• Basics of Observability: Outline the value, functionalities, and key components (forwarder, indexer, search head, Splunk Search Processing Language (SPL), Apps and Add-Ons, Dashboards and Reports) of Splunk Enterprise and Splunk Cloud
• Cisco XDR, Splunk SIEM, Splunk SOAR: Explain the use of XDR, SIEM, and SOAR as part of the modern SOC architecture to enhance the SOC's ability to detect, investigate, and respond to security threats effectively. Describe the functionality and use case of Cisco XDR, Splunk SIEM, and Splunk SOAR.
• Cisco Security Cloud App: Implement Cisco security solutions to Splunk integration using the Cisco Security Cloud App
• Cisco Security Legacy Apps and Technology Add-Ons: Implement Cisco Security Solutions to Splunk Integration using Cisco Legacy Apps and TAs
• Cisco Security with Splunk Use Cases: Demonstrate the value of integrating Cisco security solutions with Splunk for enhancing user, cloud, and breach protections
• Cisco Apps Troubleshooting and Tuning: Troubleshoot the Cisco Security Cloud App and the Cisco Legacy Apps and TAs

Associated Certification: None

Associated Exam: None