Splunk 8.1 Cluster Administration

Splunk 8.1 Cluster Administration

Upcoming Classes

Online

Instructor-led online training

Location Apr 2021 May 2021 Jun 2021 Jul 2021 Aug 2021 Sep 2021 Oct 2021
AMER Pacific Time - Virtual Apr 14 – Apr 16
May 5 – May 7
May 12 – May 14
May 19 – May 21
May 26 – May 28
Jun 9 – Jun 11
Jun 16 – Jun 18
Jul 14 – Jul 16
Jul 21 – Jul 23
Jul 28 – Jul 30
Aug 4 – Aug 6
Aug 11 – Aug 13
Aug 25 – Aug 27
Sep 1 – Sep 3
Sep 15 – Sep 17
Sep 29 – Oct 1
Oct 6 – Oct 8
Oct 13 – Oct 15
AMER Eastern Time - Virtual Apr 21 – Apr 23
Apr 28 – Apr 30
May 5 – May 7
May 12 – May 14
May 19 – May 21
May 26 – May 28
Jun 2 – Jun 4
Jun 9 – Jun 11
Jun 16 – Jun 18
Jun 23 – Jun 25
Jun 30 – Jul 2
Jul 14 – Jul 16
Jul 21 – Jul 23
Jul 28 – Jul 30
Aug 4 – Aug 6
Aug 11 – Aug 13
Aug 18 – Aug 20
Aug 25 – Aug 27
Sep 1 – Sep 3
Sep 8 – Sep 10
Sep 22 – Sep 24
Sep 27 – Sep 29
Oct 6 – Oct 8
Oct 13 – Oct 15
EMEA UK Time - Virtual Apr 21 – Apr 23
Apr 28 – Apr 30
May 12 – May 14
May 19 – May 21
May 26 – May 28
Jun 2 – Jun 4
Jun 9 – Jun 11
Jun 16 – Jun 18
Jun 23 – Jun 25
Jul 7 – Jul 9
Jul 15 – Jul 17
Jul 21 – Jul 23
Jul 28 – Jul 30
Aug 4 – Aug 6
Aug 11 – Aug 13
Aug 18 – Aug 20
Aug 25 – Aug 27
Sep 1 – Sep 3
Sep 8 – Sep 10
Sep 15 – Sep 17
Sep 22 – Sep 24
Sep 29 – Oct 1
Oct 6 – Oct 8
Oct 13 – Oct 15
APAC Singapore - Virtual Apr 26 – Apr 28
May 12 – May 14
Jun 9 – Jun 11
Jul 21 – Jul 23
Aug 18 – Aug 20
Sep 15 – Sep 17
Oct 13 – Oct 15

Germany

Location Apr 2021 May 2021 Jun 2021 Jul 2021 Aug 2021 Sep 2021 Oct 2021
Munich Germany (Arrow) Apr 23
Jul 2

Australia

Location Apr 2021 May 2021 Jun 2021 Jul 2021 Aug 2021 Sep 2021 Oct 2021
Ingeniq - Online May 10 – May 12
Jul 19 – Jul 21

Summary

This 3-virtual day course is for an experienced Splunk Enterprise administrator who is new to Splunk Clusters. The course provides the fundamental knowledge of deploying and managing Splunk Enterprise in a clustered environment. It covers installation, configuration, management, and monitoring of Splunk clusters. While Splunk Clusters are supported in Windows environments, the class lab environment is running Linux instances only.

Description

  • Large-scale Splunk Deployment Overview
  • Single-site Indexer Cluster
  • Indexer Cluster Management and Administration
  • Forwarder Configuration
  • Search Head Cluster
  • Search Head Cluster Management and Administration
  • KV Store Collection and Lookup Management
  • SmartStore Implementation Overview

Duration

3 Days

Objectives

Module 1 – Large-scale Splunk Deployment Overview

  • Factors that affecting deployment design
  • How Splunk Enterprise can scale
  • Splunk License Master

Module 2 – Single-site Indexer Cluster

  • How Splunk single-site indexer clusters work
  • Indexer cluster components and terms
  • Splunk single-site indexer cluster configuration
  • Splunk indexer cluster log channels

Module 3 – Multisite Indexer Cluster

  • How Splunk multisite indexer clusters work
  • Multisite indexer cluster terms
  • Multisite indexer cluster configuration
  • Optional multisite indexer cluster configurations

Module 4 – Indexer Cluster Management and Administration

  • Peer offline and decommission
  • Master app bundles
  • Indexer cluster storage utilization options
  • Site mapping
  • Monitoring Console for indexer cluster environment

Module 5 – Forwarder Management

  • Indexer discovery
  • Optional indexer discovery configurations
  • Volume-based forwarder load balancing

Module 6 – Search Head Cluster

  • Splunk search head cluster overview
  • Search head cluster configuration

Module 7 – Search Head Cluster Management and Administration

  • Search head cluster deployer
  • Captaincy transfer
  • Search head member addition and decommissioning
  • Monitoring Console for Search Head Cluster

Module 8 – KV Store Collection and Lookup Management

  • KV Store collection in Splunk clusters
  • KV Store monitoring with Monitoring Console

Module 9 – SmartStore Implementation

  • SmartStore architecture overview
  • Deploy and manage SmartStore

Prerequisites

Required:

  • Splunk Enterprise System Administration
  • Splunk Enterprise Data Administration

Strongly Recommended:

  • Troubleshooting Splunk Enterprise
  • Working Linux knowledge
  • 3 months of hands-on Splunk administration experience

Onsite Training

For groups of three or more

Request Quote

Public Training

AMER Pacific Time - Virtual

AMER Eastern Time - Virtual

EMEA UK Time - Virtual

Munich

  • Confirmed
    9:00 AM - 5:00 PM
    $ 1500.00 USD
  • Confirmed
    9:00 AM - 5:00 PM
    $ 1500.00 USD

APAC Singapore - Virtual

Chatswood, NSW


Don't see a date that works for you?

Request Class