Splunk Cloud Overview | Cloud topology, administrator tasks, Splunk Cloud vs Splunk Enterprise, Self-Service vs Managed Cloud (5%) Index Management | Defining and creating indexes in the cloud, deleting data and monitoring indexing activity (5%) User Authentication and Authorization | Splunk user roles and integration with LDAP, Active Directory or SAML (5%) Splunk Configuration Files | Configuration files and directories, file precedence, and index-time vs search-time processing (5%) Getting Data in Cloud | Forwarder types and roles, configuring and testing a forwarder to Splunk Cloud, optional forwarder settings (15%) Forwarder Management | Deployment server, forwarder management, deployment clients and deployment apps (5%) Monitor Inputs | The data input process, file and directory monitor inputs and their optional settings (15%) Network and Other Inputs | TCP and UDP inputs, scripted inputs, Windows inputs and the HTTP Event Collector (10%) Fine-tuning Inputs | Default input-phase processing, sourcetype fine-tuning and character set encoding (5%) Parsing Phase and Data Preview | Event line breaking, timestamps and time zones, and validating events with Data Preview (10%) Manipulating Raw Data | Transformations with props.conf and transforms.conf, and SEDCMD (10%) Installing and Managing Apps | Installing apps, private apps and app management (5%) Working with Splunk Cloud Support | Isolating problems and the process for working with Splunk Cloud Support (5%)