Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

Pluralsight

Splunk Enterprise Administration: Managing Data and Forwarders

via Pluralsight

Overview

Managing forwarders and data ingestion is a vital task in Splunk Administration. In this course you will learn how to configure universal forwarders and deployment servers, and thereby manage and monitor thousands of universal forwarders with ease.

The most common method of data ingestion in Splunk is using the universal forwarders. While most of the factory settings work well on a universal forwarder, there are numerous options you can (and should) configure for optimal performance. Further, as the number of universal forwarders grow in your environment, managing all of them from one central system is inevitable. In this course, Splunk Enterprise Administration: Managing Data and Forwarders, you will learn the foundational knowledge to configure forwarders for efficiency, manage thousands for forwarders using Splunk deployment servers, and monitor forwarders. First, you will learn how the forwarders work and understand the difference between Splunk universal forwarder and heavy forwarder. Next, you will discover the various options to configure forwarders such as compression, encryption and load balancing. Finally, you will explore how to use Splunk deployment server to manage thousands of forwarders by configuring deployment apps and deployment clients. When you are finished with this course, you will have the skills and knowledge of Splunk administration needed to effectively configure and manage data ingestion.

Taught by

Karun Subramanian

Reviews

Start your review of Splunk Enterprise Administration: Managing Data and Forwarders

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Someone learning on their laptop while sitting on the floor.