Splunk Admin Basics | Splunk components and their roles (5%) License Management | License types, stacks, pools, warnings and violations (5%) Splunk Configuration Files | Directory structure, configuration layering and precedence, and btool (5%) Splunk Indexes | Index structure, bucket types, data integrity, indexes.conf options, the fishbucket and retention (10%) Splunk User Management | User roles, custom roles and adding users (5%) Splunk Authentication Management | LDAP integration, other authentication options and multifactor authentication (5%) Getting Data In | Basic input settings, forwarder types, forwarder configuration and adding inputs with the CLI (5%) Distributed Search | How distributed search works, search heads and peers, search groups and search head scaling (10%) Getting Data In – Staging | The three phases of the indexing process and Splunk input options (5%) Configuring Forwarders | Forwarder configuration and additional forwarder options (5%) Forwarder Management | Deployment server, deployment apps, deployment clients, server classes and monitoring (10%) Monitor Inputs | File and directory monitor inputs, optional settings and remote monitor inputs (5%) Network and Scripted Inputs | TCP and UDP inputs, their optional settings and scripted inputs (5%) Agentless Inputs | Windows WMI inputs and the HTTP Event Collector (5%) Fine Tuning Inputs | Input-phase processing, source type fine-tuning and character set encoding (5%) Parsing Phase and Data | Event line breaking, timestamps and time zones, and Data Preview (5%) Manipulating Raw Data | Transforms for masking, routing and filtering, metadata overrides and SEDCMD (5%)