During this workshop, attendees went through an introduction to Splunk’s Command-Line Interface (CLI) illustrating initial configuration and customization of Splunk including setting custom ports for processes and creating user roles with specific capabilities. Participants also covered the installation and initial configuration of a universal forwarder.