Splunk administration course for absolute beginners | 2022

Name: Splunk administration course for absolute beginners | 2022
Rating: 4.3 (42 reviews)

This course is a blend of both theoretical as well as practical knowledge and contains 23+ hands on practical labs

Created byMohammad Khan

Last updated 7/2022

English

What you'll learn

Understand the Splunk administrations concepts and practical activities
Onboard data from different devices and method through Splunk
More than 18+ labs are available in the course
Managing all the important and critical Splunk components
Become an expert Splunk administrator

Course content

4 sections • 48 lectures • 6h 30m total length

Introduction to the Splunk Administration syllabus9:37
This lecture explains the Course content of the Splunk administration course
What is SIEM, Its advantages and how it is getting used in todays world12:59
What is SIEM, Its advantages and how it is getting used in todays world

Module 1-Splunk Deployment part 110:25
1) Architecture of Splunk
2) Important components
3) Event lifecycle in Splunk
Module 1 part 2 Splunk deployment server setting and MC16:51
1) Overview of Splunk server settings
2) Overview of Monitoring console
Module 2- License Management19:27
1) Detailed description of Splunk licensing
2) Different type of Splunk license
3) License pooling and License master concept
4) exclusion from License consumption
Lab:-Splunk Licensing3:47
1) Upload License on Splunk
2) Create License pool
3) License master
Module 3 Splunk apps13:11
1) detailed description of App
2) App usage
3) Splunkbase
Lab:-App Installation3:57
1) Download and Install App
2) Uninstall App
Module 4 Splunk Configuration File7:55
1) Explanation of Configuration files
2) Directory structure of Splunk
Module 5 part 2 Splunk Index buckets8:05
Different buckets in Splunk
How data travels in Splunk buckets
Module 5 part 3 Splunk index storage calculation7:39
Detailed explanation of compression in Splunk
Storage size calculation
Module 5 part 4 Splunk index Create index10:45
Creating index in Splunk
Things to keep in mind while index creation
Lab:-Index Creation1:52
Creating 3 types of index on Splunk
Module 6 Splunk Index Management10:25
Detailed setting on managing index through CLI
Setting retention policy on Index
Module 7 User management9:45
Managing users on Splunk
Type of roles defined
Lab:-User Creation4:13
Creating Users on Splunk
Assigning roles to users
Module 8 Splunk Authentication Management5:17
Different types of methods for Splunk authentication
Lab- Splunk Integration with Windows AD part 25:26
Final integration of Windows AD with Splunk
Module 9 configure basic forwarding8:23
Important files to consider before data forwarding from Splunk UF to Indexer
Module 10 Distributed Search8:52
Concept of distributed search
Important files to consider
Lab:-Splunk Btool5:18
Explaining different usage of Splunk Btool

Module 1 Introduction to Data Administration5:33
Introduction to data administration concepts
Different between data admin and system admin
Module 2 Getting Data In- Staging6:49
Ingesting data into Splunk
Lab:-Data Ingestion3:00
Create a simple file
Ingest the file into Splunk
Module 3 Forwarder Configuration (UF VS HF)6:58
What is a heavy forwarder
Difference between UF and HF
Module 3 part 2 Forwarder configuration additional options5:56
Additional settings during forwarder configurations
Lab:-Splunk Forwarder, Indexer And Searchhead Config and Linux logs onboarding36:16
MOST IMPORTANT LAB:- It explain practical production level scenario
Configuring Searchhead, Forwarder and Indexer
Onboard data from Linux box through the latest method
Module 4 forwarder management app and addon8:32
Difference between an APP and Addon
Module 4 part 2 Forwarder Management DS4:55
What is the deployment server
How to manage the forwarders through deployment server
What is server-class
Lab- Managing Forwarder Through Deployment18:20
Practical hands on configuring Deployment server and pushing apps to forwarder
Module 5 Monitor Inputs4:22
Explains the concept of monitor input
Module 5 part 2 Monitor Inputs fish bucket5:04
Explains the concept of fishbucket
Module 6 Network and Scripted inputs4:13
Explains the network based and scripted input
Overview on Syslog method
Lab- Configure Scripted input6:22
Configuring the scripted input method
Module 7 HTTP Event Collector3:39
Explains the indepth of HTTP event collector method
Lab- Configure HTTP Event Collector on Splunk Enterprise6:02
Configuring HTTP event collector method
Module 8 Fine-Tuning Inputs3:28
best practices for fine tuning the inputs
Module 9 Parsing Phase And Data Preview8:36
Explain all the parsing phases during data ingestion in Splunk
Lab:- Parsing configure line breaking10:40
Perform line breaking in Logs
Lab:-Time Field Extraction8:31
Extracting time fields from the logs
Module 10 Manipulating Raw Data7:58
Need to manipulate the raw data
Lab:-Masking Raw Data2:23
How to mask the raw data through SEDCMD method
Module 11 Supporting KOS2:37
Description of Knowledge object
Module 12 DIAG4:17
Explains the DIAG file
Creation of the DIAG file
BONUS Lab- API Integration with Splunk7:25
Performs practical on API integration through splunk

Requirements

There is no requirement or pre-requisite for enrolling the course

Description

This course is based on the latest Splunk Administration Course 2022 (SPLK-1003). If you are looking forward to get the SPLUNK ENTERPRISE CERTIFIED ADMIN CREDENTIAL then please go ahead with this course

In this course we will be using Amazon AWS to build our Splunk Environment and has a bonus lecture you will learn how to build Splunk Environment.

This course is designed for complete beginners and experienced Splunkers who are totally new or familiar to Splunk. There is no pre-requisite for enrolling this course. I will be teaching you the Splunk administration from scratch.

Through this course you will have a very deeper understanding on all the Splunk administration concepts. I have explained each and every concept with a detailed explanation in a very simplistic manner and also included multiple labs on major concept.

This course is a blend of both practical and theoretical knowledge.

This course is divided into two parts:-

1) Splunk System administration

2) Splunk Data administration

This course contains 23+ Labs for your hands on.

It contains the following bonus lectures

1) Bonus slide on why SIEM is the most important requirement in organizations

2) Splunk API integration practical lab

3) Configure your own LDAP server and then perform the Splunk integration with LDAP

4) Onboarding Linux logs to Splunk through latest method

5) Creating a DIAG file

Once you are done with this course you will get a very deep understanding on all the Splunk administration and implementation concepts.

Who this course is for:

For absolute beginner in Splunk
Splunk cyber security analyst and working in monitoring team but want to dig deeper into Splunk management and administration
Want to switch to the Splunk domain in your career
Anyone who wanted to give and pass the Splunk the Certified administration exam (SPLK-1003)
Anyone who is tasked with Splunk implementation and end to end deployment

Splunk administration course for absolute beginners | 2022

What you'll learn

Explore related topics

Course content

Introduction to Splunk administration Course2 lectures • 23min

Free Lab Setup on AWS3 lectures • 24min

Splunk System administration Course19 lectures • 2hr 42min

Splunk data administration24 lectures • 3hr 2min

Requirements

Description

Who this course is for: