Lab 2: Getting Data Into Splunk

Upload web, Linux and database logs with the Add Data wizard, set source types and hosts, and create a custom source type. Launch Lab 2 in the IP Lab Portal

What you will do

Upload the web, Linux, and database logs with the Add Data wizard
Set the source type and host for each file
Create a custom source type
Search the new data to confirm it indexed

Before you start

Time

45 minutes

Role

admin

Module

Module 4: Getting Data In

Click Launch Lab 2 in the IP Lab Portal to open the lab page, then click Launch to start your machine.
Starting a lab counts as an attempt. Tick off steps in the lab guide to track your progress.
The course data is access_30DAY.log, linux_s_30DAY.log, db_audit_30DAY.csv and products.csv.
Review the slides in Module 4 Material before you start.

Getting Started

Study Plan

Module 1

Module 2

Module 3

Module 4

Module 5

Module 6

Module 7

Module 8

Module 9

Module 10

Module 11

Module 12

Module 13

Module 14

Module 15

Module 16

Module 17

Module 18

Module 19

Module 20

Module 21

Module 22

Module 23

Module 24

Module 25

Module 26

What you will do

Before you start

​What you will do

​Before you start

What you will do

Before you start