Course Overview
This series consists of 2 modules with 22.5 hours of content provided over five days. This series leads to the Splunk Enterprise Certified Admin certification.
Prerequisites
Splunk Core Certified Power User.
Course Content
- System Administration
- Splunk Deployment Overview
- License Management
- Splunk Apps
- Splunk Configuration Files
- Users, Roles, and Authentication
- Getting Data In
- Distributed Search
- Data Administration
- Understand sourcetypes
- Manage and deploy forwarders
- Configure data inputs
- Fire monitors
- Network inputs (TCP/UDP)
- Scripted inputs
- HTTP inputs (via the HTTP Event Collector)
- Customize the input phase parsing process
- Define transformations to modify data before indexing
- Define search time knowledge object configurations