SP-SCA - Splunk Cloud Administration

Audience:

New Splunk Cloud administrators and technical professionals responsible for users, data ingestion, configuration, monitoring, and support in a Splunk Cloud environment.

Prerequisites:

Students should understand Intro to Splunk, Using Fields, Intro to Knowledge Objects, Creating Knowledge Objects, and Creating Field Extractions or possess equivalent experience.

Course Description:

This 18-hour hands-on course prepares new Splunk administrators to manage users and ingest data in Splunk Cloud. Students configure inputs and forwarders, manage indexes and user access, tune event processing, install applications, and apply monitoring and troubleshooting practices that support a productive Splunk SaaS deployment.

Course Objectives:

Upon completion of this course, students will:

• Describe Splunk Cloud topology and cloud-administrator responsibilities.
• Manage indexes, retention, user authentication, authorization, and configuration files.
• Configure cloud ingestion with forwarders, APIs, scripted inputs, HEC, and applications.
• Fine-tune inputs and validate event parsing with Data Preview.
• Transform raw data and manage applications and add-ons.
• Use monitoring, diagnostics, and Splunk Cloud Support resources to isolate problems.