Amping Up Splunk with Advanced Admin

1 H 39 M

Just you? Training a whole team? There's an ITProTV plan that fits.

Start Training Today
  • Parsing
    • Overview
    • Understand Parsing
    • Configure and Optimize Event Line Breaking
    • Configure and Optimize Timestamps and Time Zones
  • Data Transformation
    • Use Data Preview To Validate Input
    • Understand Data Transformations in Splunk
    • Transform Data with props.conf and transforms.conf
  • Other Advanced Topics
    • Use SEDCMD to Modify Raw Data
    • Supporting Search Users and Their Knowledge Objects
    • Final Thoughts


itprotv course thumbnailitprotv course thumbnailitprotv course thumbnail
  • Episode Description
  • Transcript

WEBVTT >> Hi there. My name is Anthony Sequeira and I am thrilled that you are joining me for this Splunk event here at IT Pro, Compliments of ACI Learning. In this course, Lauren and I are going to walk you through advanced administrative tasks that you may be called upon to perform in your Splunk environment. Specifically, we'll take a look at manipulating the data before it goes into that read-only Splunk index. We might want to do this if we have to mask information like account numbers or credit card numbers that we might not be able to legally store inside of the index. This is going to be an exciting course. I'm thrilled you're here and please join me in the next video.