Splunk6Administration

4DayCourse

Splunk 6 Administration
4 Day Course

Course Description
This course prepares system administrators to configure and manage Splunk. Topics include
installation, configuring data inputs and forwarders, data management, user accounts, licenses,
and troubleshooting and monitoring. The focus in this class is the knowledge, best practices,
and configuration details for Splunk administration in a medium to large distributed deployment
environment.

Course Topics

Installation
License management
Getting data in
Managing Splunk apps
Splunk configuration files
Universal forwarder and forwarder management
Data inputs in detail
Index administration, maintenance and optimization
Users, roles, and authentication
Event Parsing with data preview
Manipulating raw data
Field extraction
Distributed search
Search performance tuning
Introduction to large-scale Splunk deployment
Monitoring and troubleshooting

Class Format
Instructor-led lecture with labs. Delivered via virtual classroom or at your site.

Prerequisites

What is Splunk (e-learning)

Using Splunk
Searching and Reporting with Splunk (strongly recommended)

3/6/2015

Page 2

Splunk 6 Administration
4 Day Course

Course Structure/Content Outline

Module 1: Building a simple Splunk environment

Splunk Installation

License Management

Getting Data in

Managing Apps

Module 2: Building a basic production environment

Splunk Configuration Files

Universal Forwarder

Forwarder Management

Module 3: Getting Data In

Monitor Inputs

Network Inputs

Scripted and Modular Inputs

Windows Inputs

Fine-tuning Inputs

3/6/2015

Page 3

Splunk 6 Administration
4 Day Course

Module 4: Managing Indexes and Users

Splunk Indexes

Index Maintenance and Optimization

Users, Roles, and Authentication

Module 5: Parsing

Parsing phase and data preview

Manipulating raw data

Field Extraction

Module 7: Scaling Searches and Monitoring

Distributed search

Search performance tuning

Implementation issues in large-scale deployment

Distributed Management Console

3/6/2015

Page 4