trainocate-splunk-training-b
Home > Vendors > splunk > splk-tshootent8.2

SPLK-TSHOOTENT8.2 - Troubleshooting Splunk Enterprise 8.2

Overview

Duration: 2.0 days

This 2-virtual day certification & training course is designed for Splunk administrators. It covers topics and techniques for troubleshooting a standard Splunk distributed deployment using the tools available on Splunk Enterprise.

This lab-oriented class is designed to help you gain troubleshooting experience before attending more advanced courses. You will debug a distributed Splunk Enterprise environment using the live system.

This course does not cover the issues surrounding Splunk Cloud, Splunk Clusters, or Splunk premium apps.

Objectives

Please refer to course overview

Audience

_

Content

Module 1 - Splunk Troubleshooting Methods and Tools

  • Describe the Splunk troubleshooting approach
  • List Splunk diagnostic resources and tools
  • Create and splunk a diag
  • Use RapidDiag

Module 2 - Indexing Problems

  • Discover Splunk deployment topology and its server roles
  • Identify where to check the Index-time pipeline status
  • Use the metrics.log to clarify the index-time problem

Module 3 - Input Configuration Problems

  • Data input issues
  • Troubleshooting inputs with Monitoring Console

Module 4 - Deployment Problems

  • Deployment server issues
  • Forwarding and receiving issues

Module 5 - License, Upgrade, and User Management Problems

  • Installation issues
  • Upgrade considerations
  • Splunk licensing issues
  • Splunk roles and user management issues

Module 6 - Search Management Problems

  • Troubleshoot distributed search issues
  • Identify job scheduling issues
  • Learn to diagnose crashing problems
  • Describe how to prioritize resources for critical Splunk processes

Module 7 - User Search Problems

  • Identify the types of search problems
  • Isolate and troubleshoot search problems

Prerequisites

To be successful, students should have a solid understanding of the following courses:

  • Splunk Fundamentals 1
  • Splunk Fundamentals 2

OR the following single-subject courses:

  • What Is Splunk?
  • Intro to Splunk
  • Using Fields
  • Scheduling Reports and Alerts
  • Visualizations
  • Leveraging Lookups and Subsearches
  • Search Under the Hood
  • Introduction to Knowledge Objects
  • Creating Knowledge Objects
  • Enriching Data with Lookups
  • Data Models
  • Introduction to Dashboards

Students should also have completed the following courses:

  • Splunk System Administration
  • Splunk Data Administration

Certification

Schedule




Enquire Now
 
 
 
 
By clicking "Submit", I agree to the Terms Of Use and Privacy Policy