Getting help with Enterprise Security

Training

Splunk offers a number of EDU training courses to help you get up to speed on how to make the most of your deployment. Completion of these courses is an essential building block to success. To explore all the education options, go to the course catalog and filter by certification, role, delivery method, and more. For more assistance understanding the course offerings, what certifications are available, and the perks included in the new learning rewards program, review the Splunk Education Student Handbook or get in touch with your account manager.

Good courses to start with to learn Splunk Enterprise Security (ES) are:

Using Splunk Enterprise Security: For SOC analysts. Covers detections and findings, the analyst queue, investigations and response plans, risk-based alerting, and the security domain and intelligence dashboards.
Administering Splunk Enterprise Security: For ES administrators and engineers. Covers detection engineering with the detection editor and Detection Studio, customizing the analyst queue, asset and identity management, data normalization, and threat intelligence management.

Technical help - OnDemand Services (ODS)

Plan	Implement	Use/Adopt	Scale
Use Case Advisory Discussion Enterprise Security Framework and Architecture Diagram Creation Assistance Data Readiness Security Maturity Guidance	Post Implementation Review	Dashboard, Report, Correlation Search Assistance Getting Started with Security Cloud Suite Getting Started with Behavior Analytics (BA) Service Data Model Review Enterprise Security Assets and Identities Planning or Assistance Data Source Review Index and Retention Review	Enterprise Security/UBA Technical Assessment Upgrade Readiness Assessment Scaling Advisement & Expansion Readiness Assessment Security Integrations Review

Project-based services

Support

Even the most savvy customer will need a little help. Whether it’s error messages, unexplained or unexpected behaviors, or incidents and outages, Technical Support is the first line of defense for all of your post-sales issues. Splunk Support Engineers will partner with you to ensure your environment is optimized to drive your journey with a focus on long-term technical health, so you can realize your ROI as soon as possible.

To review what is included with the Standard and Premium support programs, click here.

The Support Portal can be accessed from the Splunk.com home page for logged in users, or from the Splunk product application user interface. Bring up the navigation menu, scroll to the bottom of the side-bar, select Help & Support, and then select Support and Community. From there you will be able to open a support case.

Enterprise Security Tech Talks

Enterprise Security documentation

Splunk Enterprise Security 8

Splunk comprehensive resource guide

Splunk wants you to succeed. If you haven't yet found the right resource to help you get the job done, take a look at our comprehensive help guide. Find online, self-paced courses or an instructor to come to your workplace to teach you and your peers together. Download a trial to learn by playing or join a live BOTS event just to play. Connect with Splunk enthusiasts near you, contact an Assigned Expert to dig into a difficult problem, or flaunt your Splunk talent by sporting the last Splunk t-shirt. However you want to get more involved and deepen your Splunk skills, we have an option for you.

Previous step