Your Cart Is Empty
Home > Technical Courses > Data Analytics > Splunk Enterprise Data Administration
This course is designed for administrators who are responsible for getting data into Splunk Indexers.
The Splunk Enterprise Data Administration course is a specialized, instructor-led training program focused entirely on the data ingestion pipeline, parsing mechanics, and remote endpoint management within an on-premises Splunk Enterprise environment. Designed for data administrators, engineers, and architects, this course shifts the focus away from system infrastructure to concentrate strictly on getting machine data into Splunk cleanly and efficiently. Participants learn how to handle data inputs from diverse sources, manage the parsing process to establish proper timestamps and event boundaries, and use regular expressions to mask or filter out sensitive or unnecessary information before it consumes valuable indexing space. A major emphasis of the curriculum is scale and remote agent configuration. Students gain hands-on experience deploying and customizing Universal Forwarders, as well as using the Splunk Deployment Server to organize remote endpoints into "server classes" for centralized configuration updates. By mastering data input methods—such as file monitors, network streams, and the HTTP Event Collector (HEC)—and understanding how to manipulate backend configuration files like props.conf and transforms.conf, participants ensure that enterprise data is properly classified and optimized for search. This course represents the second half of the core educational path required to earn the Splunk Enterprise Certified Admin credential. Please note that classes may run across three days, consisting of 6 hour sessions each day.
Category
ID
Duration
Level
Price
Splunk
13864
3 Day(s)
Intermediate
$2,195.00
Objectives
In this course, you will learn to: • Configure Universal Forwarders: Install, test, and maintain lightweight remote agents to safely pass machine data to indexers. • Manage the Splunk Deployment Server: Create server classes, apps, and deployment bundles to centrally update thousands of forwarders. • Deploy Diverse Ingestion Methods: Implement file monitoring, script-based data collection, raw network streams (TCP/UDP), and the HTTP Event Collector (HEC). • Master Sourcetypes: Create and customize sourcetypes to properly classify incoming data structures and formats. • Manage the Parsing Pipeline: Adjust configuration files to control line breaking, custom timestamp extractions, and event boundaries.• Transform and Mask Data: Build data-filtering and masking rules using regular expressions to drop junk data or hide sensitive information before indexing. • Navigate Configuration Files: Utilize back-end files like props.conf and transforms.conf to direct ingestion behavior. • Troubleshoot Ingestion Errors: Diagnose data delivery gaps, missing timestamps, and format mismatches using Splunk's internal logs.
Questions?
This course is part of the following Certifications: • Splunk Enterprise Certified Admin
To be successful, students must have completed these Splunk Education course(s) or have equivalent working knowledge: • Intro to Splunk • Using Fields (SUF) • Intro to Knowledge Objects • Creating Knowledge Objects (CKO) • Creating Field Extractions (CFE) • Enriching Data with Lookups (EDL) • Data Models (SDM) • Splunk Enterprise System Administration (SESA)
Splunk Enterprise Data Administration
Class Schedule
Live Online
Course Overview
Training Delivery Methods
With Productivity Point, you will have a spectrum of delivery methods to choose from... when where and how you like it. Whether it's in a classroom or online, we have a delivery option to meets your needs.
Classroom Live
Classroom Virtual
Private Group
On Demand
Classroom Live Training
Get in-person, hands-on instruction with live lab exercises taught by subject matter experts who deliver authorized and industry-leading content.
With classrooms in almost every major U.S. city, Productivity Point has something for users of every level, so you can earn the most popular industry certifications. You get hands-on learning experience with live lab exercises taught by experienced instructors. We proudly advocate our learning services to be hosted by the best-qualified trainers in terms of technical knowledge and teaching skills.
Classroom Virtual Training
Prefer to have a dedicated classroom for your virtual experience? Attend live, hands- on training via remote instructor from one of Productivity Point’s multiple locations.
Enjoy a focused and professional training environment, including all technical equipment provided along with administrative and technical support at your fingertips. With over 150 locations to choose from, review our course catalog or contact your personal Productivity Point Account Manager to see if the course you have in mind is delivered at one of our dedicated virtual classrooms in your area.
Live Online Training
Blend the best from traditional face-to-face instructor-led training with the latest in conferencing technology.
Private Group Training
Your private group classroom experience will not only take place in the location of your choice (including any of our training centers), but you will enjoy the following amenities:
On-Demand Learning
On-Demand is an IT training solution designed around your schedule, budget, and learning needs. Combining high-quality video, reading, and knowledge checks in a self-paced format, On-Demand helps you build skills as your schedule allows—all at once or five minutes at a time.
With On-Demand, you learn at your own pace and in the convenience of your own space.
With Learn at your own pace…
Productivity Point Learning Solutions evolved out of a desire to increase our outreach both nationally and internationally.
Productivity Point Headquarters 1580 Sawgrass Corporate Parkway Suite 205 Sunrise, Florida 33323 United States
Contact T 1-844-238-8607 P 1-954-425-6141 F 1-954-928-9057 E info@productivitypointls.com