Course Overview
IMPORTANT: The Splunk Enterprise Administration Fast Start is suitable for learners with Splunk On-Prem installations.
This fast start prepares Splunk Enterprise administrators to install, configure, and deploy on-premises Splunk environments. Combining content from Splunk Enterprise System Administration and Splunk Enterprise Data Administration, the course provides the foundational knowledge and recommended practices needed to support core platform administration, manage data onboarding, and maintain reliable data ingestion across the environment.
This Fast Start contains 35 hours of content. This Fast Start prepares you to earn the Splunk Enterprise Certified Admin certification.
Certifications
This course is part of the following Certifications:
Prerequisites
To be successful, learners must meet the following prerequisites:
- Basic understanding of Linux administration
- Familiarity with the Splunk architecture
- Basic knowledge of performing searches using SPL
Completed the following courses or equivalent experiences:
- Exploring Splunk Platform Ecosystem
- Splunk User track
We recommend taking Splunk Power User Fast Start (POWER-U) to fulfill prerquisite knowledge.
Course Objectives
Splunk Enterprise System Administration:
- Identify Splunk components and understand the basics of a Splunk deployment
- Monitor Splunk operations and licensing
- Explore Splunk configuration files
- Install a Splunk app
- Create and manage Splunk indexes
- Create users and roles in Splunk
Splunk Enterprise Data Administration:
- Understand source types
- Manage and deploy forwarders with agent management
- Configure data inputs
- File monitors
- Network inputs (TCP/UDP)
- Scripted inputs
- HTTP inputs (via the HTTP Event Collector)
- Customize the parsing process
- Define transformations to modify raw data before it is indexed
- Define search time knowledge object configurations
Follow On Courses
Outline: Splunk Enterprise Administration Fast Start (ADM-FT)
- Module 1: Deploy Splunk
- Module 2: Monitor Splunk
- Module 3: License Splunk
- Module 4: Use Configuration Files
- Module 5: Use Apps
- Module 6: Create Indexes
- Module 7: Manage Indexes
- Module 8: Manage Users
- Module 9: Get Data into Splunk
- Module 10: Configure Forwarders
- Module 11: Customize Forwarders
- Module 12: Manage Agents
- Module 13: Monitor Inputs
- Module 14: Network Inputs
- Module 15: Scripted Inputs
- Module 16: HEC Inputs
- Module 17: Fine-tune Inputs
- Module 18: Parse Phase and Data Preview
- Module 19: Manipulate Input Data
- Module 20: Filter and Route Input Data
- Module 21: Support Knowledge Objects
- Appendix A: Security Fundamentals
- Appendix B: Operating System Inputs