Home > Vendors > splunk > splk-admsoar

SPLK-ADMSOAR - Administering Splunk SOAR

This 3.5 hour course prepares IT professionals to configure and manage SOAR.

Duration: 4.0 hours

Enquire Now

Start learning today!

Click Hereto customize your Training

Objectives

SOAR concepts
Initial configuration
Apps and assets
Configuring automation
User management
Ingesting Data
Customization and monitoring

Content

Topic 1 –Initial Configuration

Describe SOAR operating concepts
Identify documentation and community resources
SOAR & Splunk Architecture
Product settings
Access control
Authentication settings
Response settings
Understanding roles
Creating users
Managing user access

Topic 2 – Apps, Assets and Playbooks

Add and configure apps and assets
Manage playbooks
Ingesting Data
Labels and tags
Event settings

Topic 3 – Customization and Monitoring

Create custom severity levels
Create custom status levels
Add custom fields and CEF settings
Create custom workbooks
Run reports
Use SOAR audit tools
Monitor system health

Audience

None

Prerequisites

Investigating Incidents with Splunk SOAR

Certification

Course Benefits

Career growth
Broad Career opportunities
Worldwide recognition from leaders
Up-to Date technical skills
Popular Certification Badges

Splunk Popular Courses

splk-sefs

This "Fast Start" course covers over 60 commands and functions and prepares students to be search experts.

splk-iiss

This course prepares security practitioners to use SOAR to respond to security incidents.

splk-dyd

This course focuses on creating inputs, chain searches, event annotations, and improving dashboard performance.

splk-introdyd

This course focuses on dashboard creation, including prototyping, the dashboard definition, layouts types, adding visualizations, and dynamic coloring.

Enquire Now

bdcrbG

By clicking "Submit", I agree to the Terms Of Use and Privacy Policy

➤