This 2 virtual day course is designed for system administrators who are responsible for managing the Splunk Enterprise environment. The course provides the fundamental knowledge of Splunk license manager, indexers and search heads. It covers configuration, management, and monitoring core Splunk Enterprise components.

• Splunk Deployment Overview
• License Management
• Splunk Apps
• Splunk Configuration Files
• Users, Roles, and Authentication
• Getting Data In
• Distributed Search

To be successful, students should have a solid understanding of the following courses:

• Splunk Fundamentals 1
• Splunk Fundamentals 2

OR the following single-subject courses:

Module 1 - Splunk Server Deployment

• Provide an overview of Splunk
• Identify Splunk Enterprise components
• Identify the types of Splunk deployments
• List the steps to install Splunk
• Use Splunk CLI commands

Module 2 - Splunk Server Monitoring

Module 3 - Splunk Apps

Module 4 - Splunk Configuration Files

Module 5 - Splunk Indexes

Module 6 - Splunk Index Management

Module 7 - Splunk User Management

Module 8 - Configuring Basic Forwarding

Module 9 - Distributed Search