Courses for Splunk Administrators

Whether you're responsible for a single Splunk instance or a massive distributed deployment, our Administrator curriculum teaches you the concepts, tasks, and best practices to keep your Splunk installation happy, healthy, and growing.

Click on a course below to view a full course description, class schedules, and register.

e-learning
required
recommended
Using Splunk
This 1 virtual day course teaches you to search, navigate, and create reports using the Search & Reporting app and Pivot feature. Also available via eLearning.
View topics and register ››
Searching and Reporting
with Splunk
This 2 virtual day course focuses on Splunk's search language. Scenario-based examples and hands-on challenges enable users to create robust searches, reports and charts. Also available via eLearning.
View topics and register ››
Creating Splunk
Knowledge Objects
This 2 virtual day course teaches you how to create and manage Splunk knowledge objects such as field extractions, tags, event types, alerts, and data models. Also available via eLearning.
View topics and register ››
Splunk Enterprise
System Administration
This 2 virtual day course is designed for system administrators who manage a Splunk Enterprise environment. Topics include Splunk license manager, indexers and search heads, configuration, management, and monitoring.
View topics and register ››
Splunk Enterprise
Data Administration
This 3 virtual day course is for data administrators who are responsible for getting data into Splunk. The course provides content about Splunk forwarders and methods to get remote data into Splunk.
View topics and register ››
Troubleshooting Splunk Enterprise This 2 virtual day course is designed for Splunk administrators. It covers topics and techniques for troubleshooting a standard Splunk distributed deployment using the tools available on Splunk Enterprise.
View topics and register ››
Splunk Enterprise
Cluster Administration
This 2 virtual day course is for advanced Splunk administrators and covers deployment and management of Splunk indexer clusters and search head clusters.
View topics and register ››
Building Add-Ons
(e-learning)
This 1 hour course helps you leverage the Splunk Common Information Model to build Splunk Add-ons
View topics and register ››
Creating Modular Inputs
(e-learning)
This 1 hour course covers creating Splunk modular inputs, which allow you to treat and interact with your scripted input definitions as one of the Splunk native inputs.
View topics and register ››