This 4,5 hours course is designed for the experienced Splunk system administrators. This hands-on class is designed to provide the essential knowledge for deploying and managing Splunk SmartStore.
It covers SmartStore deployment options, cache manager configurations, monitoring, and troubleshooting of SmartStore implementation.

• Introduction to SmartStore
• Standalone SmartStore Implementation
• SmartStore in Indexer Cluster
• Monitoring and managing SmartStore

Required:

• Splunk Enterprise System Administration
• Splunk Enterprise Data Administration

Strongly recommended:

• Linux OS commands
• Editing files with vi or nano
• Splunk index life-cycle and bucket transitions
• Splunk indexer cluster concept

Module 1 – Introduction to SmartStore

• Benefits of SmartStore
  
• SmartStore requirements and restrictions
• Indexing in SmartStore
• Searching in SmartStore

Module 2 – Standalone SmartStore Implementation

Module 3 – SmartStore in Indexer Cluster

Module 4 – Monitoring and managing SmartStore