SPLK-USSOC - Using SignalFlow in Splunk Observability Cloud

This 2-day (virtual days) course is targeted towards SREs, ITOps, and DevOps Engineers who are responsible for implementing and maintaining an observability solution for infrastructure and application monitoring. In this advanced technical course, you will learn to use SignalFlow – the analytics language used in Splunk Observability Cloud. SignalFlow is a programming language used to define Charts, Navigators and Detectors, and for more complicated data manipulation.

Use SignalFlow to develop visualizations and detectors that are more specific and reusable than what is possible using the user interface alone. You will create functions to analyze data and to incorporate elements from the Observability Cloud code library. The content covered in this course is essential to managing Observability Cloud resources as code using the REST API, Terraform or another contentas-code solution.

Duration: 2.0 days

Enquire Now

Start learning today!

Click Hereto customize your Training

Objectives

  • Writing your first SignalFlow program
  • Working with Data Streams in Splunk Observability Cloud
  • Stream aggregations, transformations, and calculations
  • Detecting and alerting in SignalFlow
  • Advanced detecting and stream manipulation
  • The SignalFlow REST API

Content

Module 1 - Writing Your First SignalFlow Program

  • Identify where SignalFlow is used in Splunk Observability Cloud
  • Create plots using SignalFlow instead of the Plot Builder
    • Query streaming data
    • Add filters to streaming data queries
    • Combine filters with and, or, not

Module 2 - Working with Data Streams in Splunk Observability Cloud

  • Describe the fundamentals of Data Stream objects
  • Use aggregation functions to analyze streaming data
  • Apply transformations to streaming data
  • Change resolutions, rollups, and extrapolation policies when querying streaming data

Module 3 - Stream aggregations, transformations, and calculations

  • Use combining operators on streams
  • Operate on data streams with missing data
  • Use the map() method to modify or exclude values in a stream
  • Describe variable assignment in SignalFlow
  • Differentiate between SignalFlow functions and methods
  • Describe and use SignalFlow functions that have equivalent methods

Module 4 - Detecting and Alerting in SignalFlow

  • Use the detect() function to monitor a stream
  • Use comparisons to create Boolean streams
  • Create constant streams and use them appropriately
  • Specify different "on" and "off" conditions for a detect block
  • Identify durations of an occurrence in streaming data
  • Compare streams using different thresholds for different MTSs
  • Create alerts rules that align with detectors

Module 5 - Advanced Detecting and Stream Manipulation

  • Work with properties and dimensions in SignalFlow
  • Compare values using multiple thresholds and a default
  • Use built-in library functions
  • Use conditional, list, and other Python-like functionality
  • Write reusable functions in SignalFlow
  • Write plot-builder compatible SignalFlow

Module 6 - The SignalFlow REST API

  • Explain the SignalFlow APIs available and common use cases
  • Execute a SignalFlow program using the HTTP API
  • Describe the data format returned by the HTTP API
  • Explain how Terraform is used to manage Infrastructure Monitoring resources in Splunk Observability Cloud
  • Create detectors and alert rules using the REST API

Audience

N/A

Prerequisites

  • Visualizing and Alerting Splunk Observability Cloud
  • Experience working with programming languages such as Python (preferred), JavaScript, or Go.

Certification

product-certification

Course Benefits

product-benefits
  • Career growth
  • Broad Career opportunities
  • Worldwide recognition from leaders
  • Up-to Date technical skills
  • Popular Certification Badges

Splunk Popular Courses

splk-sefs

This "Fast Start" course covers over 60 commands and functions and prepares students to be search experts.

splk-iiss

This course prepares security practitioners to use SOAR to respond to security incidents.

splk-dyd

This course focuses on creating inputs, chain searches, event annotations, and improving dashboard performance.

splk-introdyd

This course focuses on dashboard creation, including prototyping, the dashboard definition, layouts types, adding visualizations, and dynamic coloring.
Enquire Now
XcAuNK
By clicking "Submit", I agree to the Terms Of Use and Privacy Policy