Splunk Platform

SPLK-TSC : Transitioning to Splunk Cloud

Course Duration

2 Days

Delivery

ILT VILT

Overview

This 9-hour virtual course is for experienced on-prem administrators and anyone needing to ramp-up on Splunk Cloud to get more knowledge and experience of managing Splunk Cloud instances.

The course discusses the differentiators between on-prem Splunk and the different Splunk Cloud offerings. Modules include topics on how migrate data collection and ingest from on-prem Splunk to Splunk Cloud as well as highlighting Splunk Cloud specific differences and best practices to manage a productive Splunk SaaS deployment. For Splunk Administrators who have undertaken the System and Data Administration learning pathways, this course highlights key differences between Splunk Enterprise deployed on-premises and Splunk Enterprise Cloud to allow to ramp up their data and system management skills to transition to Splunk Cloud. The hands-on lab provides access to and experience of managing a Splunk Cloud instance.

What You'll Learn

Splunk Cloud overview and migration
Managing user authentication and authorization in Splunk
Managing Splunk indexes
Configuring Splunk forwarders for Cloud
Configuring inputs to Cloud, including API, Scripted, HEC and Application based inputs
Exploring GDI performance considerations
Installing and managing applications
Problem isolation and working with Splunk Cloud support

Who Should Attend

Splunk Administrator
Developer
User
Knowledge Manager
Architect

Prerequisites

To be successful, students should have a working knowledge of the topics covered in the following courses:

What is Splunk?
Intro to Splunk
Using Fields
Introduction to Knowledge Objects
Creating Knowledge Objects
Creating Field Extractions
Splunk Enterprise System Administration
Splunk Enterprise Data Administration

Learning Journey

Coming Soon...

Module 1 – Splunk Cloud Overview

Describe Splunk and Splunk Cloud features and topology
Identify Splunk Cloud administrator tasks
Describe Splunk Cloud purchasing options and differences between Classic and Victoria experience
Secure Splunk deployments best practices
Explain Splunk Cloud data ingestion strategies

Module 2 – Splunk Cloud Migration

Understand the Splunk Cloud migration journey
Determine Splunk Cloud migration readiness
Identify Splunk Cloud migration preparation tasks, strategies, and possible challenges

Module 3 – Managing Users

Identify Splunk Cloud authentication options
Add Splunk users using native authentication
Integrate Splunk with LDAP, Active Directory or SAML
Create a custom role
Manage users in Splunk
Use Workload Management to manage user resource usage

Module 4 – Managing Indexes

Understand cloud indexing strategy
Define and create indexes
Manage data retention and archiving
Delete and mask data from an index
Monitor indexing activities

Module 5 – Managing Apps

Review the process for installing apps
Define the purpose of private apps
Upload private apps
Describe how apps are managed

Module 6 – Configuring Forwarders

List Splunk forwarder types
Understand the role of forwarders
Configure a forwarder to send data to Splunk Cloud
Test the forwarder connection
Describe optional forwarder settings

Module 7 – Common Inputs

Describe forwarder inputs such as files and directories
Create REST API inputs
Create a basic scripted input
Create Splunk HTTP Event Collector (HEC) agentless inputs

Module 8 – Additional Inputs

Understand how inputs are managed using apps or add-ons
Explore Cloud inputs using Splunk Connect for Syslog, Data Manager, Inputs Data Manager (IDM), Splunk Edge Processor, and Splunk Edge Hub

Module 9 – Using Ingest Actions

Explore Splunk transformation methods
Create and manage rulesets with Ingest Actions
Mask, filter and route data with Ingest Action rules

Module 10 – Managing Splunk Cloud

Secure ingest with Splunk Cloud Private Connectivity with AWS
Describe Federated Search functionality
Describe Splunk connected experience apps such as Splunk Secure Gateway
Monitor and manage resource utilization by business units and users using Splunk App for Chargeback
Perform self-service administrative tasks in Splunk Cloud using the Admin Config Service

Module 11 – Supporting Splunk Cloud

Know how to isolate problems before contacting Splunk Cloud Support
Use Isolation Troubleshooting
Define the process for engaging Splunk Support

Appendix

Explore Splunk security fundamentals

Instructors

Scott Duffy

Bestselling Azure & TOGAF® Trainer, Microsoft Azure MVP

4.8 (4.1k)

10 Courses

Scott Duffy

Bestselling Azure & TOGAF® Trainer, Microsoft Azure MVP

4.8 (4.1k)

10 Courses

Frequently Asked Questions (FAQs)

Why get Splunk certified?

Splunk certifications validate your expertise in data analytics and your proficiency in using the Splunk platform.
These certifications demonstrate your ability to leverage Splunk's powerful tools for data collection, analysis, and visualization, making you a valuable asset to organizations seeking to gain actionable insights from their data.
Splunk-certified professionals are in high demand across various industries, including IT, security, and business analytics.
What to expect for the examination?

Splunk offers a variety of certification exams at different levels, covering various domains and products within the Splunk platform.
Exams typically consist of multiple-choice and scenario-based questions that assess your knowledge and skills in using Splunk to solve real-world problems.
Note: Certification requirements and policies may be updated by Splunk from time to time. We apologize for any discrepancies; do get in touch with us if you have any questions.
How long is Splunk certification valid for?

All Splunk certifications are valid for three years from the date of passing the highest-level certification exam.
To maintain your certification, you will need to recertify before it expires. You have three options for recertification:
- Pursue a higher-level certification (including any required prerequisite courses), in which case your lower-level certifications would also be renewed on the date of passing the next-level certification exam.
- Retake a certification exam within the final year of their recertification window to renew their certifications at that level (and any applicable downstream certifications).
- Complete continuing education courses at any point in the three year recertification window beginning the date of badge issuance.
Note: Certification requirements and policies may be updated by Splunk from time to time. We apologize for any discrepancies; do get in touch with us if you have any questions.
Why take this course with Trainocate?

Here’s what sets us apart:
- Global Reach, Localized Accessibility: Benefit from our geographically diverse training hubs in 16 countries (and counting!).
- Top-Rated Instructors: Our team of subject matter experts (with high average CSAT and MTM scores) are passionate to help you accelerate your digital transformation.
- Customized Training Solutions: Choose from on-site, virtual classrooms, or self-paced learning to fit your organization and individual needs.
- Experiential Learning: Dive into interactive training with our curated lesson plans. Participate in hands-on labs, solve real-world challenges, and take on comprehensive assessments.
- Learn From The Best: With 30+ authorized training partnerships and countless awards from Microsoft, AWS, Google – you're guaranteed learning from the industry's elite.
- Your Bridge To Success: We provide up-to-date course materials, helpful exam guides, and dedicated support to validate your expertise and elevate your career.

Keep Exploring

Course Curriculum

Training Schedule

Exam & Certification

Frequently Asked Questions

Improve yourself and your career by taking this course.

More Courses By Splunk

Browse All Courses

Ready to Take Your Business from Great to Awesome?

Level-up by partnering with Trainocate. Get in touch today.

Name

Phone

I'm inquiring for

Myself
Company

Inquiry Details

By providing your contact details, you agree to our Privacy Policy.