Lab 10: Beyond Search Fundamentals

Find what Splunk treats as case-sensitive, time searches with the Job Inspector and compare the three search modes. Launch Lab 10 in the IP Lab Portal

What you will do

Test which parts of a search are case sensitive
Time searches with the Job Inspector
Compare Fast, Smart, and Verbose modes

Before you start

Time

45 minutes

Role

admin

Module

Module 14: Beyond Search Fundamentals

Click Launch Lab 10 in the IP Lab Portal to open the lab page, then click Launch to start your machine.
Starting a lab counts as an attempt. Tick off steps in the lab guide to track your progress.
The course data is access_30DAY.log, linux_s_30DAY.log, db_audit_30DAY.csv and products.csv.
Review the slides in Module 14 Material before you start.

Getting Started

Study Plan

Module 1

Module 2

Module 3

Module 4

Module 5

Module 6

Module 7

Module 8

Module 9

Module 10

Module 11

Module 12

Module 13

Module 14

Module 15

Module 16

Module 17

Module 18

Module 19

Module 20

Module 21

Module 22

Module 23

Module 24

Module 25

Module 26

What you will do

Before you start

​What you will do

​Before you start

What you will do

Before you start