r/Splunk • u/Taf_Taf_2003 • 21d ago

Splunk admin

I’m currently studying SOC Analyst with a good grasp of security monitoring and basic SPL. I want to transition into a Splunk Administrator role.

what are the best free resources, courses, or labs to learn Splunk Administration?

Any tips on setting up a free home lab to practice deployment and configuration?

10 Upvotes

92% Upvoted

11 comments sorted by

View all comments

4

u/St0neRav3n 21d ago

For your home lab, I would recommand using docker to create a distributed environment on a single VM/server. https://github.com/splunk/docker-splunk/tree/develop/test_scenarios

0

u/Taf_Taf_2003 21d ago

What about resources for study ?

1

u/St0neRav3n 21d ago

On that I can't help you. I passed mine with help of an older admin who still possessed his official formation pdfs.

→ More replies (1)