Free
Splunk Enterprise Certified Administrator
Prepare for your exam by taking this Splunk Enterprise Certified Administrator course taught by a Splunk Professional Services Consultant. Learn license management, configuration, monitoring, and how to get data into Splunk, so you can demonstrate your ability to support the daily administration and health of a Splunk Enterprise environment.
6
H
4
M
Time
intermediate
difficulty
6
ceu/cpe
Course Content
Data Pipelines
Tuning Inputs
Course Introduction
Overview
Splunk Overview
Splunk Admin Basics
License Types
Licensing
Config File Overview
Configuration Files
Index Structure
Indexing
Authentication Options
User Management
Splunk Forwarder
Forwarders
Distributed Search Overview
Distributed Search
Data Input Options
Getting Data In
Props and Transforms
Tuning Inputs
Course Overview
Overview
Splunk Components
Splunk Admin Basics
License Violations
Licensing
How Configs are Applied
Configuration Files
Data Lifecycle
Indexing
Access and Authorization in Splunk
User Management
Configuring a Forwarder Lab
Forwarders
Configuring Distributed Search Lab
Distributed Search
Monitor/Batch Inputs Lab
Getting Data In
Using Props and Rekeying Indexed Fields Lab
Tuning Inputs
Splunk Architectures
Splunk Admin Basics
Configuring a License Server
Licensing
When Configs are Applied
Configuration Files
Thaw Frozen Data Lab
Indexing
Course Description
This course is intended to prepare a Splunk Professional to take the Splunk Enterprise Certified Administrator certification.
We will go over all the different Splunk components that may be in a Splunk deployment, how Splunk licensing works, the configuration files that determine how Splunk works under the hood, the indexing process, managing users, authentication, and authorization in Splunk, configuring forwarders, ingesting data from a variety of different sources, and how to tune data inputs to enhance performance, reporting, and user experience.