Transitioning to Splunk Cloud 8.2

Transitioning to Splunk Cloud 8.2

Transitioning to Splunk Cloud 8.2

Upcoming Classes

Online

Instructor-led online training

Location Oct 2022 Nov 2022 Dec 2022 Jan 2023 Feb 2023 Mar 2023 Apr 2023
APAC Singapore - Virtual Oct 10 – Oct 11
 Nov 3 – Nov 4
Nov 23 – Nov 24
 Dec 12 – Dec 13
 Jan 5 – Jan 6
Jan 23 – Jan 24
AMER Eastern Time - Virtual Oct 17 – Oct 18
Oct 24 – Oct 25
Oct 31 – Nov 1
 Nov 7 – Nov 8
Nov 14 – Nov 15
Nov 21 – Nov 22
Nov 28 – Nov 29
 Dec 5 – Dec 6
Dec 12 – Dec 13
Dec 19 – Dec 20
 Jan 5 – Jan 6
Jan 9 – Jan 10
Jan 19 – Jan 20
Jan 23 – Jan 24
Jan 30 – Jan 31
AMER Pacific Time - Virtual Oct 24 – Oct 25
Oct 31 – Nov 1
 Nov 14 – Nov 15
Nov 21 – Nov 22
 Dec 5 – Dec 6
Dec 12 – Dec 13
Dec 19 – Dec 20
 Jan 3 – Jan 4
Jan 17 – Jan 18
Jan 30 – Jan 31
EMEA UK Time - Virtual Nov 7 – Nov 8
Nov 21 – Nov 22
Nov 28 – Nov 29
 Dec 5 – Dec 6
Dec 12 – Dec 13
 Jan 9 – Jan 10
Jan 16 – Jan 17
Jan 23 – Jan 24

Summary

This 2-virtual day course highlights key differences between Splunk Enterprise deployed on-premise and Splunk Enterprise Cloud to allow Splunk Administrators to transition to Splunk Cloud.

The course provides the skills and knowledge for Splunk Cloud administrators to collect and ingest data as well as manage their cloud environment and maintain a productive Splunk SaaS deployment.

Description

  • Splunk Cloud Overview
  • User Authentication and Authorization
  • Index Management and Data Retention
  • Cloud Ingestion - Using Splunk Forwarders
  • Cloud Ingestion - Use API, HEC and Scripted Inputs
  • Cloud Ingestion - Using Apps and IDM Inputs
  • Installing and Managing Apps
  • Refine and Manipulate Inputs
  • GDI Performance Considerations
  • Problem isolation and working with Splunk Cloud support

Duration

2 Days

Objectives

Module 1 – Splunk Cloud

  • Describe Cloud SaaS benefits and features
  • Identify Splunk Cloud administrator managed tasks
  • Explain the differences between Splunk Enterprise on premise and Splunk Enterprise Cloud

Module 2 – User Authentication and Authorization

  • Identify Splunk Cloud authentication options
  • Add Splunk users using native authentication
  • Integrate Splunk with LDAP, Active Directory or SAML
  • Understanding Splunk authorization options

Module 3 – Index Management and Data Retention

  • Understand cloud indexing strategy
  • Create indexes in cloud
  • Manage data retention and archiving
  • Monitor indexing activities

Module 4 – Cloud Ingestion - Using forwarders

  • Review cloud ingestion strategies
  • Understand the role of forwarders in GDI
  • Configure forwarding to Splunk Cloud
  • Monitoring forwarder connectivity
  • Explore optional forwarder settings

Module 5 – Cloud Ingestion - Using API, Scripted and HEC Inputs

  • Understand how data is ingested using API
  • Describe how to use HEC for ingestion
  • Know how to deploy scripted inputs

Module 6 – Cloud Ingestion - Application Based Inputs

  • Understand how inputs are managed using in apps or add-ons
  • Describe how customers may use Splunk Stream app
  • Deploy Cloud inputs for use on an IDM

Module 7 – Installing and Managing Apps

  • Understand how apps and add-ons are vetted and installed in Cloud
  • Create apps to manage and distribute configurations

Module 8 – GDI Performance Considerations

  • Understand how event parsing and processing may impact performance
  • Use Data Preview to validate and address event creation issues
  • Explain how data transformation are defined and invoked

Module 9 – Splunk Cloud Support and Troubleshooting

  • Troubleshooting Splunk deployments
  • Collecting data and use diagnostics or monitoring to investigate
  • Overview of how to collect the relevant data for support to troubleshoot

Prerequisites

To be successful, students should have a solid understanding of the following:

  • Splunk System Administration
  • Splunk Data Administration

 

 

 

Onsite Training

For groups of three or more

Request Quote

Public Training

APAC Singapore - Virtual

AMER Eastern Time - Virtual

AMER Pacific Time - Virtual

EMEA UK Time - Virtual


Don't see a date that works for you?

Request Class

Sitemap
Privacy
Website Terms of Use
Splunk Licensing Terms
Export Control
Modern Slavery Statement
Splunk Patents

© 2005- Splunk Inc. All rights reserved.

Splunk, Splunk>,Turn Data Into Doing, Data-to-Everything, and D2E are trademarks or registered trademarks of Splunk Inc. in the United States and other countries. All other brand names,product names,or trademarks belong to their respective owners.