Arrow Electronics, Inc.

Splunk Enterprise Deployment Practical Lab

CODE: SPL_SEDPL

LENGTH: 1,28 Hours (0,16 days)

PRICE: kr10 150,00

Description

This 24-hour practical lab exercise is designed to take you through the tasks of a complete mock deployment. Each participant is given access to a specified number of Linux servers and a set of requirements. Participants then perform a mock deployment according to requirements which adhere to Splunk Deployment Methodology and best-practices.

Objectives

Installation and Infrastructure

  • Install forwarders, indexers, search head, deployment server and license master

Configuration and Collection

  • Configure an index cluster
  • Deploy all specified configurations via deployment server
  • Configure inputs from forwarders
  • Configure and confirm index-time knowledge
  • Create search time field extractions
  • Searching and Reporting

    • Create searches for each required use case
    • Prerequisites

      To be successful, students should have a solid understanding of the following courses:

      • Splunk Fundamentals 1
      • Splunk Fundamentals 2

      OR the following single-subject courses:

      • What Is Splunk?
      • Intro to Splunk
      • Using Fields
      • Scheduling Reports and Alerts
      • Visualizations
      • Introduction to Knowledge Objects
      • Creating Field Extractions
      • Introduction to Dashboards
      • Students should also have completed the following courses:

        • Splunk Enteprise System Administration
        • Splunk Enterprise Data Administration
        • Architechting Splunk Enterprise Deployments
        • Troubleshooting Splunk Enterprise
        • Splunk Enterprise Cluster Administration
        • Session Dates