# Splunk Power User Training

- [Welcome](https://splunk-training.ipoint-labs.com/index.md): Intellectual Point Splunk Core Certified Power User training.
- [Lab logins](https://splunk-training.ipoint-labs.com/course/lab-logins.md): How to sign in to the IP Lab Portal.
- [Splunk Power User master deck](https://splunk-training.ipoint-labs.com/course/master-deck.md): Core User and Power User in one deck, Modules 1 to 26.
- [Study plan: Evening · IAD1-B](https://splunk-training.ipoint-labs.com/study-plan/evening-iad1-b.md): Monday to Friday, 6:00 pm to 10:00 pm. October 26 to November 20, 2026.
- [Study plan: Weekday · IAD1-B](https://splunk-training.ipoint-labs.com/study-plan/weekday-iad1-b.md): Tuesday, Wednesday, and Friday, 9:00 am to 4:00 pm. October 27 to November 20, 2026.
- [Study plan: Weekend · IAD1-A](https://splunk-training.ipoint-labs.com/study-plan/weekend-iad1-a.md): Saturday and Sunday, 8:00 am to 6:00 pm. October 31 to November 22, 2026.
- [Study plan: Weekend · IAD1-B](https://splunk-training.ipoint-labs.com/study-plan/weekend-iad1-b.md): Saturday and Sunday, 8:00 am to 6:00 pm. October 31 to November 22, 2026.
- [Course introduction](https://splunk-training.ipoint-labs.com/spk-101/module-01/introduction.md): How the course runs, the SPK-101 and SPK-102 exams, and your lab portal.
- [Module 1: Introducing Splunk](https://splunk-training.ipoint-labs.com/spk-101/module-01/material.md): What Splunk is, the data it indexes, apps, roles, and a tour of Splunk Web
- [Lab 1: Exploring the Splunk Web Interface and Settings](https://splunk-training.ipoint-labs.com/spk-101/module-01/lab-01.md): Hands-on lab · 45 min · Module 1
- [Module 2: Splunk Components](https://splunk-training.ipoint-labs.com/spk-101/module-02/material.md): Indexers, search heads, forwarders, and how deployments scale
- [Module 3: Installing Splunk](https://splunk-training.ipoint-labs.com/spk-101/module-03/material.md): The Enterprise package, installation steps, and common CLI commands
- [Module 4: Getting Data In](https://splunk-training.ipoint-labs.com/spk-101/module-04/material.md): The index-time process, input types, metadata, and the Add Data wizard
- [Lab 2: Getting Data Into Splunk](https://splunk-training.ipoint-labs.com/spk-101/module-04/lab-02.md): Hands-on lab · 45 min · Module 4
- [Module 5: Basic Search](https://splunk-training.ipoint-labs.com/spk-101/module-05/material.md): Search Assistant, results, time ranges, the timeline, and search jobs
- [Module 6: Using Fields in Searches](https://splunk-training.ipoint-labs.com/spk-101/module-06/material.md): Field discovery, the fields sidebar, field searches, and search modes
- [Lab 3: Searching with Splunk](https://splunk-training.ipoint-labs.com/spk-101/module-06/lab-03.md): Hands-on lab · 45 min · Module 6
- [Module 7: Search Best Practices](https://splunk-training.ipoint-labs.com/spk-101/module-07/material.md): Time, indexes, and filtering early to keep searches fast
- [Module 8: Splunk's Search Language](https://splunk-training.ipoint-labs.com/spk-101/module-08/material.md): Syntax, the search pipeline, and table, rename, fields, dedup, and sort
- [Lab 4: Basic Commands](https://splunk-training.ipoint-labs.com/spk-101/module-08/lab-04.md): Hands-on lab · 45 min · Module 8
- [Module 9: Transforming Commands](https://splunk-training.ipoint-labs.com/spk-101/module-09/material.md): top, rare, and stats with its most useful functions
- [Lab 5: Transforming Commands](https://splunk-training.ipoint-labs.com/spk-101/module-09/lab-05.md): Hands-on lab · 45 min · Module 9
- [Module 10: Creating Reports and Dashboards](https://splunk-training.ipoint-labs.com/spk-101/module-10/material.md): Saving reports, visualizations, dashboard panels, and drilldowns
- [Lab 6: Creating Reports and Dashboards](https://splunk-training.ipoint-labs.com/spk-101/module-10/lab-06.md): Hands-on lab · 45 min · Module 10
- [Module 11: Pivot and Datasets](https://splunk-training.ipoint-labs.com/spk-101/module-11/material.md): Datasets, Pivot splits and filters, and Instant Pivot
- [Lab 7: Using Pivot](https://splunk-training.ipoint-labs.com/spk-101/module-11/lab-07.md): Hands-on lab · 45 min · Module 11
- [Module 12: Creating and Using Lookups](https://splunk-training.ipoint-labs.com/spk-101/module-12/material.md): Lookup files, definitions, the lookup command, and automatic lookups
- [Lab 8: Creating Lookups](https://splunk-training.ipoint-labs.com/spk-101/module-12/lab-08.md): Hands-on lab · 45 min · Module 12
- [Module 13: Scheduled Reports and Alerts](https://splunk-training.ipoint-labs.com/spk-101/module-13/material.md): Schedules, permissions, alert types, trigger conditions, and actions
- [Lab 9: Creating Alerts](https://splunk-training.ipoint-labs.com/spk-101/module-13/lab-09.md): Hands-on lab · 45 min · Module 13
- [Module 14: Beyond Search Fundamentals](https://splunk-training.ipoint-labs.com/spk-102/module-14/material.md): Basic commands reviewed, case sensitivity, and how Splunk runs a search
- [Lab 10: Beyond Search Fundamentals](https://splunk-training.ipoint-labs.com/spk-102/module-14/lab-10.md): Hands-on lab · 45 min · Module 14
- [Module 15: Commands for Visualizations](https://splunk-training.ipoint-labs.com/spk-102/module-15/material.md): Data structure, chart and timechart, and choosing a reporting command
- [Lab 11: Commands for Visualizations](https://splunk-training.ipoint-labs.com/spk-102/module-15/lab-11.md): Hands-on lab · 45 min · Module 15
- [Module 16: Advanced Visualizations](https://splunk-training.ipoint-labs.com/spk-102/module-16/material.md): Trendlines, maps with iplocation and geostats, single values, and addtotals
- [Lab 12: Advanced Visualizations](https://splunk-training.ipoint-labs.com/spk-102/module-16/lab-12.md): Hands-on lab · 45 min · Module 16
- [Module 17: Filtering and Formatting Data](https://splunk-training.ipoint-labs.com/spk-102/module-17/material.md): eval for calculations and conditions, search and where, and fillnull
- [Lab 13: Filtering and Formatting Data](https://splunk-training.ipoint-labs.com/spk-102/module-17/lab-13.md): Hands-on lab · 45 min · Module 17
- [Module 18: Correlating Events](https://splunk-training.ipoint-labs.com/spk-102/module-18/material.md): Transactions by fields and time, and when to use transaction or stats
- [Lab 14: Correlating Events](https://splunk-training.ipoint-labs.com/spk-102/module-18/lab-14.md): Hands-on lab · 45 min · Module 18
- [Module 19: Introduction to Knowledge Objects](https://splunk-training.ipoint-labs.com/spk-102/module-19/material.md): Object categories, the knowledge manager, naming, and permissions
- [Lab 15: Working with Knowledge Objects](https://splunk-training.ipoint-labs.com/spk-102/module-19/lab-15.md): Hands-on lab · 45 min · Module 19
- [Module 20: Creating and Managing Fields](https://splunk-training.ipoint-labs.com/spk-102/module-20/material.md): The Field Extractor with regex and delimiters, and managing extractions
- [Lab 16: Creating and Managing Fields](https://splunk-training.ipoint-labs.com/spk-102/module-20/lab-16.md): Hands-on lab · 45 min · Module 20
- [Module 21: Field Aliases and Calculated Fields](https://splunk-training.ipoint-labs.com/spk-102/module-21/material.md): Normalize field names with aliases and add fields with eval expressions
- [Lab 17: Field Aliases and Calculated Fields](https://splunk-training.ipoint-labs.com/spk-102/module-21/lab-17.md): Hands-on lab · 45 min · Module 21
- [Module 22: Tags and Event Types](https://splunk-training.ipoint-labs.com/spk-102/module-22/material.md): Tag field values and save searches as reusable event types
- [Lab 18: Creating Tags and Event Types](https://splunk-training.ipoint-labs.com/spk-102/module-22/lab-18.md): Hands-on lab · 45 min · Module 22
- [Module 23: Creating and Using Macros](https://splunk-training.ipoint-labs.com/spk-102/module-23/material.md): Basic macros, arguments, and managing macros
- [Lab 19: Macros](https://splunk-training.ipoint-labs.com/spk-102/module-23/lab-19.md): Hands-on lab · 45 min · Module 23
- [Module 24: Creating and Using Workflow Actions](https://splunk-training.ipoint-labs.com/spk-102/module-24/material.md): GET, POST, and Search workflow actions
- [Lab 20: Workflow Actions](https://splunk-training.ipoint-labs.com/spk-102/module-24/lab-20.md): Hands-on lab · 45 min · Module 24
- [Module 25: Creating Data Models](https://splunk-training.ipoint-labs.com/spk-102/module-25/material.md): Datasets, fields, building a data model, and using it in Pivot
- [Lab 21: Data Models](https://splunk-training.ipoint-labs.com/spk-102/module-25/lab-21.md): Hands-on lab · 45 min · Module 25
- [Module 26: The Common Information Model](https://splunk-training.ipoint-labs.com/spk-102/module-26/material.md): The CIM Add-On and normalizing data across sources
- [Lab 22: Using the CIM](https://splunk-training.ipoint-labs.com/spk-102/module-26/lab-22.md): Hands-on lab · 45 min · Module 26

## Optional

- [MyIP Portal](https://my.ipoint.id)
- [IP Lab Portal](https://labs.intellectualpoint.com)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.