FACTSHEET. Splunk 6 Zertifizierungs-Programm

Transkript

1 FACTSHEET Splunk 6 Zertifizierungs-Programm

2 Inhalt Überblick Splunk Zertifizierungen 3 Using Splunk 6 4 Searching & Reporting with Splunk 6 5 Creating Splunk 6 Knowledge Objects 7 Advanced Searching & Reporting with Splunk 6 8 Splunk 6 Administration 10 Developing Apps with Splunk 6 11 Architecting and Deploying Splunk 6 13

3 Splunk 6 Zertifizierungen Zertifizieren Sie Ihre Mitarbeiter! Sie planen, Splunk in Ihrem Unternehmen einzuführen oder arbeiten bereits damit? LC Systems bietet Ihnen als Splunk-Zertifizierungspartner für jede Job-Rolle das passende Zertifizierungstraining in Deutsch mit anschliessender Zertifizierung an. Übersicht Splunk 6 Trainings LC Systems Trainingsarten Sie haben die Möglichkeit, zwischen den folgenden Trainingsarten zu wählen: Sie nehmen bequem von Ihrem Arbeitsplatz aus an unseren Trainings teil. Unser interaktives und multimediales Programm unterstützt Sie im Lernerfolg und Sie sparen so die Reisezeit- und kosten. Classroom Training (onsite oder webbased) Wenn Sie mehrere Mitarbeiter Ihrer Firma zum gleichen Zeitpunkt zertifizieren wollen, bieten wir Ihnen das Training exklusiv für Ihre Firma in Ihren Räumlichkeiten oder als webbased Training an. Die maximale Teilnehmerzahl beschränkt sich auf 12 Personen pro Training. Die Termine werden mit Ihnen abgestimmt. Splunk Zertifizierungen Trainingssprache» Die Unterrichtssprache ist Deutsch» Die Software ist in Englisch» Die Kursunterlagen sind in Englisch, ebenso die anschliessende Zertifizierung Termine & Anmeldung webbasiertes Trainings Die aktuellen Trainingstermine finden Sie unter Unter diesem Link können Sie sich direkt für das gewünschte Training registrieren. Durchführung & Anmeldeschluss webbasierte Trainings Die Trainings werden ab 5 Teilnehmern garantiert durchgeführt. Der Anmeldeschluss ist jeweils 14 Tage vor Kursbeginn. * Zertifizierung wird durch Splunk selbst durchgeführt Wir beraten Sie gerne - kontaktieren Sie uns! 3

4 Using Splunk 6 Trainings-Inhalt» Introducing Buttercup Games» Introduction to Splunk s interface» Using pivot» Searching and saving results» Using fields» Creating reports and visualizations» Working with Dashboards Trainings-Module Modul 1 Introducing Buttercup Games» Understand the lab environment» Understand the personas referenced in the course Modul 2 Introduction to Splunk s User Interface» Understand the uses of Splunk» Define Splunk Apps» Learn basic navigation in Splunk Zielgruppe» Power User» Administrator» Architect» App Developer Modul 3 Using Pivot» Describe Pivot» Understand the relationship between data models and pivot» Select a data model object» Create a pivot report» Save pivot report as a dashboard Voraussetzung» What is Splunk (e-learning) Dauer / Zeiten» Webbased 5 Stunden Uhr» Onsite 6 Stunden / Uhr Kosten Pro Teilnehmer EUR (exkl. MwSt.) Classroom Training webbased Pro Training EUR (exkl. MwSt.) Classroom Training onsite Pro Training EUR (exkl. MwSt.) Modul 4 Searching» Run basic searches» Set the time range of a search» Identify the contents of search results» Refine searches» Use the timeline» Work with events» Control a search job» Save search results Modul 5 Using Fields in Searches» Understand fields» Use fields in searches» Use the fields sidebar Modul 6 Creating Reports and Visualizations» Save a search as a report» Edit reports» Create reports that include visualizations such as charts and tables» Add reports to a dashboard» Create an instant pivot from a search Modul 7 Working with Dashboards» Create a dashboard» Add a reports to a dashboard» Add a pivot report to a dashboard» Edit a dashboard 4

5 Searching and Reporting with Splunk 6 Trainings-Inhalt» Introducing Buttercup Games» Search Fundamentals» Reporting Commands» Analyzing, Calculating and Formatting Results» Correlating Events» Enriching Data with Lookups Zielgruppe» Power User» Administrator» Architect» App Developer Voraussetzung» Using Splunk Dauer / Zeiten» Webbased Total 10 Stunden an zwei aufeinander jeweils Uhr» Onsite Total 12 Stunden an zwei aufeinander jeweils / Uhr Kosten Pro Teilnehmer EUR (exkl. MwSt.) Classroom Training webbased Pro Training EUR (exkl. MwSt.) Classroom Training onsite Pro Training EUR (exkl. MwSt.) Trainings-Module Modul 1 Introducing Buttercup Games» Review Buttercup Games Company» Become familiar with the sourcetypes used during the course Modul 2 Search Fundamentals» Review basic search commands and general search practices» Examine the anatomy of a search» Use the following commands to perform searches: - fields - table - rename - rex & erex - multikv Modul 3 Reporting Commands, Part 1» Use the following commands and their functions: - top - rare - stats - addcoltotals - addtotals Modul 4 Reporting Commands, Part 2» Explore the available visualizations» Create a basic chart» Split values into multiple series» Create a timechart» Chart multiple values on the same timeline» Format charts» Explain when to use each type of reporting command Modul 5 Analyzing, Calculating, and Formatting Results» Using the eval command: - Perform calculations - Convert values - Round values - Format values - Use conditional statements» Further filter calculated results 5

6 Modul 6 Correlating Events» Identify transactions» Group event using fields» Group events using fields and time» Search with transactions» Report on transactions» Determine when to use transactions vs. Stats Modul 7 Enriching Data with Lookups» Describe lookups» Examine a lookup file example» Create a lookup» Define a lookup» Configure an automatic lookup» Use the lookup in searches and reports 6

7 Creating Splunk 6 Knowledge Objects Trainings-Inhalt» Fields (Field aliases, field extractions, calculated fields, source type renaming)» Tags and Event Types» Workflow Actions» Alerts» Macros» Data Models Zielgruppe» Power User» Administrator» Architect» App Developer Voraussetzungen» Using Splunk» Searching and Reporting with Splunk Dauer / Zeiten» Webbased 7 Stunden Uhr» Onsite 7 Stunden / Uhr Kosten Pro Teilnehmer EUR (exkl. MwSt.) Classroom Training webbased Pro Training EUR (exkl. MwSt.) Classroom Training onsite Pro Training EUR (exkl. MwSt.) Trainings-Module Modul 1 - Introduction» Overview of Buttercup Games Inc.» Lab Environment Modul 2 Creating Field Aliases and Calculated Fields» Define naming conventions» Create and use field aliases» Create and use calculated fields Modul 3 Creating Field Extractions» Perform field extractions using Field Extractor Modul 4 Creating Tags and Event Types» Create and use tags» Describe event types and their uses» Create an event type Modul 5 Creating Workflow Actions» Describe the function of a workflow action» Create a GET workflow action» Create a POST workflow action» Create a Search workflow action» Use special parameters Modul 6 Creating and Managing Alerts» Describe alerts» Create alerts» View fired alerts Modul 7 Creating and Using Macros» Describe macros» Manage macros» Create and use a basic macro» Define arguments and variables for a macro» Add and use arguments with a macro Modul 8 Identifying Data Model Objects» Describe the relationship between data models and pivot» Identify data models» Identify object attributes Modul 9 Creating Data Models and Testing with Pivot» Create a data model» Use a data model in pivot 7

8 Advanced Searching and Reporting with Splunk 6 Trainings-Inhalt» Beyond Search Fundamentals» Using Sub-searches» Using Advanced Statistics» Manipulating & Filtering Data» Using Advanced Charting» Sorting, Searching, and Reformatting Time» Using Advanced Transactions» Using Advanced Lookups» Using DB Connect Zielgruppe» Power User» Architect» App Developer Voraussetzungen» What is Splunk (e-learning)» Using Splunk» Searching and Reporting with Splunk» Creating Splunk Knowledge Objects» Dringend empfohlen:» 6 Monate Erfahrung mit der Splunk Suchsprache Dauer / Zeiten» Webbased Total 14 Stunden an zwei aufeinander jeweils / Uhr» Onsite Total 14 Stunden an zwei aufeinander folgenden Tagen jeweils / Uhr Kosten Pro Teilnehmer EUR (exkl. MwSt.) Classroom Training webbased Pro Training EUR (exkl. MwSt.) Classroom Training onsite Pro Training EUR (exkl. MwSt.) Trainings-Module Modul 1 - Beyond Search Fundamentals» Use the proper case in searches» Describe Splunk s search process» Use the search inspector to view search performance» Use the search inspector to troubleshoot searches Modul 2 - Using Sub-Searches» Use sub-searches to correlate data by finding events that:» Have matching values for a common field in the results of a sub-search» Do not have matching values for a common field in the results of a sub-search» Have matching values for a field with a different name in the results of a sub-search Modul 3 Using Advanced Statistics» Use the appendpipe command» Use statistical functions such as min, max, mean, median, and standard deviation» Use the streamstats and eventstats commands Modul 4 Using Data Manipulation, and Filtering» Use the following commands and functions:» bucket» where: like, isnull» eval: strftime, upper, case, replace Modul 5 - Using Advanced Charting» Use the following commands and functions:» chart and timechart» addtotals» append and appendcols» xyseries Modul 6 - Sorting, Searching and Reformatting Time» Search for events using custom time ranges» Search for events within a window of time» Display and use using relative dates» Use custom time ranges in multiple sub-searches Modul 7 - Using Advanced Transactions» Find events logged before a particular event occurs» Find events logged after a particular event occurs» Compare complete transactions» Analyze transactions 8

9 Modul 8 - Using Advanced Lookups» Include events based on values in a lookup table» Exclude events based on values in a lookup table» Build a baseline lookup table and reference the baseline values in alerts Modul 9 - Using DB Connect» Use DB connect to explore configured SQL database schema» Use SQL to query configured SQL databases 9

10 Splunk 6 Administration Trainings-Inhalt» Installation» License management» Getting data in» Managing Splunk apps» Splunk configuration files» Universal forwarder and forwarder management» Data inputs in detail» Index administration, maintenance and optimization» Users, roles, and authentication» Event Parsing with data preview» Manipulating raw data» Field extraction» Distributed search» Search performance tuning» Introduction to large-scale Splunk deployment» Monitoring and troubleshooting Zielgruppe» Administrator» Architect Voraussetzungen» Using Splunk» Searching and Reporting with Splunk (dringend empfohlen) Trainings-Module Building a Simple Splunk Environment» Modul 1 - Splunk Installation» Modul 2 - License Management» Modul 3 - Getting Data in» Modul 4 - Managing Apps Building a Basic Production Environment» Modul 5 - Splunk Configuration Files» Modul 6 - Universal Forwarder» Modul 7 - Forwarder Management Getting Data In» Modul 8 - Monitor Inputs» Modul 9 - Network Inputs» Modul 10 - Scripted and Modular Inputs» Modul 11 - Windows Inputs» Modul 12 - Fine-tuning Inputs Managing Indexes and Users» Modul 13 - Splunk Indexes» Modul 14 - Index Maintenance and Optimization» Modul 15 - Users, Roles, and Authentication Parsing» Modul 16 - Parsing Phase and Data Preview» Modul 17 - Manipulating Raw Data» Modul 18 - Field Extraction Dauer / Zeiten» Webbased Total 20 Stunden an vier aufeinander jeweils Uhr» Onsite Total 24 Stunden an vier aufeinander jeweils / Uhr Scaling Searches and Monitoring» Modul 19 - Distributed Search» Modul 20 - Search Performance Tuning» Modul 21 - Implementation issues in large-scale deployment» Modul 22 - Distributed Management Console Kosten Pro Teilnehmer EUR (exkl. MwSt.) Classroom Training webbased Pro Training EUR (exkl. MwSt.) Classroom Training onsite Pro Training EUR (exkl. MwSt.) 10

11 Developing Apps with Splunk 6 Trainings-Inhalt» Introduction to Apps» Creating an App» Managing Configurations» Using Simple XML» Creating Forms» Splunk Web Framework» Splunk REST API» Navigation & Branding» Packaging Apps Zielgruppe» Architect» App Developer Voraussetzungen» Using Splunk» Searching and Reporting with Splunk» Creating Splunk Knowledge Objects Dauer / Zeiten» Webbased Total 10 Stunden an zwei aufeinander jeweils Uhr» Onsite Total 12 Stunden an zwei aufeinander jeweils / Uhr Trainings-Module Modul 1 Introduction to Apps» Describe what is a Splunk app» Define what is a view» Explain what are knowledge objects» Identify default apps Modul 2 Creating an App» Describe three types of Splunk apps» Create an app with app builder» Describe the two app templates» Describe how to isolate data Modul 3 Adding Configurations» Describe how configuration files relate to apps» Explain the elements of config files» Explain how to route data to an app» Change default search time range Modul 4 Using Simple XML» Define the simple XML syntax» Name three types of dashboard panels» Identify six simple XML panel objects» Add custom features using simple XML Modul 5 Creating Forms» Name two types of forms» Identify six types of form inputs» Describe how tokens work» Create cascading dropdown menus» Explain how dynamic drilldowns work Kosten Pro Teilnehmer EUR (exkl. MwSt.) Classroom Training webbased Pro Training EUR (exkl. MwSt.) Classroom Training onsite Pro Training EUR (exkl. MwSt.) Modul 6 Splunk Web Framework» Describe the web framework architecture» Convert simple XML to HTML & JavaScript» Use custom stylesheets and JavaScript in an app» Add a custom visualization Modul 7 Splunk REST API» Describe how Splunk s REST API works» Define API endpoints» Identify current Splunk SDKs 11

12 Modul 8 Navigation & Branding» Create navigation for an app» Assign an app icon» Identify locations for graphic files Modul 9 Packaging Apps» Define the app directory structure» Prepare an app for packaging and distribution» Package an app 12

13 Architecting and Deploying Splunk 6 Trainings-Inhalt» Deployment planning» Infrastructure planning» Data collection» Data comprehension» Search considerations» Development tools and external integration concepts» Operations and management Zielgruppe» Architect Voraussetzungen» Using Splunk» Splunk Administration» Dringend empfohlen:» Searching and Reporting with Splunk» Creating Splunk Knowledge Objects» Developing Apps with Splunk Dauer / Zeiten» Webbased Total 10 Stunden an zwei aufeinander jeweils Uhr» Onsite Total 12 Stunden an zwei aufeinander jeweils / Uhr Kosten Pro Teilnehmer EUR (exkl. MwSt.) Classroom Training webbased Pro Training EUR (exkl. MwSt.) Classroom Training onsite Pro Training EUR (exkl. MwSt.) Trainings-Module Modul 1 - Introduction» Overview of the Splunk deployment planning, implementation process and associated tools» Understand computer technology components of a Splunk deployment Modul 2 - Planning» Define common customer goals and use cases» Gather information about environment, volume, users, and requirements» Create structured documentation of deployment planning artifacts Modul 3 Infrastructure» Understand sizing factors» Discuss Splunk components and packaging» Understand how reference hardware is used to scale deployments» Understand how to estimate storage requirements» Identify topology and network scenarios» Understand security, authentication, authorization and access control Modul 4 Data Collection» Compare agent based and agentless data collection methods» Discuss data inputs» Compare remote collection methods» Discuss forwarders Modul 5 - Data Comprehension and Enrichment» Identify the six things you must get correct at index time» Discuss indexes» Discuss Common Information Model» Discuss data enrichment Modul 6 - Querying» Discuss search performance» Discuss differences between summarization methods 13

14 Modul 7 - Integration» Describe integration methods» Identify common integration points Modul 8 - Operations and Management» Identify ongoing tasks in a Splunk deployment» Discuss deployment management» Define monitoring tools» Identify backup and archiving methods» Discuss onboarding processes» Discuss high availability 14

15 DATA CENTER SOLUTIONS Als innovatives, international tätiges Schweizer Unternehmen bietet LC Systems seit über 25 Jahren qualitativ hochwertige Data Center Services sowie umfassende und etablierte Services für den Bereich Data Analytics entlang der gesamten Wertschöpfungskette: von der strategischen Beratung über die Realisierung und Weiterentwicklung bis hin zum Managed Service. LC Systems beschäftigt über 100 Data Center- und Data Analytics- Spezialisten an den Standorten in der Schweiz und in Deutschland. LC Systems GmbH Landsberger Straße 302 D München Telefon +49 (0) Hauptsitz LC Systems-Engineering AG Postfach 40, Seestrasse 24 CH-9326 Horn Telefon +41 (0) LC Systems-Engineering AG 2015/07/15