This course is built for students who are ready to take the Splunk Enterprise Certified Admin certification.

Splunk Enterprise Certified Admin Exam Description:

The Splunk Enterprise Certified Admin exam is the final step towards the completion of the Splunk Enterprise Certified Admin certification. This upper-level certification exam is a 57-minute, 63-question assessment that evaluates a candidate’s knowledge and skills to manage various components of Splunk on a daily basis, including the health of the Splunk installation. Candidates can expect an additional 3 minutes to review the exam agreement, for a total seat time of 60 minutes.

It is recommended that candidates for this certification complete the lecture, hands-on labs, and quizzes that are part of the Splunk Enterprise System Administration and Splunk Enterprise Data Administration courses in order to be prepared for the certification exam. Splunk Enterprise Certified Admin is a required prerequisite to the Splunk Enterprise Certified Architect and Splunk Certified Developer certification tracks. The Splunk Enterprise System Administration course focuses on administrators who manage a Splunk Enterprise environment.

Topics include

1.0 Splunk Admin Basics 5%

2.0 License Management 5%

3.0 Splunk Configuration Files 5%

4.0 Splunk Indexes 10%

5.0 Splunk User Management 5%

6.0 Splunk Authentication Management 5%

7.0 Getting Data In 5%

8.0 Distributed Search 10%

9.0 Getting Data In – Staging 5%

10.0 Configuring Forwarders 5%

11.0 Forwarder Management 10%

12.0 Monitor Inputs 5%

13.0 Network and Scripted Inputs 5%

14.0 Agentless Inputs 5%

15.0 Fine-Tuning Inputs 5%

16.0 Parsing Phase and Data 5%

17.0 Manipulating Raw Data 5%