Study guide

Splunk Enterprise Certified Admin study guide

Read a lesson, then practice the ideas you want to remember.

Lessons

  1. HTTP Event Collector Architecture & Administ
  2. Windows Management Instrumentation Inputs
  3. Forwarder Setup & outputs.conf Load Balancin
  4. Indexer Acknowledgment, Data Cloning & Forwa
  5. Configuring Search Peers & Distributed Searc
  6. How Distributed Search Works — Free Study Guide 2026
  7. Roles of the Search Head and Search Peers
  8. Search Head Scaling & Search Head Clustering
  9. Character Set Encoding & Handling Binary Dat
  10. Input-Phase Processing & Default Metadata As
  11. Deployment Apps & Deployment Clients — Free Study Guide 2026
  12. Deployment Management & the Deployment Serve
  13. Forwarder Management Monitoring & Troublesho
  14. Server Classes, Client Grouping & App Deploy
  15. Ingestion Pipeline Stages: Input, Parsing, M
  16. Pipeline Component Placement & Queue Managem
  17. Splunk Input Options — Free Study Guide 2026
  18. CLI Administration & Basic Data Onboarding W
  19. Forwarder Types: Universal Forwarder vs. Hea
  20. About the Splunk Enterprise Certified Admin
  21. License Types, Stacks, Pools & Licensing Arc
  22. License Violations, Rolling Window Warnings
  23. Data Masking, Redaction & SEDCMD — Free Study Guide 2026
  24. Event Routing, Dynamic Index Assignment & Fi
  25. Transformation Mechanics: props.conf & trans
  26. File & Directory Monitoring Mechanics — Free Study Guide 2026
  27. Monitor Input Tuning: Whitelists, Blacklists
  28. Deploying a Remote Monitor Input, Network Sh
  29. Optional Settings for Network Inputs — Free Study Guide 2026
  30. Scripted Inputs & PowerShell Data Collection
  31. Creating Network Inputs: TCP & UDP — Free Study Guide 2026
  32. Validating Event Parsing with Data Preview
  33. Line Breaking & Event Segmentation — Free Study Guide 2026
  34. Timestamp Extraction, Time Zones & Clock Ske
  35. Splunk Enterprise Architecture & Core Compon
  36. Other Authentication Options & Enabling Mult
  37. Integrating Splunk with LDAP — Free Study Guide 2026
  38. Using btool to Inspect & Debug Configuration
  39. Splunk Configuration Directory Structure
  40. Configuration Layering, Precedence & Resolut
  41. Bucket Types & the Hot-Warm-Cold-Frozen-Thaw
  42. Checking Index Data Integrity — Free Study Guide 2026
  43. Applying a Data Retention Policy — Free Study Guide 2026
  44. The Fishbucket: File Tracking, CRC Collision
  45. Index Structure: Directories, Buckets & Buck
  46. indexes.conf Options: Paths, Bucket Sizing &
  47. Splunk Roles, Capabilities & Custom Role Des
  48. User Account Administration, Search Restrict