Skip to content
fernet.consultores

Training & Certification

Splunk Administration Training.

Training for Splunk administrators: data, indexes, users, apps and day-to-day operation.

The problem we solve.

Administering Splunk requires understanding how data comes in, is processed and is stored. Without that foundation, every platform incident turns into a lengthy investigation.

What’s included.

  • Architecture and components
  • Data onboarding and parsing
  • Indexes, retention and storage
  • Users, roles and authentication
  • Diagnostics and maintenance

How we work.

Five phases, always in the same order. Select each one to see what happens in it. In full projects they map onto the stages of our method.

We assess the group's starting level and what they need to be able to do by the end.

We design the programme: syllabus, exercises, practice environment and schedule.

We deliver the sessions with labs on data onboarding, indexes, roles and troubleshooting.

Each participant resolves administration issues set up in the lab.

We gather feedback and results and refine the programme for future editions.

Technical capabilities.

  • Splunk Enterprise and Splunk Cloud Platform
  • Forwarders and Deployment Server
  • props.conf and transforms.conf
  • Roles and permissions
  • Monitoring Console
  • btool

Use cases.

New platform team

Prepare whoever will administer Splunk.

Migration to Splunk Cloud

Adapt administration tasks to the cloud model.

Handover

Transfer knowledge when the team changes.

Benefits for your organisation.

  • Administrators working independently
  • Incidents resolved sooner
  • Tidier configuration
  • Less external dependence

Deliverables.

  • Course materials
  • Labs
  • Operations guides
  • Final assessment

Frequently asked questions.

What format is it delivered in?

Remotely or in person at your offices, in hands-on sessions. We adapt the length to the group and the objectives.

Does it cover Splunk Cloud?

Yes, including the administration differences between Splunk Enterprise and Splunk Cloud Platform.

Do you need prior Splunk experience?

Basic search skills help; if not, we recommend starting with the user training.

Shall we talk about Splunk Administration Training?

Tell us about your situation. If this service is not what you need, we will tell you; if it is, we will propose a concrete first step.

Request this service