Splunk Enterprise Certified Admin

Course Description

The Splunk Enterprise Certified Admin exam is the final step towards completion of the Splunk Enterprise Certified Admin certification. This upper-level certification exam evaluates a candidate’s knowledge and skills to manage various components of Splunk on a daily basis, including the health of the Splunk installation. Candidates are recommended to complete the lecture, hands-on labs, and quizzes that are part of the Splunk Enterprise System Administration and Splunk Enterprise Data Administration courses in order to be prepared for the certification exam.

The Splunk Enterprise System Administration course exam focuses on administrators who manage a Splunk Enterprise environment. The Splunk Enterprise Data Administration exam targets administrators who are responsible for getting data into Splunk.

Program Objectives

• Splunk Admin Basics
• License Management
• Splunk Configuration Files
• Splunk Indexes
• Splunk User Management
• Splunk Authentication Management
• Getting Data In
• Distributed Search
• Getting Data In – Staging
• Configuring Forwarders
• Forwarder Management
• Monitor Inputs
• Network and Scripted Inputs
• Agentless Inputs
• Fine Tuning Inputs
• Parsing Phase and Data
• Manipulating Raw Data

Required Prerequisite Certification

• Splunk Core Certified Power User

Recommended Prerequisite Courses

• Splunk Enterprise System Administration
• Splunk Enterprise Data Administration