Splunk 7.2 Enterprise Certified Administration Guide, published by Packt - View it on GitHub