SPLK-DSP - Implementing Splunk Data Stream Processor (DSP) 1.2

This 4 day certification & training course is designed for the experienced Splunk administrators who are new to a Splunk DSP. This hands-on class provides the fundamentals of deploying a Splunk DSP cluster and designing pipelines for core use cases. It covers installation, source and sink configurations, pipeline design and backup, and monitoring a DSP environment.

Duration: 4.0 days

Enquire Now

Start learning today!

Click Hereto customize your Training

Objectives

  • Introduction to Splunk DSP
  • Deploying a DSP cluster
  • Configuring SplunkSources and Sinks
  • Building Pipelines - Basics
  • Building Pipelines - Intermediate
  • Building Pipelines - Advanced
  • Working with 3rd-party Sources and Sinks
  • Working with Metrics and Traces
  • Streaming ML Plugin
  • Monitoring DSP Environment

Content

Module 1 - Introduction to DSP

  • Review Splunk deployment options and challenges
  • Describe the purpose and value of Splunk DSP
  • Define DSP concepts and terminologies

Module 2 - Deploying a DSP Cluster

  • List DSP core components and system requirements
  • Describe installation options and steps
  • Check DSP service status
  • Learn to navigate in DSP UI
  • Use scloud

Module 3 - Prepping Sources and Sinks

  • Ingest data with DSP REST API service
  • Configure DSP source connections for Splunk data
  • Configure DSP sink connections for Splunk indexers
  • Create Splunk-to Splunk pass-through pipelines

Module 4 - Building Pipelines - Basic

  • Describe the basic elements of a DSP pipeline
  • Create data pipelines with the DSP canvas and SPL2
  • List DSP pipeline commands
  • Use scalar functions to convert data types and schema
  • Filter and route data to multiple sinks

Module 5 - Building Pipelines - Intermediate

  • Manipulate pipeline options:
    • Extract
    • Transform
    • Obfuscate
    • Reduce payload

Module 6 - Building Pipelines - Advanced

  • Review Splunk lookups
  • Enrich data with DSP lookups
  • Populate KV Store lookups from DSP streams
  • Manipulate pipeline options
    • Aggregate
    • Conditional trigger
  • Introduce the DSP Plugins SDK

Module 7 - Working with 3rd party Sources and Sinks

  • Read from and write data to pub-sub systems like Kafka
  • List sources supported with the collect service
  • Transform data from Kafka and normalize
  • Write to S3

Module 8 - Working with Metrics and Traces

  • Onboard observability data (log, metric, and trace) into DSP
  • Transform metric data for Splunk indexers and Splunk SignalFx
  • Transform trace data for Splunk Infrastructure Monitoring
  • Route metric data to Splunk indexers and SignalFx
  • Send trace data to Splunk SignalFx

Module 9 - Streaming ML Plugin

  • Describe the advantage of using DSP Streaming ML plugin
  • Enable the Streaming ML plugin in DSP
  • List the DSP Streaming ML functions
  • Practice DSP ML algorithms with the ML data gen

Module 10 - Monitoring DSP Environment

  • Back up DSP pipelines
  • Monitor DSP environment
  • Describe steps to isolate DSP service issues
  • Scale DSP
  • Replace DSP master node
  • Upgrade DSP cluster

Audience

Prerequisites

Required:

  • Splunk Enterprise System Administration
  • Splunk Enterprise Data Administration

Recommended:

  • Architecting Splunk Enterprise Deployments

Nice to have:

  • Working knowledge of open source projects:
    • Apache Kafka (user level)
    • Apache Flink (user level)
    • Kubernetes (admin level)

Certification

product-certification

Course Benefits

product-benefits
  • Career growth
  • Broad Career opportunities
  • Worldwide recognition from leaders
  • Up-to Date technical skills
  • Popular Certification Badges

Splunk Popular Courses

splk-sefs

This "Fast Start" course covers over 60 commands and functions and prepares students to be search experts.

splk-iiss

This course prepares security practitioners to use SOAR to respond to security incidents.

splk-dyd

This course focuses on creating inputs, chain searches, event annotations, and improving dashboard performance.

splk-introdyd

This course focuses on dashboard creation, including prototyping, the dashboard definition, layouts types, adding visualizations, and dynamic coloring.
Enquire Now
DDr7Vw
By clicking "Submit", I agree to the Terms Of Use and Privacy Policy