• ITSI architecture and deployment
• Installing ITSI
• Designing Services – Discovery and best practices
• Implementing services and entities
• Configuring correlation searches and multi KPI alerts
• Managing aggregation policies and anomaly detection
• Troubleshooting and maintenance

• Identify and design ITSI Services and KPI’s
• Understand customer requirements, and translate into an ITSI implementation
• Design and Implement Glass Tables
• Create and Manage Notable Events
• Configure Adaptive Thresholds and Anomaly Detection
• Customize Deep Dive views
• Work with Entities and Dependencies.

Instructor-led lecture with labs. Delivered via virtual classroom or at your site.

• Splunk Fundamentals 1
• Splunk Fundamentals 2
• Splunk Enterprise System Administration
• Splunk Enterprise Data Administration

Module 01:   Introducing ITSI

• Identify ITSI features
• Describe reasons for using ITSI
• Examine the ITSI user interface

Module 02:   Glass Tables

• Describe glass tables
• Use glass tables
• Design glass tables
• Configure glass tables

Module 03:  Managing Notable Events

• Define key notable events terms and their relationships
• Describe examples of multi – KPI Alerts
• Describe the notable events workflow
• Work with notable events

Module 04:  Investigating Issues with Deep Dives

• Describe deep dive concepts and their relationships
• Use default deep dives
• Create and customize new custom deep dives
• Add and configure swim lanes
• Custom views
• Describe effective workflows for troubleshooting

Module 05:  Installing and Configuring ITSI

• List ITSI hardware recommendations
• Describe ITSI deployment options
• Identify ITSI components
• Describe the installation procedure
• Identify data input options for ITSI
• Add custom data to an ITSI deployment

Module 06:  Designing Services

• Given customer requirements, plan an ITSI Implementation
• Identify site entities

Module 07:  Data Audit and Base Searches

• Use a data audit to identify service key performance indicators
• Design base searches

Module 08:  Implementing Services

• Use a service design to implement services in ITSI

Module 09:  Thresholds and Time Policies

• Create KPI’s with static and adaptive thresholds
• Use Time policies to define flexible thresholds

Module 10:  Entities and Dependencies

• Using entities in KPI Searches
• Defining dependencies

Module 11:  Correlation and Multi KPI Searches

• Define new correlation searches
• Define Multi KPI Alerts
• Manage notable event storage

Module 12:  Aggregation Policies

• Create new aggregation policies
• Use smart mode

Module 13:  Anomaly Detection

• Enable anomaly detection
• Work with generated anomaly events

Module 14:  Access Control

• Configure user access control
• Create services level teams

Module 15:  Troubleshooting ITSI

• Backup and restore
• Maintenance mode

Anyone whose role requires them to create complex search queries, advanced data models and reports with Splunk who have limited exposure to regular expressions. Previous attendees have included Consultants, IT Administrators and Business Intelligence/Business Analysts.

Splunk IT Service Intelligence Certified Admin