Study guide
Splunk Enterprise Certified Admin study guide
Read a lesson, then practice the ideas you want to remember.
Lessons
- HTTP Event Collector Architecture & Administ
- Windows Management Instrumentation Inputs
- Forwarder Setup & outputs.conf Load Balancin
- Indexer Acknowledgment, Data Cloning & Forwa
- Configuring Search Peers & Distributed Searc
- How Distributed Search Works — Free Study Guide 2026
- Roles of the Search Head and Search Peers
- Search Head Scaling & Search Head Clustering
- Character Set Encoding & Handling Binary Dat
- Input-Phase Processing & Default Metadata As
- Deployment Apps & Deployment Clients — Free Study Guide 2026
- Deployment Management & the Deployment Serve
- Forwarder Management Monitoring & Troublesho
- Server Classes, Client Grouping & App Deploy
- Ingestion Pipeline Stages: Input, Parsing, M
- Pipeline Component Placement & Queue Managem
- Splunk Input Options — Free Study Guide 2026
- CLI Administration & Basic Data Onboarding W
- Forwarder Types: Universal Forwarder vs. Hea
- About the Splunk Enterprise Certified Admin
- License Types, Stacks, Pools & Licensing Arc
- License Violations, Rolling Window Warnings
- Data Masking, Redaction & SEDCMD — Free Study Guide 2026
- Event Routing, Dynamic Index Assignment & Fi
- Transformation Mechanics: props.conf & trans
- File & Directory Monitoring Mechanics — Free Study Guide 2026
- Monitor Input Tuning: Whitelists, Blacklists
- Deploying a Remote Monitor Input, Network Sh
- Optional Settings for Network Inputs — Free Study Guide 2026
- Scripted Inputs & PowerShell Data Collection
- Creating Network Inputs: TCP & UDP — Free Study Guide 2026
- Validating Event Parsing with Data Preview
- Line Breaking & Event Segmentation — Free Study Guide 2026
- Timestamp Extraction, Time Zones & Clock Ske
- Splunk Enterprise Architecture & Core Compon
- Other Authentication Options & Enabling Mult
- Integrating Splunk with LDAP — Free Study Guide 2026
- Using btool to Inspect & Debug Configuration
- Splunk Configuration Directory Structure
- Configuration Layering, Precedence & Resolut
- Bucket Types & the Hot-Warm-Cold-Frozen-Thaw
- Checking Index Data Integrity — Free Study Guide 2026
- Applying a Data Retention Policy — Free Study Guide 2026
- The Fishbucket: File Tracking, CRC Collision
- Index Structure: Directories, Buckets & Buck
- indexes.conf Options: Paths, Bucket Sizing &
- Splunk Roles, Capabilities & Custom Role Des
- User Account Administration, Search Restrict