Splunk Enterprise
Admin Essentials
(Day-1 to 30)
Embedded Files
About the Course
Course Topics
Day - 1
Day - 1
Create a Splunk.com account.
Download Splunk Enterprise's latest version (or) specific version.
Download Splunk Universal Forwarder’s latest version (or) specific version.
Day - 2
Day - 2
Request Splunk Developer License.
How to create a Linux EC2 instance in AWS.
Tools to be installed on your laptop. - Optional
Day - 3
Day - 3
Install Splunk Enterprise on 2 Linux EC2 instances.
Install Splunk Universal Forwarder on the Linux EC2 instance.
Day - 4
Day - 4
Connect UF with Indexer.
Connect Search Head with Indexer.
Day - 5
Day - 5
Create indexes in Indexer. (Web/Conf/CLI).
Day - 6
Day - 6
Download sample data from GitHub.
Upload data on the Indexer UI & search the data from the Search Head.
Monitor files from UF & search the data from Seach Head.
Day - 7
Day - 7
What is the difference between Standalone, distributed, and Clustered deployment?
Day - 8
Day - 8
Why do we need 3 different components? Why can’t we manage it with a single component with a huge hardware capacity to handle the load?
Day - 9
Day - 9
What data can I Index?
Day - 10
Day - 10
How to get data into your Splunk deployment - High Level?
Day - 11
Day - 11
How does Splunk Enterprise handle your data? - Standalone
Day - 12
Day - 12
How does Splunk Enterprise store your data? - Standalone
Day - 13
Day - 13
Can Forwarders store the data? Why?
Can Search Heads store the data? Why?
Day - 14
Day - 14
How to design & size the indexes? - Standalone
Day - 15
Day - 15
How to estimate storage requirements for Splunk servers? - Standalone
Day - 16
Day - 16
How to estimate/find/calculate License usage?- Standalone
Day - 17
Day - 17
What are all the types of Licenses available & How to request them?
Day - 18
Day - 18
The difference between a Universal Forwarder and a Heavy Forwarder
Day - 19
Day - 19
How to select a Forwarder?
Day - 20
Day - 20
What are all the Processing Components & why do we need them?
Day - 21
Day - 21
What are all the Management Components & why do we need them?
Day - 22
Day - 22
Which component will you set up first & why?
Day - 23
Day - 23
Setup License Master from UI
Day - 24
Day - 24
Setup Cluster Master from UI
Setup Indexer Cluster from UI
Day - 25
Day - 25
Setup Deployer
Setup Search Head Cluster
Day - 26
Day - 26
Connect Search Head Cluster with Indexer Cluster
Day - 27
Day - 27
Setup Deployment Server and manage Multiple Forwarders
Setup Forwarders
Day - 28
Day - 28
Setup Monitoring Console
Day - 29
Day - 29
How to update Splunk’s default configurations
Day - 30
Day - 30
How do you do a basic health check of the Splunk infrastructure?
Registration Form
Page updated
Google Sites
Report abuse