Course structure
Module 1 – Large-scale Splunk Deployment Overview
- Factors that affecting deployment design
- How Splunk Enterprise can scale
- Splunk License Master
Module 2 – Single-site Indexer Cluster
- How Splunk Single-Site Indexer Clusters Work
- Indexer Cluster Components and Terms
- Splunk Single-Site Indexer Cluster Configuration
- Splunk indexer Cluster Log Channels
Module 3 – Multisite Indexer Cluster
- How Splunk Multi-site Indexer Clusters Work
- Multi-Site Indexer Cluster Terms
- Multi-Site Indexer Cluster Configurations
- Optional Multi-Site Indexer Cluster Configurations
Module 4 – Indexer Cluster Management and Administration
- Peer offline and decommission
- Master app bundles
- Indexer Cluster Storage Utilization Options
- Site Mapping
- Monitoring Console for Indexer Cluster Environment
Module 5 – Forwarder Management
- Indexer discovery
- Optional Indexer Discovery Configurations
- Volume-Based Forwarder Load Balancing
Module 6 – Search Head Cluster
- Splunk Search Head Cluster Overview
- Search Head Cluster Configuration
Module 7 – Search Head Cluster Management and Administration
- Search Head Cluster Deployer
- Captaincy Transfer
- Search Head Member Addition and Decommissioning
- Monitoring Console for Search Head Cluster
Module 8 – KV Store Collection and Lookup Management
- KV Store Collection in Splunk Clusters
- KV Store Monitoring with Monitoring Console
Module 9 – SmartStore Implementation
- SmartStore Architecture Overview
- Deploy and manage SmartStore