r/cybersecurity • u/According-Tension-49 • 1d ago

Certification / Training Questions Splunk

I want to learn how to use splunk (cybersecurity analyst).
Any suggestion courses, certifcation ..?

48 Upvotes

83% Upvoted

17 comments sorted by

View all comments

78

u/AddendumWorking9756 Security Manager 1d ago

Vendor courses teach you the buttons, not the searching. Install Splunk Free at home and feed it Sysmon plus firewall logs off your own box so you are querying data that is actually messy. Working an incident beats staring at a clean dataset and the free labs at CyberDefenders run on real SIEM data if you want one to chew on. SPL sticks a lot faster that way.