Course Topics

  •  Deploy forwarders with Forwarder Management

  •  Splunk Configuration Files

  • Configure common Splunk data inputs

  • Customize the input parsing process

  • Splunk Deployment Overview

  • Licence Management

  • Splunk Apps

  • Users, Roles, and Authentication

  • Getting Data In

  • Distributed Search

  • Introduction to Splunk Clusters


Course Prerequisites


  • Splunk Fundamentals 1
  • Splunk Fundamentals 2


Class Format

Instructor-led lecture with labs in our premises 5 rue Eugène Ruppert, L-2453 Luxembourg.


Course Modules

Module 1 - The Splunk System Administration

This section teaches you how to manage a Splunk Enterprise environment. Topics include :

  • Splunk licence manager
  • Indexers and Search Heads
  • Configuration
  • Management
  • Monitoring


Module 2 - The Splunk Data Administration

In this module, participants learn how to get data into Splunk, topics include :

  • Splunk forwarders
  • Methods to get remote data into Splunk


Date and Registration

Date : 28-30 March (three-day training)

A future session will be scheduled in November 7th

Registration :

The registration fees are €2.375. To complete your registration, please send a email to stating your full name, company and professional email address.


The conditions below (for Training proposals) prevail upon the General Terms and Conditions on the following topics: 


Invoicing and payment

With your course confirmation (at least 5 working days in advance) you will receive the invoice which is payable upon receipt, before the start of the course.


Cancellation or postponement

You may cancel or postpone your registration free of charge with a written notice given more than 10 working days before the course starts.

If your cancellation or postponement notice arrives 9 or less working days before the course starts, EBRC reserves its right to invoice 50% of the course price. If your cancellation or postponement notice arrives 5 or less working days before the course starts or the participant does not come for the course, EBRC reserves its right to invoice 100% of the course price. Cancellation/postponement must be received in writing and be acknowledged by EBRC. Replacement of a participant with another is free of charge.


Course postponed or cancelled

EBRC reserves its right to postpone or cancel a course when necessary, for instance when not enough participants are registered or due to force majeure events. We will endeavor to notify participants at least 5 working days in advance (except in cases of force majeure). In case of postponement, all participants will automatically be registered for the next session of the same course.