Architecting Splunk Enterprise Deployments (ASED) – Outline

Outline detalhado do curso

Module 1 – Splunk Deployment Planning

  • Define the responsibilities of a Splunk Architect
  • Introduce the Splunk deployment planning process and tools
  • Identify the information that is needed for deployment decisions
  • Identify use cases
  • Provide lists and resources to aid in collecting requirements
  • Review the network topology for Buttercup Games

Module 2 – Index Design

  • Define index implementation
  • Design indexes
  • Estimate storage requirements for indexes
  • Identify relevant apps and document impact on inputs and indexes

Module 3 – Resource Planning

  • Determine sizing based on Splunk usage
  • Define reference server requirements for Indexers, Search heads, and other Splunk
  • Describe deployment options such as virtualization and cloud
  • Describe the impact of acceleration and apps on resource sizing

Module 4 - Clustering Overview

  • Review indexer clustering, including single-site and multi-site clusters
  • Define clustering requirements, best practice, and SmartStore
  • Review search head clustering
  • Defined search head clustering requirements and best practices

Module 5 - Forwarder and Deployment Best Practices

  • Review forwarder types
  • Manage forwarder installation in an enterprise environment using Deployment Server, Cluster Manager, and SHC Deployer

Module 6 - Integration

  • Describe and identify integration methods

Module 7 – Performance Monitoring and Tuning

  • Use the Monitoring Console (MC) to track the performance of your test environment before going into production
  • Identify options to optimize the production environment

Module 8 – Use Cases

  • Provide example architecture topologies
  • Discuss different architecture options based on use case