Splunk Enterprise Administration 101 - Systems Admin

Name: Splunk Enterprise Administration 101 - Systems Admin
Rating: 4.6 (200 reviews)

Splunk Enterprise System Administration Course | Splunk Enterprise Admin Exam Prep | Splunk v.9.2

Created byAbleversity Incorporated

Last updated 7/2024

English

What you'll learn

Welcome to the Splunkable Splunk Administration Course! This will build on the concepts mastered after your power user course to start your Splunk admin career.
Master the concepts of how Splunk is deployed, manage licenses, configure applications and indexes, set up forwarding and receiving, and more!
It covers configuration, management, and monitoring core Splunk Enterprise components.
Splunk License and Management
Applications
Configuration Files
Splunk Indexes
Management of Splunk Indexes
User Roles and Management
Forwarding Basics
Splunk Diags and Distributed Search

Course content

1 section • 17 lectures • 2h 24m total length

Overview of Splunk Deployment7:52
Learn Splunk deployment overview, including forwarders, indexers, and search heads, data flow from inputs through parsing and indexing to searching, and single to distributed deployments plus cli and monitoring tasks.
Overview Demo5:25
Splunk License and Management4:57
License Management Demo1:36
Log in to settings licensing, switch from the 60-day trial license group to an enterprise license, install the license file or pasted XML, then restart and log back in.
Applications5:16
Applications Demo6:44
Configuration Files13:35
Configuration Files Demo12:45
Splunk Indexes9:57
Indexes Demo10:05
Management of Splunk Indexes14:15
User Roles and Management8:23
Learn how to manage Splunk user roles, assign permissions, and create custom roles, including admin, power user, user, and the can delete role, with Ldap and api options.
User and Roles Demo13:53
Explore how to manage users and roles in Splunk Enterprise, create custom roles, assign capabilities, restrict index access, and configure app launch and editor settings in a hands-on demo.
Forwarding Basics8:19
Configure forwarding in Splunk by deploying universal forwarders to remote servers, sending data to an indexer over port 9997, and validating inputs.conf and outputs.conf configurations.
Forwarding Demo10:32
Demonstrates forwarding Linux logs to a central Splunk server using a universal forwarder, including enabling receiving on port 9997, configuring outputs, and starting the forwarder.
Splunk Diags and Distributed Search5:24
Diag Demo5:12
Generate a Splunk diag for a single instance, customize included data and metadata, download the tar.gz, and review logs to diagnose health and prepare for support.
System Admin Quiz

Requirements

Ableversity's Splunk Fundamentals 1
Ableversity's Splunk Fundamentals 2
The courses above are recommended but not required

Description

Splunk Administration: Launch Your Career as a Splunk Administrator

Welcome to Ableversity's Splunk Administration Course, where power users transform into skilled administrators. This comprehensive course is developed under the expert oversight of Michael Bentley, "The Splunk Doctor," one of the most respected Splunkers in the world, ensuring you receive training that meets the highest industry standards.

Why This Course Stands Apart

This is where you transition from using Splunk to administering it at the enterprise level. Learning from industry leaders with real-world deployment experience, you'll gain the critical knowledge and practical skills needed to manage Splunk environments confidently. Our instructors bring insights that only come from years of hands-on administration in complex enterprise settings.

What You'll Master

Through 17 comprehensive lessons combining theory and hands-on demonstrations, you'll learn to deploy, configure, and manage every critical aspect of a Splunk environment. From deployment architecture to user management, you'll develop the complete skill set required for professional Splunk administration.

Master essential administrative concepts including Splunk deployment strategies, license management, application configuration, configuration files, index creation and management, user roles and authentication, data forwarding and receiving, Splunk diagnostics, and distributed search architecture.

Your Path to Certification

This course is specifically designed for the Splunk Enterprise Administration Certification track and follows the official blueprint for the Splunk Enterprise Admin Certification exam offered by PearsonVUE. Our students consistently report passing their certification exams after completing this course, validating the professional-grade training you'll receive.

Please note: The prerequisite certification for the Splunk Enterprise Admin exam is Splunk Core Certified Power User.

Join Our Community

Learning doesn't stop when the videos end. Connect with us on LinkedIn, X, and Slack, or visit our website for additional resources and support. We're committed to your success and encourage you to reach out with any questions or concerns. We're here to help you succeed.

Enroll today and launch your Splunk administration career with the guidance of true industry leaders.

Who this course is for:

Splunk users looking to further their knowledge in the world of Splunk System Administration.