Autoplay
Autocomplete
Previous Lesson
Complete and Continue
Splunk| Splunk Enterprise Certified Admin Certification Prep
Splunk Admin Basics
Introduction to Splunk Enterprise Certified Admin (1:02)
Intro to Splunk Admin Basics (0:36)
Identify Splunk Components (9:38)
License Management
Intro to License Management (1:54)
Identify License Types (5:47)
Understand License Violations (5:18)
Demo Licensing (2:21)
Splunk Configuration Files
Intro to Splunk Configuration Files (2:30)
Describe Splunk Configuration Directory Structure (17:37)
Understand Configuration Layering (6:18)
Understand Configuration Precedence (8:41)
Use btool to Examine Configuration Settings (3:29)
Splunk Indexes
Intro to Splunk Indexes (2:53)
Describe index structure (17:41)
List types of index buckets (4:46)
Check index data integrity (6:25)
Describe indexes.conf options (8:45)
Describe the fishbucket (7:19)
Apply a data retention policy (5:19)
Splunk User Management
Intro to Splunk User Management (1:09)
Describe user roles in Splunk (7:07)
Create a custom role (7:20)
Splunk Authentication Management
Intro to Splunk Authentication Management (1:02)
Integrate Splunk with LDAP (6:17)
List other user authentication options (7:22)
Describe the steps to enable multifactor authentication in Splunk (8:34)
Getting Data In
Intro to Getting Data In (1:13)
Describe the basic settings for an input (3:16)
List Splunk forwarder types (7:42)
Configure the forwarder (8:13)
Add an input to UF using CLI (5:19)
Distributed Search
Intro to Distributed Search (2:22)
Describe how distributed search works (7:44)
Explain the roles of the search head and search peers (3:56)
Configure a distributed search group (7:51)
List search head scaling options (5:54)
Getting Data In - Staging
Intro to Getting Data In - Staging (1:56)
List the three phases of the Splunk Indexing process (4:26)
List Splunk input options (27:41)
Configuring Forwarders
Intro to Configuring Forwarders (1:21)
Configure Forwarders (12:49)
Identify additional Forwarder options (7:21)
Forwarder Management
Intro to Forwarder Management (2:45)
Explain the use of deployment management (6:24)
Describe Splunk Deployment Server (7:58)
Manage forwarders using deployment apps, configure deployment clients (5:12)
Monitor forwarder management activities (1:04)
Monitor Inputs
Monitor Inputs (14:06)
Network and Scripted Inputs
Network and Scripted Inputs (9:27)
Agentless Inputs
Intro to Agentless Inputs (2:46)
Creating Windows Management Instrumentation (WMI) inputs (2:52)
Describe HTTP Event Collector (8:31)
Fine Tuning Inputs
Intro to Fine Tuning Inputs (1:14)
Understand the default processing that occurs during input phase (4:47)
Configure input phase options (4:42)
Parsing Phase and Data
Intro to Parsing Phase and Data (1:43)
Understand the default processing that occurs during parsing (5:14)
Optimize and configure event line breaking (7:07)
Explain how timestamps and time zones are extracted or assigned to events (6:40)
Use Data Preview to validate event creation during the parsing phase (4:24)
Manipulating Raw Data
Intro to Manipulating Raw Data (2:55)
Explain how data transformations are defined and invoked (6:30)
Use transformations with props.conf and transforms.conf (8:08)
Use SEDCMD to modify raw data (4:03)
Monitor forwarder management activities
Lesson content locked
If you're already enrolled,
you'll need to login
.
Enroll in Course to Unlock