Now i am looking for study materials
Ultimately you are provided the study materials when doing the training modules recommended for SOC Administrator roles using ES: https://www.splunk.com/en_us/training/course-catalog.html?sort=Newest&filters=filterGroup4SplunkEnte...
For self-study, I'd recommend using the official Splunk Enterprise Security Certified Admin Exam Blueprint which lists all tested topics and recommended learning paths - this will help focus on which areas are covered in the exam and allow you to tick off what you've learnt.
Did this answer help you? If so, please consider:
Your feedback encourages the volunteers in this community to continue contributing