Splunk Enterprise Administration Fast Start

This course is designed for system administrators and administrators who are responsible:

• for managing the Splunk Enterprise environment. The course provides the fundamentalknowledge of Splunk license manager, indexers and search heads. It covers configuration, management, and monitoring core Splunk Enterprise components.
• for getting data into Splunk Indexers. The course provides the fundamental knowledge of Splunk forwarders and methods to get remote data into Splunk indexers. It covers installation, configuration, management, monitoring, and troubleshooting of Splunk forwarders and Splunk Deployment Server components.

ONLY for customers with Splunk on-prem

• System Administration
• Splunk Deployment Overview
• License Management
• Splunk Apps
• Splunk Configuration Files
• Users, Roles, and Authentication
• Getting Data In
• Distributed Search
• Data Administration
• Understand sourcetypes
• Manage and deploy forwarders
• Configure data inputs
• Fire monitors
• Network inputs (TCP/UDP)
• Scripted inputs
• HTTP inputs (via the HTTP Event Collector)
• Customize the input phase parsing process
• Define transformations to modify data before indexing
• Define search time knowledge object configurations

Systemadministratoren

To be successful, students should have a solid understanding of the following courses:

• Splunk Power User Fast Start

Or the following single-subject courses:

• What is Splunk (SSC)　
• Intro to Splunk (SSC)　
• Using Fields (SSC)
• Intro to Knowledge Objects (SSC)
• Creating Knowledge Objects
• Creating Field Extractions

Splunk Enterprise Certified Admin (Prereq for this cert is the: Splunk Core Certified Power User)