About Course
Splunk Enterprise Data Admin Day 1 to Day 100
Designed for IT professionals seeking real time experience in Splunk. This comprehensive program covers data onboarding, index management, real-time projects, and hands-on labs. With weekly live demos, continuous content updates, and expert guidance, this course equips learners with the skills needed for onboarding you data in Splunk.
Day 1 to Day 100 - Syllabus
Day 1 to 4: Introduction to Splunk and Initial Setup
Day 1: Getting Started with Splunk (Create Account, Download Splunk & Universal Forwarder)
Day 2: Setting Up Your Environment (Request Developer License, AWS EC2 Instances, and Tools)
Day 3: Installing Splunk Components (Install Splunk Enterprise and Universal Forwarder)
Day 4: Configuring Basic Connections (Connect UF to Indexer, Search Head to Indexer).
Day 5 to 6: Data Indexing and Searching
Day 5: Creating and Managing Indexes (Index Creation via Web, Conf, CLI)
Day 6: Data Upload and Monitoring (Upload Sample Data, Monitor Files, Search Data)
Day 7 to 12: Splunk Architecture and Data Handling
Day 7: Splunk Deployment Models (Standalone, Distributed, and Clustered Deployments)
Day 8: Understanding Splunk's Components (Why We Need Multiple Components)
Day 9: What Data Can Be Indexed? (Understanding the Types of Data)
Day 10: Data Onboarding Overview (High-Level View of Data Input)
Day 11: Data Handling in Splunk (How Splunk Manages Data - Standalone)
Day 12: Data Storage in Splunk (How Splunk Stores Data - Standalone)
Day 13 to 16: Monitoring and Managing Inputs
Day 13: Monitoring Files and Directories (Via Splunk Web, CLI, and Config Files)
Day 14: Input Path Wildcards (Using Wildcards for Input Paths)
Day 15: Managing Incoming Data (Include or Exclude Specific Data)
Day 16: Handling Log Rotation (How Splunk Manages Log File Rotation)
Day 17 to 23: Event Processing & Timestamping
Day 17: Discarding Specific Events (Managing Event Data - Discarding Some, Keeping Others)
Day 18: Keeping Specific Events (Discarding Unnecessary Events)
Day 19: Event Boundary Detection (How Splunk Determines Event Boundaries)
Day 20: Timestamp Assignment (Understanding and Configuring Timestamps)
Day 21: Timestamp Recognition (Configuring Timestamp Settings)
Day 22: Indexed Fields (How Splunk Builds Indexed Fields)
Day 23: Importance of Source Types (Why Source Types Matter)
Day 24 to 30: Data Inputs & Collectors
Day 24: TCP and UDP Data Input (Getting Data from Network Ports)
Day 25: Monitoring Windows Event Logs (Windows Event Log Monitoring)
Day 26: HTTP Event Collector Setup (Configuring HEC in Splunk)
Day 27: Scripted Inputs (Creating Scripted Inputs for Data)
Day 28: Splunk Add-ons & Modular Inputs (Integrating External APIs with Splunk)
Day 29: Scripted Input vs Modular Input (Differences and Use Cases)
Day 30: Data Loss Prevention (Using Persistent Queues to Prevent Data Loss)
Day 31 to 35: Configuring and Managing Source Types
Day 31: How the Splunk platform assigns source types
Day 32: The "Great 8" of Splunk (Best practices in configuration)
Day 33: What Happens With Bad Sourcetypes & How to Fix Them
Day 34: Difference between Apps & Add-ons
Day 35: How to use Splunk App Packaging Toolkit?
Day 36 to 50: Data Onboarding Across Various Systems
Day 36: How to Deploy Apps to Forwarders using Deployment Server
Day 37: Onboard data from Windows
Day 38: Onboard data from Linux
Day 39: Onboard data from ServiceNow
Day 40: Onboard data from GitHub
Day 41: Onboard data from Jenkins
Day 42: Onboard data from Syslog
Day 43: Onboard data from AWS
Day 44: Onboard data from Azure
Day 45: Onboard data from GCP
Day 46: Onboard data from BIG-IP F5
Day 47: Onboard data from MySQL using Splunk DB Connect
Day 48: Onboard data from MSSQL using Splunk DB Connect
Day 49: Onboard data from MongoDB using Splunk DB Connect
Day 50: Index Time Field Extraction - Why is it important?
Day 50 to 100
Why This Course Stands Out?
Pre-Recorded Lessons with Lifetime Access
Pre-Recorded Lessons with Lifetime Access
Pre-Recorded Lessons with Lifetime Access
Get lifetime access to all recorded lessons, ensuring you can revisit the content anytime at your own pace.
Weekly live Q&A and demo sessions
Pre-Recorded Lessons with Lifetime Access
Pre-Recorded Lessons with Lifetime Access
Join weekly live sessions to ask questions, see live demos, and gain real-time insights from an expert trainer.
Step by Step use case Documents
Pre-Recorded Lessons with Lifetime Access
Real Time Projects with end-to-end guidance
Receive detailed, step-by-step documents for all use cases, ensuring clarity and practical learning.
Real Time Projects with end-to-end guidance
Private WhatsApp group for personalized support
Real Time Projects with end-to-end guidance
Work on real-world projects with step-by-step guidance to build practical experience in Splunk data administration.
Updated content with every Splunk release
Private WhatsApp group for personalized support
Private WhatsApp group for personalized support
Stay ahead with regularly updated course content that aligns with the latest Splunk versions and features.
Private WhatsApp group for personalized support
Private WhatsApp group for personalized support
Private WhatsApp group for personalized support
Get exclusive access to a private WhatsApp group for support and guidance throughout your learning journey.
About Trainer
Ramany Muthusamy
I am a Splunk Admin/Developer Consultant and Trainer with 4 years of Experience with Computer Science and Engineering background.
I worked on multiple projects starting from Support role in development to Splunk admin including Infrastructure creation and onboarding the data from multiple sources.
I have also trained multiple working professionals who wanted to upskill them in Splunk..