Splunk Admin

Overview

In This Splunk Administration training participants learn both Splunk Power Users and Splunk Administrators. At the end of this training participants will have knowledge of their roles and responsibilities & they will be ready for implementation. This Training helps participants work with Configuration files & settings, use various Knowledge objects, and also learn to create Dashboards for visualization with the help of real-life Use-Cases, & use Searching and Reporting commands.
Duration
3 Days

Pre-Requisites
  • Participants must have knowledge on Data Analytics concepts
  • Participants Must have good knowledge on system administration
  • Participants must also have basic knowledge of Linux and Windows helps
  • Course Outline

    • Splunk: What does it Mean
    • How should Splunk be Configured
    • Identifying Splunk Instance Types
    • Hardware Recommendations Indexers
    • Hardware Recommendations Search Heads
    • Splunk Install Packages
    • Supported Platforms and Browsers
    • Splunk Installation
    • Splunk Directory Structure
    • The Splunk Command Line Interface
    • *NIX Run Splunk at Boot
    • Splunk Windows Services
    • Splunk Processes: Splunkd
    • Splunk Processes: Splunk Web
    • Apps Installed by Default
    • System Settings
    • Describing General Settings
    • Restarting the Server from Splunk Web
    • Managing Licenses
    • Splunk License Types
    • Adding a License
    • License Warnings and violations
    • What Counts as Daily License Quota
    • Viewing Alerts
    • License Staking
    • Master License Server
    • License Pooling
    • Adding an Input with Splunk Web
    • How can you tell what App you are in!
    • Adding your Monitor Input
    • Preview Data
    • Specify the Source
    • Select Host, Source type and Index
    • What is an App
    • Apps configured by Default
    • Viewing All Apps
    • Managing Apps
    • Installing an App Manually
    • Enabling and Disabling Apps
    • Deleting an App
    • App Permissions
    • Configuration Directories
    • Default vs. Local Configuration
    • Global Context vs. User or App Context
    • Runtime Merging of Configurations
    • Configuration Testing Commands
    • Forwarders and Indexers
    • Benefits of Using Forwarders
    • Splunk Universal Forwarder
    • Heavy Forwarder
    • Configuration Steps
    • Configuring the Receiving Port
    • Downloading the Universal Forwarder Installer
    • Installing Universal Forwarder Manually
    • Forwarder Configuration Files