This 2-virtual day course highlights key differences between Splunk Enterprise deployed on-premise and Splunk Enterprise Cloud to allow Splunk Administrators to transition to Splunk Cloud.
The course provides the skills and knowledge for Splunk Cloud administrators to collect and ingest data as well as manage their cloud environment and maintain a productive Splunk SaaS deployment.

• Splunk Cloud Overview
• User Authentication and Authorization
• Index Management and Data Retention
• Cloud Ingestion - Using Splunk Forwarders
• Cloud Ingestion - Use API, HEC and Scripted Inputs
• Cloud Ingestion - Using Apps and IDM Inputs
• Installing and Managing Apps
• Refine and Manipulate Inputs
• GDI Performance Considerations
• Problem isolation and working with Splunk Cloud support

To be successful, students should have a solid understanding of the following:

• Splunk System Administration
• Splunk Data Administration

Module 1 – Splunk Cloud

• Describe Cloud SaaS benefits and features
• Identify Splunk Cloud administrator managed tasks
• Explain the differences between Splunk Enterprise on premise and Splunk Enterprise Cloud

Module 2 – User Authentication and Authorization

Module 3 – Index Management and Data Retention

Module 4 – Cloud Ingestion - Using forwarders

Module 5 – Cloud Ingestion - Using API, Scripted and HEC Inputs

Module 6 – Cloud Ingestion - Application Based Inputs

Module 7 – Installing and Managing Apps

Module 8 – GDI Performance Considerations

Module 9 – Splunk Cloud Support and Troubleshooting