Course Overview
The course requires students to build a mock deployment that meets specified requirements, while demonstrating a thorough understanding of Splunk recommended practices. Upon completion, the instructor will evaluate the work and provide constructive feedback.
The instructor will introduce the lab challenge, give opportunities for discussion about the lab etc, provide student lab server details, explain how the assessment will be conducted, how to get support during the 24 hours etc. Then students are left to work for 24 hours on the technical lab challenge, which as pasted below in the trail, involves completing a number of tasks typically involved in establishing a Splunk distributed (on-prem) deployment and use-case implementation/initial data onboard. Once the 24 hours is up, the students' work is graded by the instructor to determine if the configuration work is up to the required standards and best practices are followed.
The Deployment Lab is required to obtain the certification.
Pro tip: Candidates who complete the learning path above and hold the Splunk Core Certified Power User certification are eligible for the Splunk Enterprise Certified Admin certification exam.
Students will have access to instructor for 4.5 hours, with time to then complete the lab activities and submit for grading.
Who should attend
- Administrators
- Aspiring Architects
Certifications
This course is part of the following Certifications:
Prerequisites
To be successful, students must have completed these Splunk Education courses or have equivalent working knowledge:
- Intro to Splunk
- Using Fields (SUF)
- Intro to Knowledge Objects
- Scheduling Reports & Alerts
- Visualizations
- Introduction to Dashboards (ITD)
- Splunk Enterprise System Administration (SESA)
- Splunk Enterprise Data Administration (SEDA)
- Architecting Splunk Enterprise Deployments (ASED)
- Troubleshooting Splunk Enterprise (TSE)
- Splunk Enterprise Cluster Administration (SCLA)
Additional courses and/or knowledge in these areas are also highly recommended:
- Basic Linux skills
- Editing text files in Linux using vi or nano
Outline: Splunk Enterprise Deployment Practical Lab (SDPL)
Instructor Led Introduction
- Explanation of the proof-of-concept scenario
- Deployment requirements (statement of work)
- Topology and hostnames
- Advice for success
24 Hour Independent Timed Lab
- Build a fully functional Splunk environment that satisfies the requirements specified in the document provided by the instructor.
- The following skills are required to successfully complete this course:
- Installing Splunk
- Configuring an indexer cluster
- Creating indexes with high availability
- Managing forwarders with a deployment server
- Testing and configuring data inputs
- Creating a custom sourcetype
- Creating field extractions
- Installing apps and add-ons
- Creating reports
- Creating simple dashboards
- Monitoring a Splunk environment