Splunk .conf22

Live from Splunk .conf22

Keeping systems running? Blocking attacks? Optimizing apps? You’re in the business of innovation. Join us at .conf22 to learn how to unlock your data and deliver new ideas with Splunk.

Type

Hybrid

Dates

Virtual AMER - June 14-15
Virtual APAC & EMEA - June 15-16
Las Vegas,NV - June 13-16

BSides Splunk Talks

Maximizing Splunk: Let's Build a Data Source Monitoring Utility

"Which sources are no longer reporting into Splunk?" - Join me in answering this question as we walk through the process of transforming a simple alert query into a reliable foundation to build monitoring and reporting on.

Packaged into a ready-to-use Splunk App, learn how we can leverage good-practice design principles of efficiency, visibility, and confidence to maximize value and unleash Splunk's potential.

Speaker:

Ryan Wood


Using API calls Maps+ to more quickly locate and compare Supports to Bad Actors inside of PATCh

In order to help investigators save time in determining if a potential match is more or less likely, we started utilizing API calls to get GPS coordinates of supporter addresses and then comparing those GPS coordinates to known Bad Actors in an attempt to protect the children we support from being accessible by predatory individuals. The presentation will include a brief overview of PATCh (As seen in .Conf21)

Speaker:

Jonathan Wagner

Other Talks / Events

PLA1162B - Clara-Fication: Finding and Improving Expensive Searches

You've been running Splunk for a while, and several teams have picked up on getting results out of Splunk - great! There's always room for search improvement, but how do you prioritize your time? We'll show you how to locate the most expensive searches, from overzealous alert scheduling to enormous dashboards, and share the most common starting points for effective search optimization.

Speaker:

Martin Müller, Principal Consultant, Consist Software Solutions GmbH
Clara Merriman, Senior Splunk Engineer, Splunk


COM1223B - SPL-ing Bee

Do you know how to write SPL™? Here is your chance to show off your skills! This fun game will have multiple rounds with sample data to run searches against to answer questions and get the correct answer. Results will be shown in real-time and judged based on search efficiency, quickest to answer, and correctness. Come join the fun!

Speaker:

Clara Merriman, Senior Splunk Engineer, Splunk
Ryan O'Connor, Principal Product Manager, Splunk
Micah Kemp, Principal Splunk/CICD Engineer, Splunk


PLA1422B - Learn Your Data - Getting Started With Exploring Data via the UI and SPL™

My data is ingested, but what do I do with it now? That's a common question, but one that we can answer! Join me in learning some simple tips and tricks for exploring your data using the user interface (UI) and some simple SPL™. Discover how to find useful fields, what to do with those fields when you see them, and how to "connect the dots" when individual events need to be grouped to be useful.

Speaker:

Rich Mahlerwein, Director of Intelligence, Sideview


COM1743 - Study Club for Splunk Session 1: How to Install Splunk Products Like an Ace Student

Join .conf22’s Study Club for Splunk Session 1 and learn how to install Splunk products like an ace student. This session will cover the key “great to knows” and gotchas in relation to installing Splunk products. Presenters will share tips, tricks and best practices related to: security permissions primer, helpful Linux commands and installing and fine tuning Splunk products.

Speaker:

Suman Gajavelly, CTO, bitsIO
Tony Reinke, Network Security Engineer, Children's Hospital & Medical Center - Omaha
Aleem Cummins, VP EMEA, bitsIO Inc


COM1744 - Study Club for Splunk Session 2: How to Onboard Data Like an Ace Student

Join the Study Club from .conf22 for Splunk Session 2 and learn how to onboard data to Splunk like an ace student. This session will cover the key “great to knows” and gotchas in relation to onboarding data. Presenters will share tips, tricks and best practices related to: onboarding primer, the magic 8 onboarding settings, and using the Oneshot command.

Speaker:

Suman Gajavelly, CTO, bitsIO
Tony Reinke, Network Security Engineer, Children's Hospital & Medical Center - Omaha
Aleem Cummins, VP EMEA, bitsIO Inc


COM1745 - Study Club for Splunk Session 3: How to Discover and Troubleshoot Data Like an Ace Student

Join the Study Club from .conf22 for Splunk Session 3 and learn how to discover and troubleshoot like an ace student. This session will cover the key “great to knows” and gotchas in relation to troubleshooting. Presenters will share tips, tricks and best practices related to: troubleshooting primer, go-to techniques and commands, and housekeeping, standards and upgrading.

Speaker:

Suman Gajavelly, CTO, bitsIO
Tony Reinke, Network Security Engineer, Children's Hospital & Medical Center - Omaha
Aleem Cummins, VP EMEA, bitsIO Inc


#SPLUG Podcast

We will be recording and publishing the first episode of the Splunk User Group Podcast. This podcast will bring your the news and stories from around the Splunk community. We will be joined by Bryan Jennewein. The podcast will be hosted at https://splugpodcast.buzzsprout.com/

Hosts:

Caroline McGee
Michael Camp Bentley
Tony Reinke