WANT TO BECOME A SPLUNK ENGINEER? HERE'S WHAT I WISH I KNEW STARTING OUT
DOI:
https://doi.org/10.5281/zenodo.20070553Keywords:
Observability engineering, Splunk, Data Pipeline, Search Processing Language (SPL), Knowledge Objects, Log Analytics, SIEMAbstract
Observability engineering turns diverse machine data into understanding of systems for operations, reliability, and security. Does this mean anything? Platforms like Splunk can ingest, index, correlate, and visualize almost any kind of heterogeneous data, but their scope is so broad they easily overwhelm beginners and create silos. The roadmap in this article is based on years of experience designing and building Splunk applications and consists of the steps necessary to evolve from a casual user to an experienced Splunk engineer. To get there, you must learn how the data pipeline works and gain expertise in SPL, native log formats, and an increasingly complex personal Splunk lab. It also explores the modular architecture, packaging of extensions, and knowledge objects to enable scalable analytics and reusable operational intelligence. It concludes by showing engineers how using structured preparation for certifications and scenario-based interviews can convert their private technical knowledge into evidence of engineering judgment in the workplace.
References
Splunk Inc., "The State of Observability 2023," Splunk Inc., San Francisco, CA, USA, 2023. [Online]. Available: https://www.splunk.com/en_us/blog/devops/the-state-of-observability-2023-realizing-roi-and-in creasing-digital-resilience.html
Grand View Research, "Security Information and Event Management (SIEM) Market Size, Share & Trends Analysis Report," Grand View Research, San Francisco, CA, USA, 2023. [Online]. Available: https://www.grandviewresearch.com/industry-analysis/security-information-event-management-market-report
Pankaj Prasad, Charley Rich, "Market Guide for AIOps Platforms," Gartner Inc., Stamford, CT, USA, 2018. [Online]. Available: https://cloudaims.co.in/wp-content/uploads/2021/02/Market-Guide-for-AIOps-Platfo rms-Gartner-Reprint-1.pdf
Nicholas C. Soderstrom and Robert A. Bjork, "Learning Versus Performance: An Integrative Review," Perspectives on Psychological Science, vol. 10, no. 2, pp. 176–199, Mar. 2015. [Online]. Available: https://bjorklab.psych.ucla.edu/wp-content/uploads/sites/13/2016/11/soderstorm_ra_learningvsperformanc e.pdf
Richard R. Hake, "Interactive-Engagement Versus Traditional Methods: A Six-Thousand-Student Survey of Mechanics Test Data for Introductory Physics Courses,"American Journal of Physics, vol. 66, no. 1, pp. 64–74, Jan. 1998. [Online]. Available: https://web.mit.edu/jrankin/www/Active_Learning/hake_active_ phys.pdf
Janet Metcalfe, "Learning from Errors," Annual Review of Psychology, vol. 68, pp. 465–489, Jan. 2017. [Online]. Available: https://www.annualreviews.org/content/journals/10.1146/annurev-psych-010416-044 022
Len Bass, et al., "Software Architecture in Practice, 3rd ed.," Upper Saddle River, NJ, USA: Addison-Wesley, 2012. [Online]. Available: https://ptgmedia.pearsoncmg.com/images/9780321815736/samplep ages/0321815734.pdf
D. L. Parnas, "On the Criteria To Be Used in Decomposing Systems into Modules," Communications of the ACM, vol. 15, no. 12, pp. 1053–1058, Dec. 1972. [Online]. Available: https://dl.acm.org/doi/epdf/10.1145 /361598.361623
Douglas P. Larsen, et al., "Repeated testing improves long-term retention relative to repeated study: a randomized controlled trial," in Test-enhanced learning, 2009. [Online]. Available: http://psychnet.wust l.edu/memory/wp-content/uploads/2018/04/Larsen-et-al-2009_MedEd.pdf
A. Ericsson and R. Pool, Peak: Secrets from the New Science of Expertise. Boston, MA, USA: Houghton Mifflin Harcourt, 2016. [Online]. Available: https://irp-cdn.multiscreensite.com/cb9165b2/files/uploaded/ Peak_%20How%20to%20Master%20Almost%20Anything%20
(%20PDFDrive.com%20).pdf
D. Ratnayake, “Building and scaling marketing businesses across B2B: An AI-enabled enterprise growth strategy perspective,” Journal of International Crisis and Risk Communication Research, pp. 384–392, 2021. [Online]. Available; https://doi.org/10.63278/jicrcr.vi.3768
F. A-Clottey, “Examining the role of leadership quality in aligning client relationships and supply chain strategy,” Journal of Computational Analysis and Applications (JoCAAA), vol. 29, no. 3, pp. 647–661, 2021. [Online]. Available: https://www.eudoxuspress.com/index.php/pub/article/view/5344
I. Rubinstein, “Strategic monetization in digital media ecosystems: Leveraging unique advertising formats and publisher relationship management,” Journal of Computational Analysis and Applications (JoCAAA), vol. 29, no. 6, pp. 662–676, 2021. [Online]. Available: https://www.eudoxuspress.com/index.php/pub/ article/view/5345
M. K. Babu and Y. Suthari, “Secure and intelligent PLC systems: Integrating artificial intelligent for enhanced industrial control and data privacy,” Computer Fraud and Security, vol. 23, no. 11, 2023. [Online]. Available; https://doi.org/10.52710/cfs.627
N. D. Benneh, “Sovereign infrastructure finance and economic development: Evidence from emerging economies,” Journal of International Crisis and Risk Communication Research, pp. 373–383, 2021. [Online]. Available: https://doi.org/10.63278/jicrcr.vi.3767
Downloads
Published
How to Cite
Issue
Section
License
This work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License.
Author(s) and co-author(s) jointly and severally represent and warrant that the Article is original with the author(s) and does not infringe any copyright or violate any other right of any third parties and that the Article has not been published elsewhere. Author(s) agree to the terms that the IPHO Journal will have the full right to remove the published article on any misconduct found in the published article.
