Splunk
Splunk Enterprise Administration Fast Start
IMPORTANT: The Splunk Enterprise Administration Fast Start is suitable for learners with Splunk On-Prem installations.
This Fast Start series is a bundle of 2 key modules with 30 hours of content provided over five days. This Fast Start prepares you to earn the Splunk Enterprise Certified Admin certification.
This is a bundle of 2 key Courses:
- Level
- Intermediate
- Version
- 1.0
- Duration
- 5 days
- Language
- EN
- Course code
- SP-ADM-FT
Prerequisites
Contents
- System Administration
- Splunk Deployment Overview
- License Management
- Splunk Apps
- Splunk Configuration Files
- Users, Roles, and Authentication
- Getting Data In
- Distributed Search
- Data Administration
- Understand sourcetypes
- Manage and deploy forwarders
- Configure data inputs
- Fire monitors
- Network inputs (TCP/UDP)
- Scripted inputs
- HTTP inputs (via the HTTP Event Collector)
- Customize the input phase parsing process
- Define transformations to modify data before indexing
- Define search time knowledge object configurations