# Follow-along guide for Splunk sign-up

***Note:** The following reading is an optional supplement to the following course item,* [*Activity: Perform a query with Splunk*<svg aria-labelledby="cds-react-aria-920-title" class="css-1lzqdox" fill="none" focusable="false" height="16" id="bkmrk-" role="img" viewbox="0 0 16 16" width="16"></svg>](https://www.coursera.org/learn/detection-and-response/quiz/QGT1e/activity-perform-a-query-with-splunk)

*. **Both this reading and the following activity are optional and will not affect your completion of the course.** You may choose to skip this reading and/or the activity for any reason, and continue progressing through the remainder of the course.*

This reading includes detailed instructions for getting started with the following course item, [***Activity: Perform a query with Splunk***<svg aria-labelledby="cds-react-aria-921-title" class="css-1lzqdox" fill="none" focusable="false" height="16" id="bkmrk--1" role="img" viewbox="0 0 16 16" width="16"></svg>](https://www.coursera.org/learn/detection-and-response/quiz/QGT1e/activity-perform-a-query-with-splunk)

**.** Use this reading for step-by-step instructions on how to create a Splunk Cloud account, activate a Splunk Cloud free trial, and upload data to a Splunk Cloud instance.

The following guide identifies parts of the video that may require adjustment. This reference guide can also serve as a usability reminder when using Splunk Cloud in the future.

## Instructions

### **Part 1 - Create a Splunk Cloud account**

1. Go to the [Splunk Cloud Platform Trial<svg aria-labelledby="cds-react-aria-922-title" class="css-1lzqdox" fill="none" focusable="false" height="16" id="bkmrk--2" role="img" viewbox="0 0 16 16" width="16"></svg>](https://www.splunk.com/en_us/download/splunk-cloud.html)

1. page.
2. Fill in the fields in the **Start Your Cloud Platform Trial** sign-up form.
3. Click **Create Your Account**.

<div id="bkmrk--3"><figure contenteditable="false" role="figure">![The Splunk Cloud Platform Trial page with the account sign-up form](https://d3c33hcgiwev3.cloudfront.net/imageAssetProxy.v1/odNWBORNQNyLnY7ejHgDxQ_c229b162c66c4485b52598467eac1bf1_CS_R-237_Create-your-account-p1.png?expiry=1699228800000&hmac=KkriHZo8RPmxPjktvm0g6H6fFvJTY-Q30BR6XzPlEHE)</figure></div><div id="bkmrk--4"><figure contenteditable="false" role="figure">![The Splunk Cloud Platform Trial page with the sign-up form filled in and the  Create Your Account button highlighted](https://d3c33hcgiwev3.cloudfront.net/imageAssetProxy.v1/ezXLm89OREKzHwNSPsKLgA_a12bd18eabb2435183cea976d67996f1_CS_R-237_Create-your-account-p2-3-.png?expiry=1699228800000&hmac=e6x1HXFGdhrGGan4wpyHi4gOzT6nWXuBYCjQUhPevrI)</figure></div><div id="bkmrk--5"><figure contenteditable="false" role="figure">![An email inbox with a Splunk verification email with the subject line "Confirm your email address"](https://d3c33hcgiwev3.cloudfront.net/imageAssetProxy.v1/QuNG8c98QBm9AD7QYlwwTA_83f166bf6ce845baa2c84db51b059ef1_CS_R-237_Create-your-account-p3.png?expiry=1699228800000&hmac=MKo94XMEL7CuAfAJpGFQgpz7WcHBim6bWcGSOeTaEag)</figure></div>### **Part 2 - Verify your email**

1\. Check the inbox for the email address that you used to sign up for the Splunk account. Find the verification email from Splunk with the subject line **Confirm your email address**.

<div id="bkmrk--6"><figure contenteditable="false" role="figure">![An email inbox with a Splunk verification email with the subject line "Confirm your email address"](https://d3c33hcgiwev3.cloudfront.net/imageAssetProxy.v1/gU0sphTHTLKqsFL7TYF5ew_cf78a0b346574b0f9e56a430989842f1_CS_R-237_Verify-your-email-pt-1.png?expiry=1699228800000&hmac=H9yXFwfSWl9tt2izWXZ08Mqfnvv5Ig0eto1q5I97bg8)</figure></div>2\. Open the email and click the **Verify Your Email** button.

<div id="bkmrk--7"><figure contenteditable="false" role="figure">![The Splunk account verification email with the Verify Your Email button highlighted](https://d3c33hcgiwev3.cloudfront.net/imageAssetProxy.v1/Kl2pIuATTP-58pWequX7Pg_0cbb31268d024cbba4e4ca14c4ca63f1_CS_R-237_Verify-your-email-pt-2.png?expiry=1699228800000&hmac=SKtyHbmY0HJNyw0gC0NC48iAbeNRIPt-xqmaLEl7ZWg)</figure></div>***Note**: Check your spam folder if you didn't receive the verification email.*

### **Part 3 - Activate a Splunk Cloud trial**

After clicking the **Verify Your Email** button, you'll be redirected to the Splunk Cloud Trial page.

***Note**: You can activate one Splunk Cloud trial instance at a time, and you can use a maximum of three trials per Splunk account. The Splunk Cloud free trial expires after 14 days, so you may want to complete this activity before the free trial expires.*

***Note:** Alternatively, you can also access the Splunk Cloud Trial page by visiting* [*Splunk Cloud Platform Trial*<svg aria-labelledby="cds-react-aria-923-title" class="css-1lzqdox" fill="none" focusable="false" height="16" id="bkmrk--8" role="img" viewbox="0 0 16 16" width="16"></svg>](https://www.splunk.com/en_us/download/splunk-cloud.html)

 *and logging into your account, then clicking **Start Trial**.*

1\. Click the **Start Trial** button.

<div id="bkmrk--9"><figure contenteditable="false" role="figure">![The Splunk Cloud Trial page with the Start Trial button highlighted](https://d3c33hcgiwev3.cloudfront.net/imageAssetProxy.v1/d-Xq3ymFTaK6zSS5MZyatw_4b5bef310d344669956e5add36cdd5f1_CS_R-237_start-trial-pt-1.png?expiry=1699228800000&hmac=myZGGfBmirj6TQTytqMvUlODUsQroRwvuigkZEUhTds)</figure></div><div id="bkmrk--10"><figure contenteditable="false" role="figure">![The Splunk Cloud Trial page displays the confirmation message: "Thank you for registering, your free trial is on its way!"](https://d3c33hcgiwev3.cloudfront.net/imageAssetProxy.v1/3CHgi8wOTnKOIBim2xmRiA_1e9cb5471a0145038229f1a86eb06ef1_CS_R-237_start-trial-pt-2.png?expiry=1699228800000&hmac=1h1tiwacFlZqMu_KddpbfPibrHQOtPZvJdWCWZJrpYs)</figure></div>2\. Check your inbox for an email from Team Splunk with the subject line **Welcome to Splunk Cloud Platform!**

<div id="bkmrk--11"><figure contenteditable="false" role="figure">![An email inbox with a Splunk Cloud Platform welcome email with the subject line "Welcome to Splunk Cloud Platform"](https://d3c33hcgiwev3.cloudfront.net/imageAssetProxy.v1/W0lreeeHQ9a1HgAUnhfEtA_1f216fcd8adc457f8dae885bce4cfdf1_CS_R-237_Welcome-to-Splunk-Cloud-Platform-1-.png?expiry=1699228800000&hmac=sWr5QrfEU7j2R93StD1dKXzVzxf0fm_lh383P0gEVHA)</figure></div>3\. Open the email to access your Splunk Cloud login information.

4\. Click the link beside **URL** to access the Splunk Cloud Platform.

<div id="bkmrk--12"><figure contenteditable="false" role="figure">![A Splunk Cloud Platform email with Splunk Cloud login information](https://d3c33hcgiwev3.cloudfront.net/imageAssetProxy.v1/N52tx3yPRTCJX30UKpXa8A_a70f29c74afa4bed975541aa6a0c10f1_CS_R-237_Splunk-Cloud-login-information.png?expiry=1699228800000&hmac=tYpEfGSxUO4je5J-IcO4hyRZQsIR2gx9ya6ZK85xW9Y)</figure></div>5\. Enter the username and password credentials that were included in the email.

<div id="bkmrk--13"><figure contenteditable="false" role="figure">![The Splunk Cloud login page](https://d3c33hcgiwev3.cloudfront.net/imageAssetProxy.v1/wbyXSh23Su2VXVNp81JF4A_9c7b952d30e14ee69de4c3ab3ff40af1_CS_R-237_splunk-cloud-platform.png?expiry=1699228800000&hmac=H9eL6Mq2mG_B5duCPE0IPyHWxWB5FCYbMxj9fYgS70M)</figure></div>6\. You will be prompted to change the password of the Splunk Cloud Platform account. Enter a new password and click **Save Password**.

<div id="bkmrk--14"><figure contenteditable="false" role="figure">![The Splunk Cloud login page prompting a password change](https://d3c33hcgiwev3.cloudfront.net/imageAssetProxy.v1/47HXJ2SCTPuEgpFBWPvVTQ_1401686bcbf84e208d4b699466f64df1_CS_R-237_password.png?expiry=1699228800000&hmac=Aco2uH1D5v2lNov5W5MhGO54z-EvyTPbb2O-qbceY7U)</figure></div>7\. Check the box next to **I accept these terms** and click **Ok**.

<div id="bkmrk--15"><figure contenteditable="false" role="figure">![Splunk's terms of service agreement](https://d3c33hcgiwev3.cloudfront.net/imageAssetProxy.v1/7OKU_OZXQdm6TwVrmg_i3w_1f7808503da547d08ee443b0c7b415f1_CS_R-237_terms.png?expiry=1699228800000&hmac=19kOXbkjrV2we_frBBpHf8SXPMplqUyAhkGKWrILP3k)</figure></div>### **Part 4 - Download and upload Splunk data**

After you've accepted the Terms of Service, you'll automatically be redirected to the Splunk Home dashboard.

1\. Go to [Activity: Perform a query with Splunk<svg aria-labelledby="cds-react-aria-924-title" class="css-1lzqdox" fill="none" focusable="false" height="16" id="bkmrk--16" role="img" viewbox="0 0 16 16" width="16"></svg>](https://www.coursera.org/learn/detection-and-response/quiz/QGT1e/activity-perform-a-query-with-splunk)

.

2\. Go to **Step 1: Access supporting materials**.

<div id="bkmrk--17"><figure contenteditable="false" role="figure">![Step 1 of the Activity: Perform a query with Splunk with download links to the tutorialdata.zip file](https://d3c33hcgiwev3.cloudfront.net/imageAssetProxy.v1/_Fbn39DSRgC4hNrxzScmNA_19aed688400a41aebf42157b383d30f1_CS_R-237_supporting-materials.png?expiry=1699228800000&hmac=rGKWnThaMFioSOvjzfdAlKcJCJq8eCeJjjqgv6GXQ6c)</figure></div>3\. Beside **Link to supporting materials** click[ **tutorialdata.zip**<svg aria-labelledby="cds-react-aria-925-title" class="css-1lzqdox" fill="none" focusable="false" height="16" id="bkmrk--18" role="img" viewbox="0 0 16 16" width="16"></svg>](https://drive.google.com/file/d/1nDz_DZB4ADbD4tvaDa54_l1FoT_jtVy4/view?usp=share_link)

.

4\. Click the **download icon** to download the zip file.

<div id="bkmrk--19"><figure contenteditable="false" role="figure">![The contents of the tutorialdata.zip displayed in the download page](https://d3c33hcgiwev3.cloudfront.net/imageAssetProxy.v1/bTcseaSMQJmamChL9OGSxA_50fd491a42ed4009a855838e06ecaef1_CS_R-237_download-materials.png?expiry=1699228800000&hmac=r0DKalzOUBDhWq1fPBzNvDM66z_IlJeNcncS0XaDLSI)</figure></div>5\. Go to the Splunk Home dashboard.

6\. On the Splunk bar, click **Settings** and then click **Add Data**.

<div id="bkmrk--20"><figure contenteditable="false" role="figure">![The Splunk dashboard with the settings section highlighted](https://d3c33hcgiwev3.cloudfront.net/imageAssetProxy.v1/01w4BjCbQmC1Rm-Z_tPGCg_96b1bbcec24e4b1d9cfd1603796c42f1_CS_R-237_settings.png?expiry=1699228800000&hmac=mnYiO05vMjFU61Ga-qczmj1ThYpqw_Z54z-7G3xD-m0)</figure></div><div id="bkmrk--21"><figure contenteditable="false" role="figure">![The Splunk bar's Settings section is expanded with the Add Data icon highlighted](https://d3c33hcgiwev3.cloudfront.net/imageAssetProxy.v1/vQfRENhjReOev1zC7EdMiQ_12f82324dc6f41e7955ebc98668851f1_CS_R-237_add-data.png?expiry=1699228800000&hmac=DuakIDNmkAjjkJIpkVabvpb5Tij2xKI3BVfCnW4LjxU)</figure></div>7\. Click **Upload**.

8\. Click **Select File** to upload the **tutorialdata.zip** file. Alternatively, you can also drag and drop your file in the **Drop your data file here** box.

<div id="bkmrk--22"><figure contenteditable="false" role="figure">![Splunk Cloud's Add Data page with the Select File button and Drop your data file here section highlighted](https://d3c33hcgiwev3.cloudfront.net/imageAssetProxy.v1/SUC2ISc5QuC4EvqJbzOKrw_d585eab58601473eb59af19d4e53faf1_CS_R-237_select-file.png?expiry=1699228800000&hmac=lk6or733_JoVEKbcJk0T-A19V8deUR5WZgBMzGSfsoU)</figure></div>9\. Once the file is uploaded, click **Next** to continue to **Input Settings**.

<div id="bkmrk--23"><figure contenteditable="false" role="figure">![Splunk Cloud's Select Source page with the Next button highlighted](https://d3c33hcgiwev3.cloudfront.net/imageAssetProxy.v1/H83alKICTRGdV-r1-1kG9A_890556b3f8a14826a90a89335618b1f1_CS_R-237_next.png?expiry=1699228800000&hmac=L3gCvzF8MwbjH4EvwYx1fuyQjJZKX7Z-XcT2OXBhuJ0)</figure></div>10\. By the **Host** section, select **Segment** **in** **path** and enter **1** as the segment number.

<div id="bkmrk--24"><figure contenteditable="false" role="figure">![Splunk Cloud's Input Settings page with the Segment in path option highlighted](https://d3c33hcgiwev3.cloudfront.net/imageAssetProxy.v1/K7oiZDK2TzSmzsxkSCzizA_50639c598c744c8ebecf056b9eb5b5f1_CS_R-237_host.png?expiry=1699228800000&hmac=6v5YIV3DZODgWrtB28spFbv1qXrCHWQIOhoWqvmrSXE)</figure></div>11\. Click **Review** and check the details of the upload before you submit. The details should be as follows:

- Input Type: Uploaded File
- File Name: tutorialdata.zip
- Source Type: Automatic
- Host: Source path segment number: 1
- Index: Default

12\. After you've verified that the details are correct, click **Submit**.

<div id="bkmrk--25"><figure contenteditable="false" role="figure">![Splunk Cloud's Review page with the Submit button highlighted](https://d3c33hcgiwev3.cloudfront.net/imageAssetProxy.v1/nzM8Rj71RJqk044bwsJXCA_6c21e42b3464423f87e62043e11c06f1_CS_R-237_submit.png?expiry=1699228800000&hmac=98RGHUJ0YbuoMhJ14bttrujCishlBukRA637fJqtrwg)</figure></div>13\. Once Splunk has ingested the data, you will receive a confirmation message stating that the file has been uploaded successfully.

<div id="bkmrk--26"><figure contenteditable="false" role="figure">![Splunk Cloud's Add Data page displays a successful file upload confirmation message](https://d3c33hcgiwev3.cloudfront.net/imageAssetProxy.v1/7G_-77A7TXOM8B3Lp0yhjg_ca3050f1086c43e59de5aefa404ad1f1_CS_R-237_successful-file-upload.png?expiry=1699228800000&hmac=zWBTZk2kG_YLxAOQJfPHrdpG-z-YV5W67JuYOIp7PR4)</figure></div>14\. Click the **Splunk** **Cloud** logo to return to the home page.

**You're done!** Once your Splunk Cloud account is set up, you can begin the next course item, [Activity: Perform a query with Splunk<svg aria-labelledby="cds-react-aria-926-title" class="css-1lzqdox" fill="none" focusable="false" height="16" id="bkmrk--27" role="img" viewbox="0 0 16 16" width="16"></svg>](https://www.coursera.org/learn/detection-and-response/quiz/QGT1e/activity-perform-a-query-with-splunk)

.

***Need additional help?** If you are experiencing any issues with your Splunk Cloud account, please contact* [*Splunk's Help Center*<svg aria-labelledby="cds-react-aria-927-title" class="css-1lzqdox" fill="none" focusable="false" height="16" id="bkmrk--28" role="img" viewbox="0 0 16 16" width="16"></svg>](https://www.splunk.com/en_us/about-splunk/contact-us.html)

*. **Remember, the following course item,*** [***Activity: Perform a query with Splunk***<svg aria-labelledby="cds-react-aria-928-title" class="css-1lzqdox" fill="none" focusable="false" height="16" id="bkmrk--29" role="img" viewbox="0 0 16 16" width="16"></svg>](https://www.coursera.org/learn/detection-and-response/quiz/QGT1e/activity-perform-a-query-with-splunk)***, is optional and will not affect your completion of the course.** If you are not able to create and set up a Splunk Cloud account, you can skip the activity.*