Course Overview
IMPORTANT: The Splunk Enterprise Administration Fast Start is suitable for learners with Splunk On-Prem installations.
This fast start prepares Splunk Enterprise administrators to install, configure, and deploy on-premises Splunk environments. Combining content from Splunk Enterprise System Administration and Splunk Enterprise Data Administration, the course provides the foundational knowledge and recommended practices needed to support core platform administration, manage data onboarding, and maintain reliable data ingestion across the environment.
This Fast Start contains 35 hours of content. This Fast Start prepares you to earn the Splunk Enterprise Certified Admin certification.
Certifications
This course is part of the following Certifications:
Prerequisites
To be successful, learners must meet the following prerequisites:
- Basic understanding of Linux administration
- Familiarity with the Splunk architecture
- Basic knowledge of performing searches using SPL
Completed the following courses or equivalent experiences:
- Exploring Splunk Platform Ecosystem
- Splunk User track
We recommend taking Splunk Power User Fast Start (POWER-U) to fulfill prerquisite knowledge.
Course Objectives
Splunk Enterprise System Administration:
- Identify Splunk components and understand the basics of a Splunk deployment
- Monitor Splunk operations and licensing
- Explore Splunk configuration files
- Install a Splunk app
- Create and manage Splunk indexes
- Create users and roles in Splunk
Splunk Enterprise Data Administration:
- Understand source types
- Manage and deploy forwarders with agent management
- Configure data inputs
- File monitors
- Network inputs (TCP/UDP)
- Scripted inputs
- HTTP inputs (via the HTTP Event Collector)
- Customize the parsing process
- Define transformations to modify raw data before it is indexed
- Define search time knowledge object configurations