Being able to ingest data in any format from diverse sources is the key feature a log aggregation tool like Splunk should possess. In this course, Splunk Enterprise Administration: Monitoring and Creating Inputs, you’ll learn all the data input methods that Splunk offers. First, you’ll explore how to monitor files and directories in Splunk. Next, you’ll discover how to configure and deploy scripts, network inputs and Splunk HTTP event Collector for data ingestion. Finally, you’ll learn how to override default fields and timestamp extraction at index time. When you’re finished with this course, you’ll have the skills and knowledge of monitoring and creating inputs required for administering data on-boarding process in Splunk.
Author Name: Muhammad Awan
Author Description:
Muhammad Awan is a Senior Splunk Admin in working in Public Sector. Has been associated with Splunk and data science related technologies for a decade. Splunk Certified Admin and Splunk Certified Power User. Microsoft Certified Solutions Exert and Microsoft Certified Solutions Associate (Office 365) MCSA (Messaging). Experience with Networks and Security technologies. He has been mentoring and teaching at various universities as a visiting faculty in the past. Loves to acquire new skills and dis… more

Table of Contents

• Course Overview
  1min
• Introduction
  12mins
• Monitoring Files and Directories
  32mins
• Getting Data from Network Sources
  13mins
• Getting Windows Data In
  24mins
• Scripted Inputs
  29mins
• The HTTP Event Collector (HEC)
  25mins
• Configuring Inputs
  13mins