Home / Courses / AI, Data & Analytics / Splunk Enterprise System Administration

Splunk Enterprise System Administration

Name: Splunk Enterprise System Administration
Availability: InStock
Rating: 4.6 (5878 reviews)

This course is for system administrators who are responsible for managing a Splunk Enterprise environment.<br><br>The course provides the fundamental knowledge of Splunk license manager, indexers and search heads. It covers configuration, management, and monitoring core Splunk Enterprise components. <br><br>Please note that classes may run across two days, consisting of 6...

4.6 out of 5 rating
Last updated : 23/07/2026
English

Available as Instructor Led Training, Live Online & In Person at your Offices or Ours.

Enquire Now

Download Overview

Duration:

16.00 hours

13.0 CPD hours

Overview:

This course is for system administrators who are responsible for managing a Splunk Enterprise environment.

The course provides the fundamental knowledge of Splunk license manager, indexers and search heads. It covers configuration, management, and monitoring core Splunk Enterprise components.

Please note that classes may run across two days, consisting of 6 hour sessions. This course has 12 hours of content.

Description:

Course Outline:

Module 1 - Deploy Splunk

- Provide an overview of Splunk
- Identify Splunk Enterprise components and deployment types
- List Splunk installation prerequisites
- Use Splunk CLI commands
- Explore security recommended practices
Module 2 - Monitor Splunk

- Use Splunk Health Report
- Enable and use the Monitoring Console
- Use Splunk Diag and Rapid Diag
Module 3 - License Splunk

- Identify the different Splunk license types
- Describe license violations
- Install a Splunk License
- Configure a Splunk License Manager
- Configure License Peers
- Configure License Pools
- Manage License warnings
- Monitor license usage using the Monitoring Console and the Splunk Chargeback app
Module 4 - Use Configuration Files

- Describe Splunk configuration directory structure
- Explore the configuration layering process
- Index time process
- Search time process
- Use Splunk tools to examine configuration settings such as btoo
Module 5 - Use Apps

- Describe Splunk apps and add-ons
- Install an app on a Splunk instance
- Manage app accessibility and permissions
Module 6 - Create Indexes

- Describe how Splunk indexes function
- Identify the types of index buckets
- Create and work with indexes
- Describe metrics index
Module 7 - Manage Index

- Review Splunk Index Management basics
- Identify data retention recommendations
- Identify backup recommendations
- Move and delete index data
- Describe the use of the fishbucket
- Restore a frozen bucket
Module 8 - Manage Users

- Describe user roles in Splunk
- Add Splunk users using native authentication
- Create a custom role
- Manage users in Splunk
Module 9 - Configure Basic Forwarding

- Identify forwarder configuration steps
- Configure a Universal Forwarder
- Understand the agent management
Module 10 - Configure Distributed Search

- Configure distributed search
- Define the roles of the search head and search peers
- Use Monitoring Console to monitor search activity
- Explain when and how to quarantine search peers
- Identify options and considerations for using multiple search heads
- Identify distributed search recommended practices
- Explain the use cases for Federated Search and how it is configured

Available Delivery Options for Splunk Enterprise System Administration

Live Instructor Led Classroom Online (Live Online)
Traditional Instructor Led Classroom training (TILT/ILT)
Delivery at your offices in United Kingdom
Private dedicated course for your staff

How many CPD hours does Splunk Enterprise System Administration provide?

The 2 day Splunk Enterprise System Administration course gives you up to 13.0 CPD hours/structured learning hours.

Who is the correct audience for Splunk Enterprise System Administration?

- Administrators

Do you provide training for Splunk Enterprise System Administration?

Yes, we provide corporate training, dedicated training and closed classes for Splunk Enterprise System Administration. This can take place anywhere in United Kingdom including London, Manchester, Birmingham, Edinburgh or live online.

What is the duration of Splunk Enterprise System Administration?

The Splunk Enterprise System Administration training takes place over 2 day(s), with each day lasting approximately 16.00 hours including breaks.

What other terms do people search for?

Popular related searches include: Splunk Enterprise System Administration, Splunk Enterprise Administrator, SESA

Why are Nexus Human the best provider for Splunk Enterprise System Administration?

Nexus Human are recognised as one of the best training companies. Our trainers have won awards including Small Firms Best Trainer, national training partner of the year for Ireland, and global top 30 instructor awards in 2012, 2019 and 2021.

Is there a discount code for Splunk Enterprise System Administration?

Yes, the discount code PENPAL5 is currently available for Splunk Enterprise System Administration training. Only one discount code can be used per booking.

DURATION 16.00 Hours

No scheduled classes available at this time.

Training Insurance Included!

When you organise training, we understand that there is a risk that some people may fall ill, become unavailable.

To mitigate the risk we include training insurance for each delegate enrolled on our public schedule, they are welcome to sit on the same Public class within 6 months at no charge, if the case arises.