Trending Courses

Vendors

Skip Navigation Links

Overview

This 13.5-hour course is for experienced Splunk Enterprise administrators new to Splunk Clusters. The course provides the fundamental knowledge of deploying and managing Splunk Enterprise in a clustered environment.

While Splunk Clusters are supported in Windows environments, the class lab environment is running Linux instances only.
img-course-overview.jpg

What You'll Learn

  • Identify factors affecting large-scale Splunk deployments
  • Deploy and configure single- and multi-site indexer clusters
  • Deploy and configure a Splunk search head cluster
  • Deploy apps and configuration bundles in Splunk clusters
  • Manage KV store collections and lookups in Splunk clusters
  • Monitor and identify clustering issues with Monitoring Console
  • Scale Splunk indexer cluster with SmartStore

Who Should Attend

  • Administrators
img-who-should-learn.png

Prerequisites

To be successful, students must have completed these

Splunk Education course(s) or have equivalent working

knowledge:

  • Intro to Splunk
  • Using Fields
  • Introduction to Knowledge Objects
  • Creating Knowledge Objects
  • Creating Field Extractions
  • Splunk Enterprise System Administration
  • Splunk Enterprise Data Administration
  • Troubleshooting Splunk Enterprise

Learning Journey

Coming Soon...

Module 1 – Overview of Large-scale Splunk Deployment 

  • Identify factors that affect large-scale deployment design
  • Describe approaches to scaling Splunk Enterprise
  • Configure Splunk License Manager

Module 2 – Deploying Single-site Indexer Clusters

  • Identify indexer cluster states
  • Define replication factor and search factor
  • Implement a single-site indexer cluster

Module 3 – Deploying Multisite Indexer Clusters

  • Define site replication factor and site search factor
  • Define search affinity
  • Implement a multisite indexer cluster

Module 4 – Updating Indexer Cluster Peer Configurations

  • Distribute configurations and apps across peers

Module 5 – Managing and Monitoring Indexer Clusters 

  • Enable replication for clustered indexes
  • Configure Monitoring Console for indexer cluster environment

 Module 6 – Configuring Indexer Discovery on Forwarders

  • Configure indexer discovery
  • Configure indexer acknowledgment
  • Configure forwarder site failover

Module 7 – Deploying Search Head Clusters

  • Configure a search head cluster
  • Connect clustered and non-clustered indexers

Module 8 – Managing and Monitoring Search Head Clusters 

  • Deploy configuration bundles to search head cluster members
  • Manage captaincy and member addition, removal and upgrades

Module 9 – Using KV Store in a Search Head Cluster

  • Enable KV Store collection replication in a search head cluster
  • Monitor KV Store status with Monitoring Console

3
img-exam-cert

Frequently Asked Questions (FAQs)

  • Why get Splunk certified?

    Splunk certifications validate your expertise in data analytics and your proficiency in using the Splunk platform.

    These certifications demonstrate your ability to leverage Splunk's powerful tools for data collection, analysis, and visualization, making you a valuable asset to organizations seeking to gain actionable insights from their data.

    Splunk-certified professionals are in high demand across various industries, including IT, security, and business analytics.

  • What to expect for the examination?

    Splunk offers a variety of certification exams at different levels, covering various domains and products within the Splunk platform.

    Exams typically consist of multiple-choice and scenario-based questions that assess your knowledge and skills in using Splunk to solve real-world problems.

    Note: Certification requirements and policies may be updated by Splunk from time to time. We apologize for any discrepancies; do get in touch with us if you have any questions.

  • How long is Splunk certification valid for?

    All Splunk certifications are valid for three years from the date of passing the highest-level certification exam.

    To maintain your certification, you will need to recertify before it expires. You have three options for recertification:

    - Pursue a higher-level certification (including any required prerequisite courses), in which case your lower-level certifications would also be renewed on the date of passing the next-level certification exam.

    - Retake a certification exam within the final year of their recertification window to renew their certifications at that level (and any applicable downstream certifications).

    - Complete continuing education courses at any point in the three year recertification window beginning the date of badge issuance.

    Note: Certification requirements and policies may be updated by Splunk from time to time. We apologize for any discrepancies; do get in touch with us if you have any questions.

  • Why take this course with Trainocate?

    Here’s what sets us apart:

    - Global Reach, Localized Accessibility: Benefit from our geographically diverse training hubs in 24 countries (and counting!).

    - Top-Rated Instructors: Our team of subject matter experts (with high average CSAT and MTM scores) are passionate to help you accelerate your digital transformation.

    - Customized Training Solutions: Choose from on-site, virtual classrooms, or self-paced learning to fit your organization and individual needs.

    - Experiential Learning: Dive into interactive training with our curated lesson plans. Participate in hands-on labs, solve real-world challenges, and take on comprehensive assessments.

    - Learn From The Best: With 30+ authorized training partnerships and countless awards from Microsoft, AWS, Google – you're guaranteed learning from the industry's elite.

    - Your Bridge To Success: We provide up-to-date course materials, helpful exam guides, and dedicated support to validate your expertise and elevate your career.

Keep Exploring

Course Curriculum

Course Curriculum

Training Schedule

Training Schedule

Exam & Certification

Exam & Certification

FAQs

Frequently Asked Questions

img-improve-career.jpg

Improve yourself and your career by taking this course.

More Courses By Splunk

Browse All Courses
splk-pusrfs-splunk-power-user-fast-start-training
The Splunk Platform

Splunk Power User Fast Start

Trainocate’s Splunk Power User Fast Start (SPLK-PUSRFS) training teaches data analysis and visualization with Splunk. Earn certification in this hands-on course.
ILT VILT
Course Duration 4 Days
splk-apufs-advanced-power-user-fast-start-training
The Splunk Platform

Advanced Power User Fast Start

Advanced Power User Fast Start
ILT VILT
Course Duration 3 Days
splk-sefs-splunk-search-expert-fast-start-training
The Splunk Platform

Splunk Search Expert Fast Start

Trainocate’s Splunk Search Expert Fast Start (SPLK-SEFS) training teaches advanced Splunk search and query optimization. Earn certification in this hands-on course.
ILT VILT
Course Duration 3 Days
img-get-info.jpg

Ready to Take Your Business from Great to Awesome?

Level-up by partnering with Trainocate. Get in touch today.

Name*
Email*
Phone*
I'm inquiring for
Inquiry Details*

By submitting this form, you consent to Trainocate processing your data to respond to your inquiry and provide you with relevant information about our training programs, including occasional emails with the latest news, exclusive events, and special offers.

You can unsubscribe from our marketing emails at any time. Our data handling practices are in accordance with our Privacy Policy.

Stay Connected. Be the first to Know.

Company

Vendors

Services

Customer Service

© Copyright Trainocate 2026. All rights reserved.