Troubleshooting Splunk – 28th-29th March
16724
product-template-default,single,single-product,postid-16724,woocommerce,woocommerce-page,ajax_fade,page_not_loaded,,qode-theme-ver-1.5,wpb-js-composer js-comp-ver-4.3.5,vc_responsive

Troubleshooting Splunk - 28th-29th March

Troubleshooting Splunk – 28th-29th March

$1,440.00

Units: 2

Duration: 9 hours

Time: 9 am – 1:30 pm AEST (GMT +10)

2-virtual day course is designed for Splunk administrators. It covers topics and techniques for troubleshooting a standard Splunk distributed deployment using the tools available on Splunk Enterprise

Course Topics
    • Splunk Support Model

 

    • Splunk Troubleshooting Methods and Tools

 

    • Clarifying the Problem

 

    • Installation, Licensing, and Crash Problems

 

    • UI and Search Problems

 

    • Configuration Problems

 

    • Deployment Problems

 

    User Management Problems
Class Format

Instructor-led lecture with labs. Delivered via virtual classroom or at your site.

 

Course Prerequisites

Fundamentals 1
Fundamentals 2
Splunk System Administration
Splunk Data Administration

Course Objectives

Module 1 – Splunk Support Model
Splunk support resources

Module 2 – Splunk Troubleshooting Methods and Tools
Splunk troubleshooting methodology
Splunk diagnostic tools

Module 3 – Clarifying the problem
Splunk Topology
Index-time pipeline
Search-time pipeline

Module 4 – Installation, Licensing and Crash problems
Installation issues
License issues
Crash issues

Module 5 – Configuration problems
Input issues
Configuration Precedence

Module 6 – UI and Search problems
Search issues
Dashboard issues

Module 7 – Deployment problems
Forwarding issues
Distributed search issues
Deployment server issues

Module 8 – User Management problems
Splunk users and role capabilities
Directory integration issues

Category: Tag:

This 2-virtual day course is designed for Splunk administrators. It covers topics and techniques for troubleshooting a standard Splunk distributed deployment using the tools available on Splunk Enterprise.

It is a lab-oriented class designed to help you gain troubleshooting experience before attending more advanced courses. You will debug a distributed Splunk Enterprise environment using the live system and simulated case logs.

This course does not cover the issues surrounding Splunk Cloud, Splunk Clusters, or Splunk premium apps.