architecture of global Splunk environments
| Participant | Splunk administrators responsible for the operation of global Splunk environments |
|---|---|
| Duration | 8 hours |
| Implementation form |
|
| Technical requirements | Splunk test server (e.g. AWS) with artificial, automatically generated data, to which participants are granted access for a certain time after logging in |
| Prior knowledge | system administration, cluster administrator |
| Procedure |
|
architecture of global Splunk environments
Participant:
Splunk administrators responsible for the operation of global Splunk environments
Duration:
8 hours
Implementation Form:
- Classroom training
- Alternatively virtual training with trainer
Technical requirement:
Splunk test server (e.g. AWS) with artificial, automatically generated data, to which participants are granted access for a certain time after logging in
Prior Knowledge:
system administration, cluster administrator
Procedure:
- general challenges of global environments
- data privacy
- What data is stored where?
- license master
- global index cluster
- global search head cluster
- time zones
- bandwidth limits and latency
- local buffering
- deployment server hierarchy