Splunk 2022 - Beginner to Architect

Udemy

Beginner

Online

₹ 1199

particular

details

                                    Medium of instructions
                                    English

                                    Mode of learning
                                    Self study

                                    Mode of Delivery
                                    Video and Text Based

Getting Started

Introduction to the Course
Download Links - Tutorial Data, Samples and Logs

Introduction to Splunk & Setting Up Labs

Introduction to Splunk
Installation Methods for Splunk
Document - MSSP
Creating Splunk Account
Launching Infrastructure for Splunk
Installing Splunk in Linux
Document - Splunk Install Commands for Linux
Installing Splunk in Windows
Introduction to Docker Containers - New
Installation Methods for Docker
Installing Docker in Linux
Document - Linux Installation Commands
Installing Docker Desktop
Document - Docker Desktop
Deploying Splunk Docker Container
Document - Deploying Splunk Container Commands
Notes - Domain 1

Getting started with Splunk

Importing Data in Splunk
Sample Tutorial Logs
Parsing Authentication Logs
Security Use-Case - Finding Attack Vectors
Basics of Search
Splunk Search Assistant
Splunk Reports
Splunk Report - Email Clarification (Followup)
Understanding Add-Ons and Apps
Installing Splunk Add-On for AWS
Overview of Dashboards and Panels
Building Dashboard Inputs - Time Range Picker
Building Dashboard Inputs - Text Box
Building Dashboard Inputs - Drop down
Notes - Domain 2

Splunk Architecture

Directory Structure of Splunk
Splunk Configuration Directories
Splunk Configuration Precedence
Splunk Configuration Precedence - Apps and Locals
Introduction to Indexes
Document - Reference Commands
Bucket Lifecycle
Warm to Cold Bucket Migration
Archiving Data to Frozen Path
Thawing Process
Splunk Workflow Actions
Notes - Domain 3

Forwarder & User Management

Overview of Universal Forwarders
Installing Universal Forwarder in Linux
Installation Manual - Splunk Universal Forwarder
Challenges in Forwarder Management
Introduction to Deployment Server
Document - Enable Deployment Server
ServerClass and Deployment Apps
Document - Connecting to Deployment Server
Pushing Custom Add-On via Deployment Server
Document - Commands
Notes - Domain 4

Post Installation Activities

Understanding Regular Expressions
Regex - Exercise
Parsing Web Server Logs & Named Group Expression
Sample - Web Server Logs
Importance of Source Types
Interactive Field Extractor (IFX)
props.conf and transforms.conf
Sample Log - MySQL Error Logs
Splunk Event Types
Tags
Splunk Events Types Priority and Coloring Scheme
Splunk Lookups
Splunk Alerts
Notes - Domain 5

Security Primer

Access Control
Creating Custom Roles & Capabilities
Notes - Domain 6

Distributed Splunk Architecture

Overview of Distributed Splunk Architecture
Understanding License Master
Implementing License Master
License Pools
Indexer
Masking Sensitive Data at Index Time
Search Head
Splunk Monitoring Console
Notes - Domain 7

Indexer Clustering

Overview of Indexer Clustering
Infrastructure for Indexer Cluster
Configuring Master Indexer
Configuring Peer Indexers
Testing Replication Capabilities
Testing Failover Capabilities
Configuration Bundles of Master Indexers
Document - indexes.conf
Forwarding Logs to Indexer Cluster
Document - Referenced Commands
Implementing Indexer Discovery
Indexer Discovery - Document
Notes - Domain 8

Search Head Clustering

Overview of Search Head Clustering
Infrastructure for Search Head Cluster
Setting Up Search Head Clustering
Document - Search Head Cluster Setup
Validating Search Head Replication
Pushing Artifacts through Deployer
Document - Pushing Bundle Setup
Integration - Search Head Cluster to Indexer Cluster
SH to IDX Cluster Document
Notes - Domain 9

Advanced Splunk Concepts

Using Btool for Troubleshooting
Overview of Data Models
Creating Data Model - Practical
Splunk Support Programs
Notes - Domain 10

Popular Courses

Popular Platforms

Popular Searches

Splunk 2022 - Beginner to Architect

Beginner

Online

₹ 1199

Quick Facts

Course and certificate fees

Fees information

certificate availability

certificate providing authority

The syllabus

Getting Started

Introduction to Splunk & Setting Up Labs

Getting started with Splunk

Splunk Architecture

Forwarder & User Management

Post Installation Activities

Security Primer

Distributed Splunk Architecture

Indexer Clustering

Search Head Clustering

Advanced Splunk Concepts

Instructors

Articles

Popular Articles

Latest Articles

Similar Courses

Courses of your Interest

More Courses by Udemy

Trending Courses

Popular Courses

Popular Platforms

Learn more about the Courses

Thank You!

Download the Careers360 App on your Android phone