Intro to Knowledge Objects

Overview

This is a free e-learning module that is part of multiple learning paths. This module should be consumed in the sequence recommended in the corresponding learning paths.

 

Product Description

This eLearning module teaches students about how different types of knowledge objects to extract additional insights from their data. Students will learn the basics of how to create knowledge objects, define their settings, edit, and manage existing knowledge objects.

Prerequisites

Intro to Splunk eLearning module (recommended)

Course Objectives

  • Using knowledge objects to discover and analyze data
  • Developing naming conventions for knowledge objects
  • Defining permissions for knowledge objects
  • Managing knowledge objects

Outline

Topic 1 – What Are Knowledge Objects?

  • Understand the different types of knowledge objects:
  • Fields
  • Field Extractions
  • Field aliases
  • Calculated fields
  • Lookups
  • Event types
  • Tags
  • Workflow actions
  • Reports
  • Alerts
  • Macros
  • Data models

Topic 2 – Knowledge Object Settings

  • Define naming conventions
  • Define role-based permissions for knowledge objects

Topic 3 – Managing Knowledge Objects

  • Edit knowledge objects
  • Reassign knowledge objects
E-Learning
Free offering