• Identify and design ITSI Services and KPI’s
• Understand customer requirements, and translate into an ITSI implementation
• Design and Implement Glass Tables
• Create and Manage Notable Events
• Configure Adaptive Thresholds and Anomaly Detection
• Customize Deep Dive views
• Work with Entities and Dependencies.

• Overview of ITSI features
• ITSI architecture and deployment
• Installing ITSI
• Designing and implementing services and entities
• Configuring correlation searches and notable events
• Creating deep dive pages
• Creating glass tables
• ITSI troubleshooting

Instructor-led lecture with labs. Delivered via virtual classroom or at your site.

• Splunk Fundamentals 1
• Splunk Fundamentals 2
• Splunk Data Administration
• Splunk System Administration

Module 01:   Introducing ITSI

• Define key service intelligence concepts
• Identify ITSI features
• Explain the role of the common information model in ITSI
• Examine the ITSI user interface

Module 02:   Installing and Configuring ITSI

• List ITSI hardware recommendations
• Describe ITSI deployment options
• Identify ITSI components
• Describe the installation procedure
• Identify data input options for ITSI
• Add custom data to an ITSI deployment

Module 03:  Designing Services

• Given customer requirements, plan an ITSI implementation
• Use a data audit to identify service key performance indicators
• Identify site entities

Module 04:  Implementing Services

• Use a service design to implement services in ITSI
• Create KPIs with static and adaptive thresholds
• Use time policies to define flexible thresholds
• Use anomaly detection

Module 05:  Glass Tables

• Design glass tables to display important service status
• Use the glass table editor to create and edit glass tables
• Use KPIs and ad-hoc searches on glass tables
• Add glass table drilldown options

Module 06:  Notable Events

• Describe notable event workflow
• Configure notable event options
• Define new correlation searches
• Define multi KPI alerts
• Manage notable event storage

Module 07:  Deep Dives

• Customize new deep dive displays
• Add additional swim lanes to deep dives
• Configure swim lane options

Module 08:  Entities

• Entity best practices
• Defining service entities
• Using entities in KPI searches

Module 08:  Troubleshooting ITSI

• Backup and restore
• Upgrading ITSI
• Under the hood

Anyone whose role requires them to create complex search queries, advanced data models and reports with Splunk who have limited exposure to regular expressions. Previous attendees have included Consultants, IT Administrators and Business Intelligence/Business Analysts.