Opleiding: Splunk Enterprise Data Administration (SEDA)

This course is for administrators who are responsible for getting data into Splunk.

The course provides the fundamental knowledge of Splunk forwarders and methods to get remote data into Splunk in...

This course is for administrators who are responsible for getting data into Splunk.

The course provides the fundamental knowledge of Splunk forwarders and methods to get remote data into Splunk indexers. It covers installation, configuration, management, monitoring, and troubleshooting of Splunk forwarders and Splunk Agent Management Server components.

Please note that classes may run across three days, consisting of 6 hour sessions each day. The course has 18 hours of content.

- Administrators

Module 1 – Get Data Into Splunk


- Provide an overview of Splunk
- Describe the Splunk distributed model
- Describe data input types and metadata settings
- Configure initial input testing with Splunk Web
- Test Indexes with input staging
Module 2 – Configuration Files and Apps


- Identify Splunk configuration files and directories
- Describe index-time and search-time precedence
- Validate and update configuration files
- Explore Splunk apps and apps installation
Module 3 – Configure Forwa...