This module introduces the essentials of managing Splunk Enterprise licenses, including license types, configuration, and allocation strategies. Learners will discover how to monitor compliance, address license violations, and optimize license pools for different environments. By the end, you'll be equipped to ensure smooth and compliant Splunk operations.

This module introduces the principles of role-based access control in Splunk, detailing how user roles and authentication methods like LDAP and SAML are configured to secure access. Learners will gain practical knowledge in managing user permissions and ensuring secure authentication within Splunk Enterprise.

This module guides learners through the essentials of managing Splunk forwarders, including deployment server configuration, universal forwarder installation on Linux and Windows, and setting up data forwarding. By the end, you will understand how to centrally manage, deploy, and monitor Splunk forwarders for efficient data collection.

This module introduces the fundamentals of managing data storage in Splunk, including index creation, bucket organization, and backup strategies. Learners will gain practical skills in configuring indexes, estimating storage needs, and optimizing data retention for efficient search and recovery.

This module introduces the structure, locations, and merging logic of Splunk configuration files, highlighting how they govern system and user settings. Learners will discover how configuration precedence works at both search-time and index-time, and practice troubleshooting using btool for effective Splunk administration.

This module introduces the architecture and configuration of distributed search in Splunk, focusing on the separation of search and indexing roles, clustering concepts, and knowledge bundle management. Learners will gain practical skills in configuring distributed search environments and troubleshooting common issues in search head and indexer clusters.

This module introduces the fundamentals of Splunk data administration, focusing on how data is ingested, assigned metadata, and indexed for efficient IT infrastructure monitoring. Learners will gain practical knowledge of Splunk's data input mechanisms, metadata field assignment, and the indexing process.

This module guides learners through the various methods of ingesting data into Splunk Enterprise, including file monitoring, network inputs via TCP/UDP, scripted inputs, and the HTTP Event Collector (HEC). Learners will gain practical knowledge on configuring each input type and understand their appropriate use cases for different data sources.

This module guides learners through the essentials of configuring data parsing and transformation in Splunk using props.conf and transforms.conf files. You will explore techniques for event breaking, timestamp extraction, data anonymization, and index re-routing, as well as how to test configurations using Splunk Web data preview tools.

This module introduces techniques for extracting fields from structured and delimited data in Splunk, and demonstrates how to enrich datasets using CSV and KV Store lookups. Learners will gain hands-on experience with both search-time and index-time field extractions, as well as creating and applying lookups to enhance data analysis.