Transitioning to Splunk Cloud 8.0.2

Transitioning to Splunk Cloud 8.0.2

Transitioning to Splunk Cloud 8.0.2

Upcoming Classes

Online

Instructor-led online training

Location Apr 2021 May 2021 Jun 2021 Jul 2021 Aug 2021 Sep 2021 Oct 2021
AMER Pacific Time - Virtual Apr 19 – Apr 20
 May 10 – May 11
May 17 – May 18
 Jun 1 – Jun 2
Jun 14 – Jun 15
Jun 28 – Jun 29
 Jul 19 – Jul 20
 Aug 2 – Aug 3
Aug 9 – Aug 10
Aug 23 – Aug 24
 Sep 20 – Sep 21
 Oct 4 – Oct 5
EMEA UK Time - Virtual Apr 19 – Apr 20
 May 4 – May 5
May 24 – May 25
 Jun 14 – Jun 15
 Jul 5 – Jul 6
Jul 19 – Jul 20
 Aug 9 – Aug 10
Aug 23 – Aug 24
 Sep 13 – Sep 14
Sep 27 – Sep 28
 Oct 11 – Oct 12
AMER Eastern Time - Virtual Apr 26 – Apr 27
 May 3 – May 4
May 17 – May 18
 Jun 7 – Jun 8
Jun 21 – Jun 22
 Jul 12 – Jul 13
Jul 26 – Jul 27
 Aug 16 – Aug 17
Aug 30 – Aug 31
 Sep 7 – Sep 8
Sep 13 – Sep 14
Sep 27 – Sep 28
 Oct 11 – Oct 12
APAC Singapore - Virtual May 3 – May 4

Australia

Location Apr 2021 May 2021 Jun 2021 Jul 2021 Aug 2021 Sep 2021 Oct 2021
Ingeniq - Online Jun 1 – Jun 2
 Jul 26 – Jul 27

Summary

This 2-virtual day course highlights key differences between Splunk Enterprise deployed on-premise and Splunk Enterprise Cloud to allow Splunk Administrators to transition to Splunk Cloud.

The course provides the skills and knowledge for Splunk Cloud administrators to collect and ingest data as well as manage their cloud environment and maintain a productive Splunk SaaS deployment.

Description

  • Splunk Cloud SaaS
  • User Authentication and Authorization
  • Index Management and Data Retention
  • Cloud Ingestion - Using Splunk Forwarders
  • Cloud Ingestion - Use API, HEC and Scripted Inputs
  • Cloud Ingestion - Using Apps and IDM Inputs
  • Installing and Managing Apps
  • Refine and Manipulate Inputs
  • Working with Cloud Support

Duration

2 Days

Objectives

Module 1 – Splunk Cloud SaaS

  • Describe Cloud SaaS benefits and features
  • Identify Splunk Cloud administrator and managed tasks
  • Explain the differences between Splunk Enterprise on premise and Splunk Enterprise Cloud

Module 2 – User Authentication and Authorization

  • Identify Splunk Cloud authentication options
  • Add Splunk users using native authentication
  • Integrate Splunk with LDAP, Active Directory or SAML
  • Understanding Splunk authorization options

Module 3 – Index Management and Data Retention

  • Understand cloud indexing strategy
  • Create indexes in cloud
  • Manage data retention and archiving
  • Monitor indexing activities

Module 4 – Cloud Ingestion - Using forwarders

  • Review cloud ingestion strategies
  • Understand the role of forwarders in GDI
  • Configure forwarding to Splunk Cloud
  • Monitoring forwarder connectivity
  • Explore optional forwarder settings

Module 5 – Cloud Ingestion - Using API, HEC and Scripted Inputs

  • Understand how data is ingested using API
  • Describe how to use HEC for ingestion
  • Know how to deploy scripted inputs

Module 6 – Cloud Ingestion - Using Apps and IDM Inputs

  • Understand how inputs are managed using in apps or add-ons
  • Describe how customers may use Splunk Stream app
  • Deploy Cloud inputs for use on an IDM

Module 7 – Installing and Managing Apps

  • Understand how apps and add-ons are vetted and installed in Cloud
  • Create apps to manage and distribute configurations

Module 8 – Refine and Manipulate Inputs

  • Create and define props and transforms using the UI
  • Understand how to create, modify and deploy configs in Cloud
  • Masking data and removing data prior to ingestion
  • Dirty data and performance gains

Module 9 – Cloud Support and Troubleshooting

  • Troubleshooting Splunk deployments
  • Collecting data and use diagnostics or monitoring to investigate
  • Explore diagnostic tools used to troubleshoot common issues
  • Overview of how to submit request with the relevant data for support to troubleshoot

Prerequisites

Required:

  • Splunk Fundamentals 1
  • Splunk Fundamentals 2
  • Splunk System Administration
  • Splunk Data Administration

 

 

 

Onsite Training

For groups of three or more

Request Quote

Public Training

AMER Pacific Time - Virtual

EMEA UK Time - Virtual

AMER Eastern Time - Virtual

APAC Singapore - Virtual

Chatswood, NSW


Don't see a date that works for you?

Request Class

© 2005- Splunk Inc. All rights reserved.
Splunk>, Listen to Your Data, The Engine for Machine Data, Splunk Cloud, Splunk Light and SPL are trademarks and registered trademarks of Splunk Inc. in the United States and other countries. All other brand names, product names, or trademarks belong to their respective owners. © Splunk Inc. All rights reserved.