Splunk Enterprise super user

I need someone to help me through the Splunk Boss of the SOC to identify cyber incidents/events and any anomalies and help map them out. I need a detailed tutorial with step by step demonstrations