Part 1: Getting Started with Splunk

In this part we will look at the need for Splunk and Splunk’s core components. We will set up a simple deployment and follow the steps to add and normalize data in Splunk.

This part comprises the following chapters:

• Chapter 1, Introduction to Splunk and its Core Components
• Chapter 2, Setting Up the Splunk Environment
• Chapter 3, Onboarding and Normalizing Data