EIEIOTECHNOVATION
← Training programmes

EIEIO / AUTOMATION & EMERGING TECHNOLOGY

Splunk Administration

Course outline

5 days

Duration

5 days

Topics

Mode

Module 1

What is Splunk

Theory

How Splunk Started

Theory

Splunk Overview

Theory + Lab

Splunk Real Time Examples

Theory + Lab

Splunk Deployment Methods

Theory + Lab

Splunk Installation Lab

Theory + Lab

Module 2

Data Input in Splunk

Theory + Lab

Splunk UI Overview

Theory + Lab

Creating and scheduling searches

Theory + Lab

Demo - Searches

Theory + Lab

Creating and scheduling Alerts

Theory + Lab

Module 3

Splunk System Administration

Splunk Deployment Overview

Theory

Splunk Engine Architecture

Theory + Lab

Splunk Deployment Architecture

Theory + Lab

Module 4

Splunk License Management

Splunk License Types

Theory

License Warnings and Violations

Theory

Add / Remove Licenses

Theory + Lab

Splunk License Master-Slave setup

Theory + Lab

Splunk License Pools

Theory + Lab

Module 5

Splunk Apps & Add-Ons

Concept and Pre-Requisites

Theory

Installation and Configuration

Theory + Lab

Fine-tuning and Uninstallation

Theory + Lab

Creating a Sample Splunk App

Theory + Lab

Module 6

Splunk Configuration Files

Most frequently used/accessed files

Theory

Config file extensions, structure

Theory + Lab

Config File Precedence

Theory + Lab

Module 7

Splunk Indexes

Concept of Splunk Indexes

Theory

Splunk Index structure

Theory + Lab

Create and configure new Indexes (UI, CLI & Conf file methods)

Theory + Lab

Monitor Splunk Indexes using MC

Theory + Lab

Module 8

Splunk User Management

Splunk Users and Roles

Theory

Creating custom Users and Roles

Theory + Lab

Verify / Test custom capabilities

Theory + Lab

Module 9

Splunk Authentication Methods

Understand various options of Authentication

Theory

Module 10

Receiving Data in Splunk

Overview of Data Inputs

Theory

Basic Settings for input options

Theory + Lab

Examples and use-cases of different methods

Theory + Lab

Module 11

Splunk Forwarders

Overview & Types of Splunk Forwarders

Theory

Install Splunk UF

Theory + Lab

Install Splunk HF

Theory + Lab

Module 12

Monitor Inputs

Create F&D monitor inputs

Theory + Lab

Deploy remote monitor inputs using UF

Theory + Lab

Overview of Network, Windows and Other types of inputs

Theory + Lab

Module 13

Data Inputs

Http Event Collector (HEC)

Theory + Lab

Data Input via Add-on

Theory + Lab

Data Input via Database

Theory + Lab

Day 5

Module – 14

Indexer Cluster Management and Administration

Master app bundles

Theory + Lab

Indexer cluster storage utilization options

Theory + Lab

Monitoring Console for indexer cluster environment

Theory + Lab

Module – 15

Forwarder Management

Configuring Deployment server

Theory + Lab

Creating ServerClass

Theory + Lab

Creating whitelist and Blacklist

Theory + Lab

Sending the App to the Forwarder

Theory + Lab

Module – 16

Search Head Cluster Management and Administration

Creating Deployer

Theory + Lab

Creating Search head captain and peer node

Theory + Lab

Pushing the App to the Search head

Theory + Lab

Module – 17

Tip and Trick

Theory + Lab

Quiz

Closure Note

Programme scope, delivery arrangements and suitability are confirmed during enquiry.