> ## Documentation Index
> Fetch the complete documentation index at: https://splunk-training.ipoint-labs.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Lab 3: Searching with Splunk

> Hands-on lab · 45 min · Module 6

Narrow a broad search down to failed logins with keywords, fields and the timeline, then manage the search job.

[Launch Lab 3 in the IP Lab Portal](https://labs.intellectualpoint.com/labs/splunk-lab-3-searching-with-splunk)

## What you will do

1. Start with a broad keyword search
2. Narrow it to failed logins with keywords and fields
3. Zoom in with the timeline
4. Manage and share the search job

## Before you start

Time
45 minutes
*On your own Splunk lab machine*

Role
admin
*Every lab signs you in as admin*

Module
Module 6: Using Fields in Searches
*SPK-101*

* Click **Launch Lab 3 in the IP Lab Portal** to open the lab page, then click **Launch** to start your machine.
* Starting a lab counts as an attempt. Tick off steps in the lab guide to track your progress.
* The course data is `access_30DAY.log`, `linux_s_30DAY.log`, `db_audit_30DAY.csv` and `products.csv`.
* Review the slides in [Module 6 Material](https://splunk-training.ipoint-labs.com/spk-101/module-06/material.md) before you start.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.