Splunk has a complex configuration files architecture. In order to be an effective Splunk Enterprise Administrator, one must fully understand how Splunk platform is configured. In addition, a thorough knowledge of Splunk indexes is required. In this course, Splunk Enterprise Administration: Working with Configuration Files and Indexes, you will gain the ability to create, configure, and manage Splunk configuration files and indexes. First, you will learn the layering and precedence of Splunk configuration files. Next, you will discover how to effectively configure Splunk platform using configuration files. Finally, you will explore how to create and manage Splunk indexes. When you are finished with this course, you will have the skills and knowledge of Splunk configuration files and indexes needed to effectively administer Splunk Enterprise.
Author Name: Karun Subramanian
Author Description:
Karun is passionate about IT operations. He has 20+ years of hands-on experience in diverse technologies ranging from Linux Administration to Cloud technologies, and everything in between. He specializes in modernizing IT operations with automation, end-to-end monitoring, CI/CD and containerization. He holds professional certifications from half a dozen companies, including IBM, Oracle and Splunk. Karun has extensive experience in popular Application Performance Management tools such as Dynatrac… more

Table of Contents

• Course Overview
  1min
• Understanding Splunk Admin Basics and License Management
  25mins
• Working with Splunk Configuration Files
  41mins
• Understanding Splunk Index
  26mins
• Configuring Indexes
  27mins