Weekend batches
October 2026
09:00–15:00 · flexible hours
$799per learner
24 Oct 2026
4 of 25 seats available
31 Oct 2026
10 of 25 seats available
Cybersecurity
SIEM with Splunk Professional Certification Training in Sri Lanka
SIEM with Splunk Professional Certification Training in Sri Lanka helps cybersecurity professionals build practical expertise in security information and event management, Splunk SIEM, SPL, log analysis, threat detection, dashboards, alerts, and incident response. Develop job-ready SOC skills through hands-on learning and real-world security monitoring scenarios while preparing for professional opportunities in cybersecurity, SIEM administration, security operations, and threat detection.
40 Hours/5 daysIntermediate3.9 · 2,900 reviews
Training calendar
Upcoming four-month course schedule
A new weekday and weekend batch starts every week. Each batch runs for 5 training days, based on the course duration of 40 Hours/5 days.
Weekend batches
November 2026
09:00–15:00 · flexible hours
$799per learner
07 Nov 2026
25 of 25 seats available
14 Nov 2026
25 of 25 seats available
21 Nov 2026
25 of 25 seats available
28 Nov 2026
25 of 25 seats available
Weekend batches
December 2026
09:00–15:00 · flexible hours
$799per learner
05 Dec 2026
25 of 25 seats available
12 Dec 2026
25 of 25 seats available
19 Dec 2026
25 of 25 seats available
26 Dec 2026
25 of 25 seats available
Weekend batches
January 2027
09:00–15:00 · flexible hours
$799per learner
02 Jan 2027
25 of 25 seats available
09 Jan 2027
25 of 25 seats available
16 Jan 2027
25 of 25 seats available
23 Jan 2027
25 of 25 seats available
30 Jan 2027
25 of 25 seats available
Course curriculum
What you’ll learn
40 Hours/5 daysIntermediate
- Module 1: SIEM and Security Operations Fundamentals
- Understanding SIEM architecture, components, and security monitoring workflows
- SIEM use cases, security event management, and log management
- Introduction to SOC operations and security monitoring
- Threat detection, incident management, and response fundamentals
- Security data sources and event collection
- Module 2: Splunk Enterprise Fundamentals
- Introduction to Splunk Enterprise and Splunk architecture
- Splunk indexes, indexers, search heads, and forwarders
- Data ingestion and source types
- Understanding events, fields, tags, and metadata
- Configuring and managing security data
- Module 3: Splunk Search Processing Language (SPL)
- SPL fundamentals and search syntax
- Searching, filtering, and transforming security events
- Working with fields, commands, functions, and operators
- Statistical analysis and event correlation
- Creating efficient security searches and queries
- Module 4: Log Management and Security Data Analysis
- Collecting and analyzing system, network, application, and security logs
- Parsing and normalizing security event data
- Identifying suspicious patterns and anomalous activities
- Analyzing authentication, endpoint, firewall, and network events
- Building effective security data analysis workflows
- Module 5: Splunk Dashboards and Visualizations
- Creating dashboards for security monitoring
- Designing charts, tables, panels, and visualizations
- Developing SOC monitoring dashboards
- Tracking security events and operational metrics
- Customizing dashboards for different security use cases
- Module 6: Alerts and Security Monitoring
- Creating scheduled and real-time alerts
- Configuring alert conditions and trigger actions
- Monitoring critical security events
- Reducing alert noise and improving monitoring efficiency
- Building actionable security notifications
- Module 7: Threat Detection and Security Analytics
- Identifying indicators of compromise and suspicious behavior
- Developing searches for common cybersecurity threats
- Correlating events across multiple security data sources
- Understanding detection logic and security analytics
- Supporting proactive threat detection and monitoring
- Module 8: Splunk Enterprise Security and SIEM Use Cases
- Overview of Splunk Enterprise Security capabilities
- Security monitoring and investigation workflows
- Risk-based alerting and risk analysis concepts
- Notable events and security investigations
- Common SIEM use cases for enterprise environments
- Module 9: Incident Investigation and Response
- Investigating security alerts and suspicious events
- Performing incident analysis using Splunk searches
- Correlating evidence across security logs
- Supporting incident response and escalation workflows
- Documenting investigation findings and response activities
- Module 10: Threat Hunting and Advanced Security Operations
- Threat-hunting methodologies using Splunk
- Searching for abnormal behavior and hidden threats
- Investigating authentication, endpoint, and network anomalies
- Developing threat-hunting searches and detection scenarios
- Applying MITRE ATT&CK concepts to security investigations
- Module 11: Security Reporting and Compliance Monitoring
- Creating security reports and operational dashboards
- Monitoring security and compliance-related events
- Generating investigation and incident reports
- Tracking security metrics and trends
- Supporting audit and compliance requirements through centralized security data
- Module 12: Practical SIEM with Splunk Capstone Project
- Building a complete Splunk-based SIEM monitoring environment
- Ingesting and analyzing multiple security data sources
- Creating searches, dashboards, and security alerts
- Investigating simulated cybersecurity incidents
- Performing threat detection and incident response exercises
- Completing a real-world SIEM security monitoring project in Sri Lanka
Entry requirements and prerequisites
- Basic knowledge of cybersecurity and information security concepts.
- Understanding of SIEM, SOC operations, security monitoring, and incident management.
- Familiarity with networking concepts, system logs, and security events.
- Basic experience with Splunk Enterprise or Splunk Cloud is recommended.
- Working knowledge of Splunk SPL searches, fields, dashboards, and alerts is beneficial.
- Basic understanding of threat detection, risk analysis, and incident investigation is helpful.
- No prior Splunk certification is required for the Splunk Enterprise Security Certified Admin exam; however, practical Splunk administration experience is recommended.
Career value
Reasons to choose this course
Develop Splunk SIEM Expertise
Build practical skills in Splunk SIEM, SPL, log analysis, dashboards, alerts, and security event monitoring for modern cybersecurity environments.
Strengthen SOC Analyst Skills
Learn security monitoring, threat detection, event correlation, incident investigation, and response workflows used by Security Operations Centers.
Master Security Data Analysis
Gain hands-on experience searching and analyzing security logs with Splunk SPL to identify suspicious activities, threats, and security incidents.
Build Threat Detection Capabilities
Understand correlation searches, detection techniques, security analytics, and threat-hunting approaches that support proactive cybersecurity operations.
Prepare for Cybersecurity Roles
Develop job-ready knowledge for opportunities such as SOC Analyst, SIEM Analyst, Security Analyst, Cybersecurity Analyst, and Splunk Administrator.
Gain Practical, Industry-Relevant Experience
Work with real-world SIEM scenarios and practical exercises to strengthen your resume and demonstrate valuable Splunk cybersecurity skills.
Advantages
Turn learning into practical capability
Hands-On Splunk SIEM Learning
Practice Splunk searches, dashboards, alerts, log analysis, and security monitoring through practical exercises designed around real-world SIEM environments.
Learn Splunk Search Processing Language (SPL)
Develop SPL skills for searching, filtering, transforming, and analyzing security data to support effective threat detection and incident investigation.
Strengthen Threat Detection Skills
- Learn how to identify suspicious events, correlate security data, investigate indicators, and support proactive threat detection using Splunk-based security analytics.
Understand SOC Security Operations
Explore SOC workflows including continuous monitoring, alert investigation, incident analysis, escalation, and response to strengthen your cybersecurity operations knowledge.
Expand Cybersecurity Career Opportunities
Develop specialized SIEM and Splunk expertise that can support career paths including SIEM Analyst, SOC Analyst, Security Analyst, Cybersecurity Analyst, and Security Operations Engineer.
Apply Skills to Real-World Security Scenarios
Work through practical cybersecurity use cases that connect Splunk SIEM concepts with enterprise security monitoring, incident response, threat hunting, and security analysis.
Exam format & assessment
- Certification: SIEM with Splunk Professional Certification Training
- Certification Body: StepMerit Learning
- Exam Delivery: Online / Instructor-Assisted Assessment
- Number of Questions: Up to 50 questions
- Exam Duration: 90 minutes
- Question Format: Multiple-choice, scenario-based, and practical Splunk/SIEM questions
- Passing Score: 70%
- Assessment Areas: SIEM fundamentals, Splunk Enterprise, SPL, log management, security monitoring, dashboards, alerts, threat detection, incident investigation, and threat hunting
- Practical Assessment: Splunk searches, SPL queries, security-event analysis, dashboard configuration, alert creation, and SIEM investigation scenarios
- Certificate: StepMerit Learning Certificate of Completion
Recommended Prerequisites
Candidates are recommended to have basic knowledge of cybersecurity, networking, SIEM concepts, security operations, and log analysis. Familiarity with Splunk Enterprise or Splunk Cloud is beneficial but not mandatory.
Bring your learning together
Course conclusion
The SIEM with Splunk Professional Certification Training in Sri Lanka provides practical, career-focused learning in Splunk SIEM, SPL, security monitoring, log analysis, threat detection, incident investigation, dashboards, alerts, and threat hunting. Through hands-on labs, real-world security scenarios, practical assessments, and a capstone project, learners can develop job-ready skills for modern SOC and cybersecurity environments. This training is suitable for aspiring and working SOC Analysts, SIEM Analysts, Security Analysts, Cybersecurity Analysts, and Splunk Administrators seeking to strengthen their expertise and expand career opportunities in Sri Lanka.
Target audience
- Aspiring SOC Analysts
- Cybersecurity Professionals
- SIEM Analysts and Administrators
- IT and Network Professionals
- Incident Response Professionals
- Security Operations Teams
- Cybersecurity Students and Graduates
- IT Managers and Security Leaders
Verified learning evidence
Expertise, recognition and learner outcomes
Course-specific expertise
- 10+ years of professional experience in cybersecurity, SIEM, SOC operations, threat detection, incident response, and security monitoring.
- 1,800+ hours of technical training delivered to cybersecurity professionals, SIEM analysts, SOC teams, and certification candidates.
- 1,200+ professionals trained through instructor-led, live online, classroom, hands-on, and corporate training programs.
- 120+ corporate and professional training sessions delivered across cybersecurity and SIEM domains.
- 60+ practical SIEM and SOC case studies covering log ingestion, search, dashboards, alerting, threat detection, and incident investigation.
- Industry training experience across IT Services, Banking & Financial Services, Healthcare, Telecommunications, Government, E-commerce, Manufacturing, and Technology sectors.
- Hands-on expertise in Splunk Enterprise, Splunk Search Processing Language (SPL), data ingestion, log analysis, dashboards, reports, alerts, correlation, threat detection, and SOC monitoring.
- Practical experience with security event analysis, indicators of compromise (IOCs), incident investigation, threat intelligence, security analytics, and SIEM-based monitoring.
- Training methodology includes hands-on Splunk labs, real-world SOC scenarios, log-analysis exercises, threat investigation case studies, practical assessments, and certification-focused preparation.
Documented learner outcomes
- Problem Statement: Organizations generate large volumes of security logs and events, making manual monitoring difficult.
Security teams need SIEM capabilities to detect threats and investigate incidents efficiently. - How We Overcame the Problem: Learners implemented Splunk-based SIEM workflows for log collection, search, monitoring, threat detection, and incident investigation.
They used Splunk SPL, dashboards, alerts, and correlation to analyze security events. - Overall Implementation: Learners implemented an end-to-end SIEM workflow covering data ingestion, log parsing, indexing, searching, correlation, alerting, visualization, and investigation.
- Evidence of Learning: Learners demonstrated the ability to ingest logs, write SPL queries, create dashboards, configure alerts, analyze events, and identify suspicious activities.
- SIEM Workflow:
Log Sources → Data Ingestion → Parsing & Indexing → SPL Search → Correlation → Alerting → Investigation → Security Reporting - Splunk Data Ingestion: Learners configured security log sources and indexed event data in Splunk for centralized monitoring and analysis.
- SPL Implementation: Learners created SPL searches to filter, correlate, summarize, and investigate security events and indicators of compromise.
- Dashboard & Alerting: Learners developed security dashboards and alerts to monitor important events and identify potential threats in real time.
- Problem-Solving Evidence: Learners addressed challenges such as high event volumes, noisy alerts, suspicious activity, and difficult-to-identify attack patterns using SPL and correlation techniques.
- Comparative Evidence: Learners evaluated different Splunk search, visualization, alerting, and monitoring approaches based on security investigation and SOC requirements.
- Overall Outcome: Learners demonstrated practical skills in SIEM monitoring, Splunk administration, SPL, threat detection, security analytics, and incident investigation.
- Final Evidence: Splunk indexes, SPL queries, dashboards, alerts, analyzed security events, investigation findings, and SIEM documentation provide evidence of practical competency.
Helpful answers for planning your training
Frequently asked questions
SIEM with Splunk Professional Certification Training is a career-focused program covering SIEM concepts, Splunk, SPL, log management, security monitoring, threat detection, dashboards, alerts, incident investigation, and threat hunting. The training combines theoretical concepts with practical cybersecurity scenarios.
The course is suitable for SOC analysts, cybersecurity professionals, security analysts, IT professionals, network professionals, incident response teams, students, and graduates who want to develop practical SIEM and Splunk skills in Sri Lanka.
Learner reviews
Rated by 2,900 learners
Rating and review totals are controlled per course in the CRM.
3.9out of 5
Popular cities in Sri Lanka
Compare city information, course curriculum, exam details and ways to enquire.
Book with clarity
Clear pricing, protected approval and learner support
Approval before payment
A secure payment link is shared only after the CRM team confirms the request.
Live instructor-led delivery
Ask questions during the session and learn alongside a scheduled cohort.
Verified learner feedback
Published course feedback is linked to completed learner records and CRM approval.
Visible schedules
Review weekday and weekend dates, duration, timezone and seat availability before booking.