Part 2:Splunk Data Administration

Part 2 of this Splunk 9.x Enterprise Certified Admin Guide is a deep dive into the world of Splunk data administration. It will equip you with the skills needed to efficiently bring data into Splunk, configure data inputs, perform parsing and transformation, extract meaningful fields, and enhance data with lookups. The self-assessment mock exam ensures that you can apply your knowledge effectively.

This part contains the following chapters:

• Chapter 8, Getting Data In
• Chapter 9, Configuring Splunk Data Inputs
• Chapter 10, Data Parsing and Transformation
• Chapter 11, Field Extractions and Lookups
• Chapter 12, Self-Assessment Mock Exam