Leveraging Lookups and Subsearches (LLS)

 

Certifications

This course is part of the following Certifications:

Prerequisites

To be successful, students should have a solid understanding of the following:

  • How Splunk works
  • Knowledge objects
  • Lookups

Course Objectives

  • Using Lookup Commands
  • Adding a Subsearch
  • Using the return Command

Course Content

This three-hour course is designed for power users who want to learn how to use lookups and subsearches to enrich their results. Topics will focus on lookup commands and explore how to use subsearches to correlate and filter data from multiple sources.

Prices & Delivery methods

Online Training

Duration
3 hours

Price
  • on request
Classroom Training

Duration
3 hours

Price
  • on request

Schedule

English

2 hours difference

Online Training This is a FLEX course. Time zone: Greenwich Mean Time (GMT)
Online Training This is a FLEX course. Time zone: British Summer Time (BST)
Online Training This is a FLEX course. Time zone: British Summer Time (BST)
Online Training This is a FLEX course. Time zone: Greenwich Mean Time (GMT)

7 hours difference

Online Training Time zone: Eastern Standard Time (EST)
Online Training Time zone: Eastern Standard Time (EST)
Online Training Time zone: Eastern Daylight Time (EDT)
Online Training Time zone: Eastern Daylight Time (EDT)
Online Training Time zone: Eastern Daylight Time (EDT)
Online Training Time zone: Eastern Daylight Time (EDT)
Online Training Time zone: Eastern Daylight Time (EDT)
Online Training Time zone: Eastern Daylight Time (EDT)
Online Training Time zone: Eastern Standard Time (EST)
Online Training Time zone: Eastern Standard Time (EST)

8 hours difference

Online Training Time zone: Central Standard Time (CST)
Online Training Time zone: Central Standard Time (CST)

9 hours difference

Online Training Time zone: Pacific Daylight Time (PDT)
Online Training Time zone: Pacific Daylight Time (PDT)

10 hours difference

Online Training Time zone: Pacific Daylight Time (PDT)
Online Training Time zone: Pacific Daylight Time (PDT)
Guaranteed date:   We will carry out all guaranteed training regardless of the number of attendees, exempt from force majeure or other unexpected events, like e.g. accidents or illness of the trainer, which prevent the course from being conducted.
Instructor-led Online Training:   This computer icon in the schedule indicates that this date/time will be conducted as Instructor-Led Online Training.
This is a FLEX course, which is delivered both virtually and in the classroom. All FLEX courses are also Instructor-led Online Trainings (ILO).

Europe

United Kingdom

London, City
London, City
London, City
London, City
This is a FLEX course, which is delivered both virtually and in the classroom. All FLEX courses are also Instructor-led Online Trainings (ILO).