Module 1 – Introduction to SmartStore

• Benefits of SmartStore
• SmartStore requirements and restrictions
• Indexing in SmartStore
• Searching in SmartStore

Module 2 – Standalone SmartStore Implementation

• Enabling SmartStore indexes
• Bootstrapping SmartStore indexes
• Validating the implementation

Module 3 – SmartStore in Indexer Cluster

• Implementation differences between deployments
• SmartStore in an indexer cluster
• SmartStore migration in indexer clusters

Module 4 – Monitoring and Managing SmartStore

• Monitoring SmartStore activities
• Cache manager settings
• Optimizing eviction policies

Implementing Splunk SmartStore Course Prerequisites:

Required:

• Splunk Enterprise System Administration
• Splunk Enterprise Data Administration

Strongly Recommended:

• Troubleshooting Splunk Enterprise
• Working knowledge of:
  • Linux OS commands
  • Editing files with vi or nano
  • Splunk index lifecycle and bucket transitions
  • Splunk Indexer cluster concept