<?xml version="1.0" encoding="utf-8" ?>
<!DOCTYPE FL_Course SYSTEM "https://www.flane.de/dtd/fl_course095.dtd"><?xml-stylesheet type="text/xsl" href="https://portal.flane.ch/css/xml-course.xsl"?><course productid="26162" language="en" source="https://portal.flane.ch/swisscom/en/xml-course/splunk-ssp" lastchanged="2026-02-16T12:20:41+01:00" parent="https://portal.flane.ch/swisscom/en/xml-courses"><title>Statistical Processing</title><productcode>SSP</productcode><vendorcode>SP</vendorcode><vendorname>Splunk</vendorname><fullproductcode>SP-SSP</fullproductcode><version>1.0</version><essentials>&lt;p&gt;To be successful, students must have completed these Splunk Education course(s) or have equivalent working knowledge:
&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Intro to Splunk&lt;/li&gt;&lt;li&gt;&lt;span class=&quot;cms-link-marked&quot;&gt;&lt;a class=&quot;fl-href-prod&quot; href=&quot;/swisscom/en/course/splunk-suf&quot;&gt;&lt;svg role=&quot;img&quot; aria-hidden=&quot;true&quot; focusable=&quot;false&quot; data-nosnippet class=&quot;cms-linkmark&quot;&gt;&lt;use xlink:href=&quot;/css/img/icnset-linkmarks.svg#linkmark&quot;&gt;&lt;/use&gt;&lt;/svg&gt;Using Fields &lt;span class=&quot;fl-prod-pcode&quot;&gt;(SUF)&lt;/span&gt;&lt;/a&gt;&lt;/span&gt;&lt;/li&gt;&lt;li&gt;Visualizations&lt;/li&gt;&lt;li&gt;&lt;span class=&quot;cms-link-marked&quot;&gt;&lt;a class=&quot;fl-href-prod&quot; href=&quot;/swisscom/en/course/splunk-wwt&quot;&gt;&lt;svg role=&quot;img&quot; aria-hidden=&quot;true&quot; focusable=&quot;false&quot; data-nosnippet class=&quot;cms-linkmark&quot;&gt;&lt;use xlink:href=&quot;/css/img/icnset-linkmarks.svg#linkmark&quot;&gt;&lt;/use&gt;&lt;/svg&gt;Working with Time &lt;span class=&quot;fl-prod-pcode&quot;&gt;(WWT)&lt;/span&gt;&lt;/a&gt;&lt;/span&gt;&lt;/li&gt;&lt;/ul&gt;</essentials><audience>&lt;ul&gt;
&lt;li&gt;Users/Analysts&lt;/li&gt;&lt;li&gt;Administrators&lt;/li&gt;&lt;li&gt;Engineers&lt;/li&gt;&lt;/ul&gt;</audience><outline>&lt;p&gt;&lt;strong&gt;Module 1 - What is a Data Series&lt;/strong&gt;&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Introduce data series&lt;/li&gt;&lt;li&gt;Explore the difference between single-series, multi-series, and time series data series&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;&lt;strong&gt;Module 2 - Transforming Data&lt;/strong&gt;&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Use the chart, timechart, top, rare, and stats commands to transform events into data tables&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;&lt;strong&gt;Module 3 &amp;ndash; Statistical Aggregation with the stats Command&lt;/strong&gt;
&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Define aggregation&lt;/li&gt;&lt;li&gt;Explore the stats command and eight of its functions&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;&lt;strong&gt;Module 4 &amp;ndash; Manipulating Data with the eval Command&lt;/strong&gt;
&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Explore the eval command&lt;/li&gt;&lt;li&gt;Explore and perform calculations using mathematical and statistical eval functions&lt;/li&gt;&lt;li&gt;Perform calculations and concentrations on field values&lt;/li&gt;&lt;li&gt;Use the eval command as a function with the stats command&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;&lt;strong&gt;Module 5 &amp;ndash; Formatting Data&lt;/strong&gt;
&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Use the rename command&lt;/li&gt;&lt;li&gt;Use the sort command&lt;/li&gt;&lt;/ul&gt;</outline><essentials_plain>To be successful, students must have completed these Splunk Education course(s) or have equivalent working knowledge:



- Intro to Splunk
- Using Fields (SUF)
- Visualizations
- Working with Time (WWT)</essentials_plain><audience_plain>- Users/Analysts
- Administrators
- Engineers</audience_plain><outline_plain>Module 1 - What is a Data Series


- Introduce data series
- Explore the difference between single-series, multi-series, and time series data series
Module 2 - Transforming Data


- Use the chart, timechart, top, rare, and stats commands to transform events into data tables
Module 3 – Statistical Aggregation with the stats Command



- Define aggregation
- Explore the stats command and eight of its functions
Module 4 – Manipulating Data with the eval Command



- Explore the eval command
- Explore and perform calculations using mathematical and statistical eval functions
- Perform calculations and concentrations on field values
- Use the eval command as a function with the stats command
Module 5 – Formatting Data



- Use the rename command
- Use the sort command</outline_plain><duration unit="d" days="0">3 hours</duration><pricelist><price country="US" currency="USD">500.00</price><price country="IT" currency="USD">500.00</price><price country="GB" currency="GBP">420.00</price><price country="PL" currency="USD">500.00</price><price country="DE" currency="EUR">500.00</price><price country="CA" currency="CAD">690.00</price><price country="CH" currency="CHF">550.00</price><price country="NL" currency="EUR">500.00</price></pricelist><miles><milesvalue country="CA" vendorcurrency="SPC" vendorcurrencyname="Splunk Training Units">50.00</milesvalue><milesvalue country="US" vendorcurrency="SPC" vendorcurrencyname="Splunk Training Units">50.00</milesvalue><milesvalue country="IT" vendorcurrency="SPC" vendorcurrencyname="Splunk Training Units">50.00</milesvalue><milesvalue country="GB" vendorcurrency="SPC" vendorcurrencyname="Splunk Training Units">50.00</milesvalue><milesvalue country="SI" vendorcurrency="SPC" vendorcurrencyname="Splunk Training Units">50.00</milesvalue><milesvalue country="PL" vendorcurrency="SPC" vendorcurrencyname="Splunk Training Units">50.00</milesvalue><milesvalue country="DE" vendorcurrency="SPC" vendorcurrencyname="Splunk Training Units">50.00</milesvalue><milesvalue country="AT" vendorcurrency="SPC" vendorcurrencyname="Splunk Training Units">50.00</milesvalue><milesvalue country="CH" vendorcurrency="SPC" vendorcurrencyname="Splunk Training Units">50.00</milesvalue><milesvalue country="NL" vendorcurrency="SPC" vendorcurrencyname="Splunk Training Units">50.00</milesvalue></miles></course>