Core Implementation -

Core Implementation

Duration : 5 Days (40 Hours)

Overview

Course Details

Prerequisites

Core Implementation Course Overview:

This expert-level, five-day bootcamp is designed for professionals looking to advance their skills in working with the Splunk core platform effectively and at scale. It focuses on using Professional Services (PS) best-practice techniques to master Splunk in-depth. The course represents a significant step-up in difficulty compared to earlier Splunk training and requires thorough preparation and practice prior to attendance.
In-person or virtual instructor-led training will cover efficient Splunk Enterprise management in large clustered environments, providing a deeper understanding of Splunk’s inner workings.
Participants will tackle practical assessment labs individually, with minimal instructor assistance. These labs simulate complex challenges in distributed customer environments.

Success in the assessed labs demands a masterful understanding of configuration management at scale, troubleshooting, environment discovery, and the ability to ensure Splunk customers’ success under time constraints. This includes engaging with customers collaboratively, clarifying requirements, and planning and implementing solutions with a focus on instructional and collaborative PS mindset.

Intended Audience:

Splunk Administrators
Splunk Power Users
System Administrators
Security Analysts
IT Managers
Data Analysts
Technical Support Staff
IT Architects
Splunk Consultants
Splunk Certification Candidates

Learning Objectives of Core Implementation:

Splunk Architecture
Monitoring Console
Configuration Management
Authentication, Authorization, & LDAP Integration
Collecting and Forwarding Data
Indexing and Searching
Clustering Indexers
Clustering Search Heads

Module 1: Deploying Splunk

Introduction to Splunk Validated Architectures

Module 2: Monitoring Console

Choosing the Best Instance for Monitoring Console Configuration
Configuring the Monitoring Console for Single or Distributed Environments
Understanding How the Monitoring Console Uses Server Roles and Groups
Health Checks and Their Execution

Module 4: Access and Roles

Managing Deployment Server at Scale
Identifying Authentication Methods
Explaining LDAP Concepts and Configuration
Discussing SAML and SSO Options
Defining Roles and Their Role in Data Protection

Module 5: Data Collection

Examining Splunk to Splunk (S2S) Communication and Data Transfer
Describing Types and Configuration of Data Inputs
Troubleshooting Data Inputs

Module 6: Indexing

Reviewing Indexing Artifacts and Locations
Discussing Event Processing and Data Pipelines
Understanding Text Parsing and Indexing
Examining Data Retention Controls

Module 7: Search

Exploring the Inner Workings of a Search
Utilizing Search Job Inspection
Maximizing Search Efficiency with Different Search Types
Understanding Subsearches and Their Functionality
Optimizing Sample Searches

Module 8: Index Clustering

Providing an Architecture Overview
Describing Deployment and Component Configuration
Reviewing Upgrade Strategy
Discussing Data Buckets and Lifecycle
Examining Failure Modes and Recovery Processes
Introducing Multi-Site Clustering
Explaining Migration Procedures

Core Implementation Course Prerequisites:

To be eligible for registration, candidates must possess all of the following certifications:

Splunk Core Certified Power User
Splunk Core Certified Advanced Power User
Splunk Enterprise Certified Admin
Splunk Enterprise Certified Architect
Prerequisite Courses:
To qualify for registration and be successful in this highly technically
complex course, candidates must have completed —
▪ Core Consultant Labs
Experience in attending a PS shadowing engagement is not required,
but is highly recommended, as is extensive practice in a lab-based
environment
*Completion of the following courses are considered an acceptable
substitute for the Splunk Core Certified Advanced Power User badge:
o Using Fields
o Working with Time
o Comparing Values
o Result Modification
o Leveraging Lookups and Subsearches
o Correlation Analysis
o Search Under the Hood
o Multivalue Fields
o Search Optimization
o Creating Knowledge Objects
o Creating Field Extractions
o Enriching Data with Lookups
o Data Models
o Introduction to Dashboards
o Dynamic Dashboards
Prerequisite Linux Skills
Attendees must be comfortable and competent in core Linux skills
such as:
▪ File & permission management
▪ Service configuration
▪ Installation best-practices
▪ ssh & scp

Discover the perfect fit for your learning journey

Choose Learning Modality

Live Online

Convenience
Cost-effective
Self-paced learning
Scalability

Classroom

Interaction and collaboration
Networking opportunities
Real-time feedback
Personal attention

Onsite

Familiar environment
Confidentiality
Team building
Immediate application

Training Exclusives

This course comes with following benefits:

Practice Labs.
Get Trained by Certified Trainers.
Access to the recordings of your class sessions for 90 days.
Digital courseware
Experience 24*7 learner support.

Request Free Demo

Got more questions? We’re all ears and ready to assist!