SPL Training.

Search Processing Language training, from basic to advanced, with exercises based on real cases.

The problem we solve.

Much of Splunk's value depends on writing good searches. Poor SPL gives incorrect results or consumes resources across the whole platform.

Five phases, always in the same order. Select each one to see what happens in it. In full projects they map onto the stages of our method.

We assess the group's starting level and what they need to be able to do by the end.

We design the programme: syllabus, exercises, practice environment and schedule.

We deliver the sessions with progressive search exercises.

Each participant answers a set of questions using efficient SPL.

We gather feedback and results and refine the programme for future editions.

Answer complex questions with data.

Write efficient detections.

Optimise searches across the platform.

What level does it cover?

There are introductory, intermediate and advanced modules; we build the course around the group.

Do you teach how to optimise searches?

Yes, using Job Inspector and comparing alternatives for the same question.

Tell us about your situation. If this service is not what you need, we will tell you; if it is, we will propose a concrete first step.