The check-in mystery
Four festival gates. One worried organizer. Use real event data to find what happened and write your first investigation.
What you’ll learn
Start the Splunk Academic Alliance VISI Workshop Series with a fictional campus festival investigation. Search real event records in the VISI Splunk lab, compare patterns, and turn your findings into an evidence-based handover. Return to your saved case between visits.
- Navigate events, fields and historical time ranges in Splunk.
- Filter records and summarize results with SPL.
- Compare gates, time windows and app versions to test a theory.
- Write a report that separates evidence from inference.
Curriculum
5 levelsWork through each level in order. Expand a level to see the skills you’ll practice.
Meet an event15 min
Events and fields · Search scope · table
Help the organizer15 min
Field filters · stats count · Business analytics
Find the trouble spot15 min
Comparisons · Error analysis · IT operations
Test the Wi-Fi theory25 min
Time windows · Multiple fields · Evidence and inference
Hand over your findings20 min
Independent search · Technical writing · Limits of evidence
Before you start
- A Lite Foundry account to save your case and progress.
- Access to the VISI Splunk lab. UTRGV students can create an account or sign in with their UTRGV email at splunk.vaqueroisi.org.
- A browser with Lite Foundry and the Splunk lab open in separate tabs. No previous SPL experience is required.
Your work, recorded
Your searches and notes build a project report. Start a Solo case or collaborate in Multi; the independent check remains part of demonstrating personal mastery.