course, No Certificate' instead. This option lets you see all course materials, submit required assessments, and get a final grade. This also means that you will not be able to purchase a Certificate experience.

What will I get if I subscribe to this Specialization?

When you enroll in the course, you get access to all of the courses in the Specialization, and you earn a certificate when you complete the work. Your electronic Certificate will be added to your Accomplishments page - from there, you can print your Certificate or add it to your LinkedIn profile.

Is financial aid available?

Yes. In select learning programs, you can apply for financial aid or a scholarship if you can’t afford the enrollment fee. If fin aid or scholarship is available for your learning program selection, you’ll find a link to apply on the description page.

Splunk Search Expert 102

3 days left! Save on skills that make you shine with 40% off 3 months of Coursera Plus. Save now

Splunk Search Expert 102

This course is part of Splunk Search Expert Specialization

Instructor: Splunk Instructor

5,013 already enrolled

Included with

Learn more

5 modules

Gain insight into a topic and learn the fundamentals.

54 reviews

Beginner level

No prior experience required

6 hours to complete

Flexible schedule

Learn at your own pace

5 modules

Gain insight into a topic and learn the fundamentals.

54 reviews

Beginner level

No prior experience required

6 hours to complete

Flexible schedule

Learn at your own pace

What you'll learn

Filter data using time modifiers and time commands and use formatting functions to accommodate various time formats.
Calculate statistics using transforming commands and mathematical and statistical eval functions.
Compare, manipulate, and normalize data using several commands including the all-powerful eval command and an array of functions.
Enrich results with lookups and subsearches to correlate and filter data from multiple sources.

Skills you'll gain

Tools you'll learn

Splunk

Details to know

Shareable certificate

Add to your LinkedIn profile

Assessments

5 assignments

Taught in English

91% of learners achieved a positive career outcome

See how employees at top companies are mastering in-demand skills

Learn more about Coursera for Business

logos of Petrobras, TATA, Danone, Capgemini, P&G and L'Oreal

Build your subject-matter expertise

This course is part of the Splunk Search Expert Specialization

When you enroll in this course, you'll also be enrolled in this Specialization.

Learn new concepts from industry experts
Gain a foundational understanding of a subject or tool
Develop job-relevant skills with hands-on projects
Earn a shareable career certificate

There are 5 modules in this course

Take the next step in your knowledge of Splunk. In this course, you will learn how to use time differently based on scenarios, learn commands to help process, manipulate and correlate data.

Module details

This module is for users who want to become experts at using time in searches. Topics will focus on searching and formatting time in addition to using time commands and working with time zones.

What's included

5 videos2 readings1 assignment

This module is for users who want to identify and use transforming commands and eval functions to calculate statistics on their data. Topics will cover data series types, primary transforming commands, mathematical and statistical eval functions, using eval as a function, and the rename and sort commands.

What's included

13 videos2 readings1 assignment

13 videosTotal 49 minutes

What is a Data Series?1 minute
Chart Command7 minutes
Timechart Command7 minutes
Top Command4 minutes
Rare Command0 minutes
Stats Command3 minutes
Functions of the Stats Command7 minutes
Transforming Commands Summary1 minute
Eval Command7 minutes
Functions of the Eval Command4 minutes
Eval as a Function1 minute
Rename Command3 minutes
Sort Command3 minutes

2 readingsTotal 15 minutes

Learning Objectives5 minutes
Lesson Notes10 minutes

1 assignmentTotal 5 minutes

Statistical Processing5 minutes

This three-hour course is for power users who want to learn how to compare field values using eval functions and eval expressions. Topics will focus on using the comparison and conditional functions of the eval command, and using eval expressions with the fieldformat and where commands.

What's included

9 videos2 readings1 assignment

9 videosTotal 36 minutes

Using Eval to Compare7 minutes
Evaluation Functions3 minutes
If Function3 minutes
Case Function4 minutes
Validate Function1 minute
In Function2 minutes
Match Functions5 minutes
Fieldformat Command2 minutes
Where Command8 minutes

2 readingsTotal 10 minutes

Learning Objectives5 minutes
Lesson Notes5 minutes

1 assignmentTotal 5 minutes

Comparing Values5 minutes

This module is for users who want to use commands to manipulate output and normalize data. Topics will focus on specific commands for manipulating fields and field values, modifying result sets, and managing missing data. Additionally, students will learn how to use specific eval command functions to normalize fields and field values across multiple data sources.

What's included

16 videos2 readings1 assignment

16 videosTotal 92 minutes

Appendpipe Command10 minutes
Eventstats Command9 minutes
Streamstats Command6 minutes
Fillnull Command2 minutes
Bin Command2 minutes
Xyseries Command2 minutes
Untable Command3 minutes
Working with Xyseries and Untable13 minutes
Foreach Command2 minutes
Modifying Field Values with Eval12 minutes
Eval Conversion Functions11 minutes
Eval Text Functions6 minutes
Substr Function2 minutes
Replace Function6 minutes
Case Function4 minutes
Coalesce Function2 minutes

2 readingsTotal 10 minutes

Learning Objectives5 minutes
Lesson Notes5 minutes

1 assignmentTotal 5 minutes

Result Modification5 minutes

This module is designed for users who want to learn how to use lookups and subsearches to enrich their results. Topics will focus on lookup commands and explore how to use subsearches to correlate and filter data from multiple sources.