Services: Core Implementation

Services: Core Implementation

Upcoming Classes

Online

Instructor-led online training

Location Feb 2023 Mar 2023 Apr 2023 May 2023 Jun 2023 Jul 2023 Aug 2023
AMER Central Time - Virtual Feb 27 – Mar 3
Mar 13 – Mar 17
Apr 10 – Apr 14
Apr 24 – Apr 28
Jul 24 – Jul 28
Splunk Amsterdam (Schiphol) Mar 6 – Mar 10
APAC Singapore - Virtual Mar 13 – Mar 17
EMEA British Summer Time - Virtual Mar 27 – Mar 31
Apr 17 – Apr 21
May 22 – May 26
Jun 26 – Jun 30
Jul 31 – Aug 4
AMER Pacific Time - Virtual May 1 – May 5
May 22 – May 26
Jul 10 – Jul 14
AMER Eastern Time - Virtual May 8 – May 12
Jun 19 – Jun 23

United States

Location Feb 2023 Mar 2023 Apr 2023 May 2023 Jun 2023 Jul 2023 Aug 2023
Splunk - Tysons Corner Mar 27 – Mar 31
Splunk Plano Jun 5 – Jun 9

United Kingdom

Location Feb 2023 Mar 2023 Apr 2023 May 2023 Jun 2023 Jul 2023 Aug 2023
Splunk London Jun 12 – Jun 16

Summary

This expert-level course is an immersive five-day assessment-based bootcamp used to give attendees the opportunity to cement their knowledge in working with the Splunk core platform effectively and at-scale using Professional Services (PS) best-practice techniques. This course represents a significant step-up in difficulty versus earlier courses in a Splunk consultant’s learning path. Passing the course is only possible if the required preparation and practice is put into place before attending.

In-person (or virtual) instructor-led training will cover how to make Splunk Enterprise run efficiently in large clustered environments and will give a more in-depth understanding of the inner-workings of Splunk.

Attendees will apply best-practice techniques in an attempt to complete a number of practical assessment labs (individually — with no peer and minimal instructor technical assistance). These labs pose various technical challenges in simulated distributed customer environments.

To be successful during the assessed labs, candidates will need to demonstrate a masterful grasp on how to manage configuration at scale, troubleshoot problems, perform environment discovery, and ultimately understand what is necessary to make Splunk Customers successful, all under time pressure. This includes being able to engage with customers with an instructional and collaborative PS mindset, to fully clarify requirements before planning and implementing solutions.

Description

Course Topics

  • Splunk architecture
  • Monitoring Console
  • Configuration Management
  • Authentication, Authorization & LDAP integration
  • Collecting and forwarding data
  • Indexing and Searching
  • Clustering indexers
  • Clustering Search Heads

Duration

5 Days

Prerequisites

Prerequisite Certifications:

To qualify for registration, candidates must hold all of the following certifications.

  • Splunk Core Certified Power User
  • Splunk Core Certified Advanced Power User*
  • Splunk Enterprise Certified Admin
  • Splunk Enterprise Certified Architect

Prerequisite Courses:

To qualify for registration and be successful in this highly technically complex course, candidates must have completed

  • Core Consultant Labs
  • Experience in attending a PS shadowing engagement is not required, but is highly recommended, as is extensive practice in a lab-based environment 

Prerequisite Linux Skills

Attendees must be comfortable and competent in core Linux skills such as:

  • File & permission management
  • Service configuration
  • Installation best-practices
  • ssh & scp

Additional Notes

*Completion of all the following courses are considered an acceptable substitute for the Splunk Core Certified Advanced Power User badge:

  • Using Fields
  • Working with Time
  • Comparing Values
  • Result Modification
  • Leveraging Lookups and Subsearches
  • Correlation Analysis
  • Search Under the Hood
  • Multivalue Fields
  • Search Optimization
  • Creating Knowledge Objects
  • Creating Field Extractions
  • Enriching Data with Lookups
  • Data Models
  • Introduction to Dashboards
  • Dynamic Dashboards

Onsite Training

For groups of three or more

Request Quote

Public Training

AMER Central Time - Virtual

Splunk Amsterdam (Schiphol)

APAC Singapore - Virtual

McLean, VA

EMEA British Summer Time - Virtual

AMER Pacific Time - Virtual

AMER Eastern Time - Virtual

Plano, TX

London


Don't see a date that works for you?

Request Class