<?xml version="1.0" encoding="utf-8" ?>
<!DOCTYPE FL_Course SYSTEM "https://www.flane.de/dtd/fl_course095.dtd"><?xml-stylesheet type="text/xsl" href="https://portal.flane.ch/css/xml-course.xsl"?><course productid="30380" language="fr" source="https://portal.flane.ch/swisscom/fr/xml-course/splunk-apu-ft" lastchanged="2025-11-20T11:48:18+01:00" parent="https://portal.flane.ch/swisscom/fr/xml-courses"><title>Splunk Advanced Power User Fast Start</title><productcode>APU-FT</productcode><vendorcode>SP</vendorcode><vendorname>Splunk</vendorname><fullproductcode>SP-APU-FT</fullproductcode><version>1</version><objective>&lt;p&gt;At the end of this course, you should be able to :
&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Use Lookup Commands&lt;/li&gt;&lt;li&gt;Add a Subsearch&lt;/li&gt;&lt;li&gt;Use the return Command&lt;/li&gt;&lt;li&gt;Understand What are Multivalue Fields&lt;/li&gt;&lt;li&gt;Create Multivalue Fields&lt;/li&gt;&lt;li&gt;Evaluate Multivalue Fields&lt;/li&gt;&lt;li&gt;Analyze Multivalue Fields&lt;/li&gt;&lt;li&gt;Optimize Search&lt;/li&gt;&lt;li&gt;Understand Report Acceleration&lt;/li&gt;&lt;li&gt;Understand Data Model Acceleration&lt;/li&gt;&lt;li&gt;Use the tstats Command&lt;/li&gt;&lt;li&gt;Understand what is a Lookup?&lt;/li&gt;&lt;li&gt;Create Lookups&lt;/li&gt;&lt;li&gt;Understand Geospatial Lookups&lt;/li&gt;&lt;li&gt;Understand External Lookups&lt;/li&gt;&lt;li&gt;Understand KV Store Lookups&lt;/li&gt;&lt;li&gt;Understand Best Practices for Lookups&lt;/li&gt;&lt;li&gt;Understand Dashboard Framework&lt;/li&gt;&lt;li&gt;Prototype&lt;/li&gt;&lt;li&gt;Understand Visualization Types&lt;/li&gt;&lt;li&gt;Modify the Source Code&lt;/li&gt;&lt;li&gt;Understand Dynamic Coloring&lt;/li&gt;&lt;li&gt;Understand Data Source Types&lt;/li&gt;&lt;li&gt;Mock Data&lt;/li&gt;&lt;li&gt;Understand event Annotations&lt;/li&gt;&lt;li&gt;Add Inputs&lt;/li&gt;&lt;li&gt;Chain Searches&lt;/li&gt;&lt;/ul&gt;</objective><essentials>&lt;p&gt;Highly recommended prerequisites: 
&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a class=&quot;fl-href-prod&quot; href=&quot;/swisscom/fr/course/splunk-pr-fs&quot;&gt;Splunk Pre-requisite Fast Start &lt;span class=&quot;fl-prod-pcode&quot;&gt;(PR-FS)&lt;/span&gt;&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a class=&quot;fl-href-prod&quot; href=&quot;/swisscom/fr/course/splunk-power-u&quot;&gt;Splunk Power User Fast Start &lt;span class=&quot;fl-prod-pcode&quot;&gt;(POWER-U)&lt;/span&gt;&lt;/a&gt;&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;Note: Courses listed in the Advanced Power User Fast Start are just the delta of what&amp;#039;s not in Power User Fast Start.&lt;/p&gt;</essentials><audience>&lt;p&gt;Search Experts Knowledge Managers&lt;/p&gt;</audience><contents>&lt;h5&gt;Leveraging Lookups and Subsearches (SSC)&lt;/h5&gt;&lt;ul&gt;
&lt;li&gt;Topic 1 &amp;ndash; Using Lookup Commands&lt;/li&gt;&lt;li&gt;Topic 2 &amp;ndash; Adding a Subsearch&lt;/li&gt;&lt;li&gt;Topic 3 &amp;ndash; Using the return Command&lt;/li&gt;&lt;/ul&gt;&lt;h5&gt;Multivalue Fields (SSC)&lt;/h5&gt;&lt;ul&gt;
&lt;li&gt;Topic 1 &amp;ndash; What are Multivalue Fields?&lt;/li&gt;&lt;li&gt;Topic 2 &amp;ndash; Creating Multivalue Fields&lt;/li&gt;&lt;li&gt;Topic 3 &amp;ndash; Evaluating Multivalue Fields&lt;/li&gt;&lt;/ul&gt;&lt;h5&gt;Search Optimization (SSC)&lt;/h5&gt;&lt;ul&gt;
&lt;li&gt;Topic 1 &amp;ndash; Optimizing Search&lt;/li&gt;&lt;li&gt;Topic 2 &amp;ndash; Report Acceleration&lt;/li&gt;&lt;li&gt;Topic 3 &amp;ndash; Data Model Acceleration&lt;/li&gt;&lt;li&gt;Topic 4 &amp;ndash; Using the tstats Command&lt;/li&gt;&lt;/ul&gt;&lt;h5&gt;Enriching Data With Lookups (SSC)&lt;/h5&gt;&lt;ul&gt;
&lt;li&gt;Topic 1 &amp;ndash; What is a Lookup?&lt;/li&gt;&lt;li&gt;Topic 2 &amp;ndash; Creating Lookups&lt;/li&gt;&lt;li&gt;Topic 3 &amp;ndash; Geospatial Lookups&lt;/li&gt;&lt;li&gt;Topic 4 &amp;ndash; External Lookups&lt;/li&gt;&lt;li&gt;Topic 5 &amp;ndash; KV Store Lookups&lt;/li&gt;&lt;li&gt;Topic 6 &amp;ndash; Best Practices for Lookups&lt;/li&gt;&lt;/ul&gt;&lt;h5&gt;Intro To Dashboards (SSC)&lt;/h5&gt;&lt;ul&gt;
&lt;li&gt;Topic 1 &amp;ndash; Dashboard Framework&lt;/li&gt;&lt;li&gt;Topic 2 &amp;ndash; Create a Prototype&lt;/li&gt;&lt;li&gt;Topic 3 &amp;ndash; Use Dynamic Coloring&lt;/li&gt;&lt;/ul&gt;&lt;h5&gt;Dynamic Dashboards (SSC)&lt;/h5&gt;&lt;ul&gt;
&lt;li&gt;Topic 1 &amp;ndash; Selecting a Data Source&lt;/li&gt;&lt;li&gt;Topic 2 &amp;ndash; Adding Inputs&lt;/li&gt;&lt;li&gt;Topic 3 &amp;ndash; Improving Performance&lt;/li&gt;&lt;li&gt;Topic 4 &amp;ndash; Comparing Temporary versus Persistent Fields&lt;/li&gt;&lt;li&gt;Topic 5 &amp;ndash; Enriching Data&lt;/li&gt;&lt;/ul&gt;</contents><outline>&lt;h5&gt;Leveraging Lookups and Subsearches (SSC)&lt;/h5&gt;&lt;ul&gt;
&lt;li&gt;Topic 1 &amp;ndash; Using Lookup Commands&lt;/li&gt;&lt;li&gt;Topic 2 &amp;ndash; Adding a Subsearch&lt;/li&gt;&lt;li&gt;Topic 3 &amp;ndash; Using the return Command&lt;/li&gt;&lt;/ul&gt;&lt;h5&gt;Multivalue Fields (SSC)&lt;/h5&gt;&lt;ul&gt;
&lt;li&gt;Topic 1 &amp;ndash; What are Multivalue Fields?&lt;/li&gt;&lt;li&gt;Topic 2 &amp;ndash; Creating Multivalue Fields&lt;/li&gt;&lt;li&gt;Topic 3 &amp;ndash; Evaluating Multivalue Fields&lt;/li&gt;&lt;/ul&gt;&lt;h5&gt;Search Optimization (SSC)&lt;/h5&gt;&lt;ul&gt;
&lt;li&gt;Topic 1 &amp;ndash; Optimizing Search&lt;/li&gt;&lt;li&gt;Topic 2 &amp;ndash; Report Acceleration&lt;/li&gt;&lt;li&gt;Topic 3 &amp;ndash; Data Model Acceleration&lt;/li&gt;&lt;li&gt;Topic 4 &amp;ndash; Using the tstats Command&lt;/li&gt;&lt;/ul&gt;&lt;h5&gt;Enriching Data With Lookups (SSC)&lt;/h5&gt;&lt;ul&gt;
&lt;li&gt;Topic 1 &amp;ndash; What is a Lookup?&lt;/li&gt;&lt;li&gt;Topic 2 &amp;ndash; Creating Lookups&lt;/li&gt;&lt;li&gt;Topic 3 &amp;ndash; Geospatial Lookups&lt;/li&gt;&lt;li&gt;Topic 4 &amp;ndash; External Lookups&lt;/li&gt;&lt;li&gt;Topic 5 &amp;ndash; KV Store Lookups&lt;/li&gt;&lt;li&gt;Topic 6 &amp;ndash; Best Practices for Lookups&lt;/li&gt;&lt;/ul&gt;&lt;h5&gt;Intro To Dashboards (SSC)&lt;/h5&gt;&lt;ul&gt;
&lt;li&gt;Topic 1 &amp;ndash; Dashboard Framework&lt;/li&gt;&lt;li&gt;Topic 2 &amp;ndash; Create a Prototype&lt;/li&gt;&lt;li&gt;Topic 3 &amp;ndash; Use Dynamic Coloring&lt;/li&gt;&lt;/ul&gt;&lt;h5&gt;Dynamic Dashboards (SSC)&lt;/h5&gt;&lt;ul&gt;
&lt;li&gt;Topic 1 &amp;ndash; Selecting a Data Source&lt;/li&gt;&lt;li&gt;Topic 2 &amp;ndash; Adding Inputs&lt;/li&gt;&lt;li&gt;Topic 3 &amp;ndash; Improving Performance&lt;/li&gt;&lt;li&gt;Topic 4 &amp;ndash; Comparing Temporary versus Persistent Fields&lt;/li&gt;&lt;li&gt;Topic 5 &amp;ndash; Enriching Data&lt;/li&gt;&lt;/ul&gt;</outline><objective_plain>At the end of this course, you should be able to :



- Use Lookup Commands
- Add a Subsearch
- Use the return Command
- Understand What are Multivalue Fields
- Create Multivalue Fields
- Evaluate Multivalue Fields
- Analyze Multivalue Fields
- Optimize Search
- Understand Report Acceleration
- Understand Data Model Acceleration
- Use the tstats Command
- Understand what is a Lookup?
- Create Lookups
- Understand Geospatial Lookups
- Understand External Lookups
- Understand KV Store Lookups
- Understand Best Practices for Lookups
- Understand Dashboard Framework
- Prototype
- Understand Visualization Types
- Modify the Source Code
- Understand Dynamic Coloring
- Understand Data Source Types
- Mock Data
- Understand event Annotations
- Add Inputs
- Chain Searches</objective_plain><essentials_plain>Highly recommended prerequisites: 



- Splunk Pre-requisite Fast Start (PR-FS)
- Splunk Power User Fast Start (POWER-U)
Note: Courses listed in the Advanced Power User Fast Start are just the delta of what's not in Power User Fast Start.</essentials_plain><audience_plain>Search Experts Knowledge Managers</audience_plain><contents_plain>Leveraging Lookups and Subsearches (SSC)


- Topic 1 – Using Lookup Commands
- Topic 2 – Adding a Subsearch
- Topic 3 – Using the return Command
Multivalue Fields (SSC)


- Topic 1 – What are Multivalue Fields?
- Topic 2 – Creating Multivalue Fields
- Topic 3 – Evaluating Multivalue Fields
Search Optimization (SSC)


- Topic 1 – Optimizing Search
- Topic 2 – Report Acceleration
- Topic 3 – Data Model Acceleration
- Topic 4 – Using the tstats Command
Enriching Data With Lookups (SSC)


- Topic 1 – What is a Lookup?
- Topic 2 – Creating Lookups
- Topic 3 – Geospatial Lookups
- Topic 4 – External Lookups
- Topic 5 – KV Store Lookups
- Topic 6 – Best Practices for Lookups
Intro To Dashboards (SSC)


- Topic 1 – Dashboard Framework
- Topic 2 – Create a Prototype
- Topic 3 – Use Dynamic Coloring
Dynamic Dashboards (SSC)


- Topic 1 – Selecting a Data Source
- Topic 2 – Adding Inputs
- Topic 3 – Improving Performance
- Topic 4 – Comparing Temporary versus Persistent Fields
- Topic 5 – Enriching Data</contents_plain><outline_plain>Leveraging Lookups and Subsearches (SSC)


- Topic 1 – Using Lookup Commands
- Topic 2 – Adding a Subsearch
- Topic 3 – Using the return Command
Multivalue Fields (SSC)


- Topic 1 – What are Multivalue Fields?
- Topic 2 – Creating Multivalue Fields
- Topic 3 – Evaluating Multivalue Fields
Search Optimization (SSC)


- Topic 1 – Optimizing Search
- Topic 2 – Report Acceleration
- Topic 3 – Data Model Acceleration
- Topic 4 – Using the tstats Command
Enriching Data With Lookups (SSC)


- Topic 1 – What is a Lookup?
- Topic 2 – Creating Lookups
- Topic 3 – Geospatial Lookups
- Topic 4 – External Lookups
- Topic 5 – KV Store Lookups
- Topic 6 – Best Practices for Lookups
Intro To Dashboards (SSC)


- Topic 1 – Dashboard Framework
- Topic 2 – Create a Prototype
- Topic 3 – Use Dynamic Coloring
Dynamic Dashboards (SSC)


- Topic 1 – Selecting a Data Source
- Topic 2 – Adding Inputs
- Topic 3 – Improving Performance
- Topic 4 – Comparing Temporary versus Persistent Fields
- Topic 5 – Enriching Data</outline_plain><duration unit="d" days="3">3 jours</duration><pricelist><price country="SI" currency="EUR">3000.00</price><price country="GR" currency="EUR">3000.00</price><price country="MK" currency="EUR">3000.00</price><price country="HU" currency="EUR">3000.00</price><price country="US" currency="USD">3000.00</price><price country="GB" currency="GBP">2500.00</price><price country="FR" currency="EUR">3000.00</price><price country="PL" currency="USD">3000.00</price><price country="DE" currency="EUR">3000.00</price><price country="IT" currency="USD">3000.00</price><price country="NL" currency="EUR">3000.00</price><price country="CA" currency="CAD">4140.00</price><price country="CH" currency="CHF">3300.00</price><price country="AT" currency="EUR">3000.00</price></pricelist><miles><milesvalue country="US" vendorcurrency="SPC" vendorcurrencyname="Splunk Training Units">300.00</milesvalue><milesvalue country="CA" vendorcurrency="SPC" vendorcurrencyname="Splunk Training Units">300.00</milesvalue><milesvalue country="GB" vendorcurrency="SPC" vendorcurrencyname="Splunk Training Units">300.00</milesvalue><milesvalue country="SI" vendorcurrency="SPC" vendorcurrencyname="Splunk Training Units">300.00</milesvalue><milesvalue country="FR" vendorcurrency="SPC" vendorcurrencyname="Splunk Training Units">300.00</milesvalue><milesvalue country="PL" vendorcurrency="SPC" vendorcurrencyname="Splunk Training Units">300.00</milesvalue><milesvalue country="IT" vendorcurrency="SPC" vendorcurrencyname="Splunk Training Units">300.00</milesvalue><milesvalue country="DE" vendorcurrency="SPC" vendorcurrencyname="Splunk Training Units">300.00</milesvalue><milesvalue country="CH" vendorcurrency="SPC" vendorcurrencyname="Splunk Training Units">300.00</milesvalue><milesvalue country="AT" vendorcurrency="SPC" vendorcurrencyname="Splunk Training Units">300.00</milesvalue></miles></course>