Quickstart — hands-on walkthroughs¶
Guided walkthroughs of TrackMe, captured live on the product: every page is a slide deck with a description of what each slide shows — read it top to bottom, present it, or download it.
Suggested order for a first contact with the product: the introduction, then the three parts of the series (a first tenant, classification, alerting), then the walkthroughs of the components you plan to use.
What TrackMe watches — your data, the people, the HEC endpoints and the Cribl pipelines around it — how it decides and how it tells you: the vocabulary before the live product. 27 slides · 25 min.
Create a Virtual Tenant, let the hybrid tracker discover the feeds, read the first entity in alert and why. 16 slides · 20 min.
Priority and tags from a CMDB lookup, simulated before saving; the on-call and ownership views. 12 slides · 15 min.
One alert scoped to critical and high; the incident lifecycle, the email with charts and the AI report. 16 slides · 20 min.
A map generated from a tenant, one authored from scratch, Topology Alerts, and a map built with AI. 39 slides · 40 min.
CIM and custom dictionaries, sampling, the field-quality advisors. 35 slides · 40 min.
Licensed volume per index, ML outliers on drops and spikes, the ML Advisor. 37 slides · 30 min.
Who is doing what on your Splunk: Finding groups, privileged users, knowledge objects, custom policies, emails to the account concerned. 40 slides · 40 min.
A Cribl Stream deployment from its own metrics: Finding groups and triage, traffic ML models and their tuning, Workers and data paths, the AI Agent. 33 slides · 35 min.
The Fleets and Edge Nodes of a Cribl Edge Leader at any size: connectivity, rollouts, version drift, any node up close, and the AI Agent. 30 slides · 30 min.
The HTTP Event Collector of a deployment: endpoints from their heartbeats, pools per data centre, tokens by name, a heavy forwarder stopped, and the AI Agent. 32 slides · 30 min.
Reference white papers¶
The former quickstart tutorials remain available as reference material.