Courses for Splunk Administrators

The newest comprehensive resource from Splunk Training + Certification is here.

Want more details on this curriculum path?

Whether you're responsible for a single Splunk instance or a massive distributed deployment, our Administrator curriculum teaches you the concepts, tasks, and best practices to keep your Splunk installation happy, healthy, and growing.

Notice: The following courses; Using SplunkSearching and Reporting with Splunk, Creating Splunk Knowledge Objects, Splunk Infastructure Overview are now replaced with Splunk Fundamentals 1 and Splunk Fundamentals 2 (see new learning path below).

If you are a partner or have a subscription, you can continue to take the legacy classes and then take both the Certified User and Certified Power User exam.

  

Splunk Fundamentals 1

This self-paced course teaches you how to search and navigate in Splunk, use fields, get statics from your data, create reports, dashboards, lookups, and alerts. It will also introduce you to Splunk's datasets features and Pivot interface.
 

Splunk Fundamentals 2

This 4 virtual-day course focuses on additional SPL commands, using field aliases and calculated fields, creating tags and event types, using macros, creating workflow actions and data models, and normalizing data with the CIM. 

Splunk Enterprise System Administration

This 2 virtual day course is designed for system administrators who manage a Splunk Enterprise environment. Topics include Splunk license manager, indexers and search heads, configuration, management, and monitoring. 

Splunk Enterprise Data Administration

This 3 virtual day course is for data administrators who are responsible for getting data into Splunk. The course provides content about Splunk forwarders and methods to get remote data into Splunk. 

Troubleshooting Splunk Enterprise

This 2 virtual day course is designed for Splunk administrators. It covers topics and techniques for troubleshooting a standard Splunk distributed deployment using the tools available on Splunk Enterprise. 

Splunk Enterprise Cluster Administration

This 3 virtual day course is for advanced Splunk administrators and covers deployment and management of Splunk indexer clusters and search head clusters. 

Implementing Splunk SmartStore

This  course is designed for the experienced Splunk system administrators. This hands-on class is designed to provide the essential knowledge for deploying and managing Splunk SmartStore.  It covers SmartStore deployment options, cache manager configurations, monitoring, and troubleshooting of SmartStore implementation.
 

Splunk Workload Management

This course provides the fundamentals of using the Workload Management (WLM) feature in Splunk. In this course, you will learn about WLM concepts and features, requirements to configure WLM in the Splunk environment, using workload pools and rules, and allocating WLM resources.

Working with Metrics in Splunk

This course provides Splunk users in-depth information about metrics, ingesting and searching metrics data, and how to use the Metrics Workspace to analyze and create visualizations.
 

Implementing Splunk Data Stream Processor (DSP)

This 4-day course is designed for the experienced Splunk administrators who are new to a data stream processing service. This hands-on class is designed to provide the essential knowledge for deploying a Splunk DSP cluster, designing DSP pipelines, and managing stream processing use cases.