EQALIS ACADEMY

Administrating Splunk

This eight-hour course prepares system administrators to configure and manage a Splunk installation. It is recommended for administrators who will be in charge of ongoing management of Splunk servers.

Course Topics:

• Installing, stopping, starting and restarting Splunk
• Adding Data Inputs
• How Splunk indexes data
• Setting up Splunk users
• Managing the Splunk data store
• Configure Data routing
• Use the Deployment server

Course Prerequisites:

• The Using Splunk course
• Knowledge of operating system directory and file commands
• Familiarity with networking concepts such as tcp, udp and ports

Class Format

Instructor-led lecture with labs. Delivered via virtual classroom or at your site.

Course Objectives

Lesson One - Installation and startup

• Splunk installation requirements and process
• Stop and start Splunk
• Navigate through the Splunk directory tree

Lesson Two - Data Inputs

• Configure data sources
• Determine which source type option to use
• List configuration files for data inputs
• Create fields

Lesson Three- Index Management

• Navigate the data store directory structure
• Create indexes
• Configure aging and retention time
• Backup and restore an index
• Clean an index
• Control what is indexed

Lesson Four - Distributed Deployment

• Describe Splunk’s distributed capabilities
• Describe the capabilities of the Splunk’s deployment server
• Enable forwarding and receiving and distributed searches
• Configure data routing

Lesson Five - Defining Users

• List the Splunk roles and their capabilities
• Add and remove users
• Define user roles and search filters

Click here to find upcoming course dates. 

EQALIS provide scheduled monthly web based training for splunk customers and partners in Europe, Middle East, Aftica, and Asia. We can also offer discounted rates for group bookings delivered at your place of business or remotely.

Contact Us for more information