{"course":{"productid":26427,"modality":1,"active":true,"language":"fr","title":"Services Core Implementation","productcode":"SCI","vendorcode":"SP","vendorname":"Splunk","fullproductcode":"SP-SCI","courseware":{"has_ekit":false,"has_printkit":true,"language":""},"url":"https:\/\/portal.flane.ch\/course\/splunk-sci","objective":"<p><strong>Topic 1 &ndash; Deploying Splunk<\/strong>\n<\/p>\n<ul>\n<li>Introduce the Splunk Validated Architectures<\/li><li>Review how Splunk can grow from a standalone environment to a distributed environment with indexer and search head clustering<\/li><li>Explain High Availability and Disaster Recovery<\/li><li>Discuss migrating Splunk from on-premises to the Cloud<\/li><li>Lab 0: Grade Me<\/li><\/ul><p>\n<br\/><\/p>\n<p><strong>Topic 2 &ndash; Monitoring Console<\/strong>\n<\/p>\n<ul>\n<li>Discuss the best instance to configure as the Monitoring Console<\/li><li>Configure the MC for a single or distributed environment<\/li><li>Examine how the MC uses the server roles and groups assigned to instances<\/li><li>Discuss health checks and how they are run<\/li><li>Lab 1 - Discovery<\/li><\/ul><p><br\/><\/p>\n<p><strong>Topic 3 &ndash; Configuration Management<\/strong>\n<\/p>\n<ul>\n<li>Define deployment apps<\/li><li>Provide overview of Deployment Server<\/li><li>Describe deployment system configuration<\/li><li>Discuss how to manage Deployment Server at scale<\/li><li>Lab 5: Scale DS<\/li><\/ul><p><br\/><\/p>\n<p><strong>Topic 4 &ndash; Access &amp; Roles<\/strong>\n<\/p>\n<ul>\n<li>Discuss how to manage Deployment Server at scale<\/li><li>Identify authentication methods<\/li><li>Describe LDAP concepts and configuration<\/li><li>Discuss SAML and SSO options<\/li><li>Define roles and how they are used to protect data<\/li><li>Lab 2: LDAP Integration<\/li><\/ul><p>\n<br\/><\/p>\n<p><strong>Topic 5 &ndash; Data Collection<\/strong>\n<\/p>\n<ul>\n<li>Examine Splunk to Splunk (S2S) communication and the different ways data is sent from forwarder to indexer<\/li><li>Describe the types and configuration of data inputs<\/li><li>Discuss ways to troubleshoot data inputs<\/li><li>Lab 3: Triage broken forwarder<\/li><\/ul><p><br\/><\/p>\n<p><strong>Topic 6 &ndash; Indexing<\/strong>\n<\/p>\n<ul>\n<li>Review indexing artifacts and locations<\/li><li>Discuss event processing and data pipelines<\/li><li>Understand the underlying text parsing and indexing process<\/li><li>Examine data retention controls<\/li><li>Lab 4: Triage indexing issue<\/li><\/ul><p><br\/><\/p>\n<p><strong>Topic 7 &ndash; Search<\/strong>\n<\/p>\n<ul>\n<li>Examine the inter-workings of a search<\/li><li>Discuss how to use search job inspection<\/li><li>Look at the different search types and how to maximize search efficiency<\/li><li>Review sub-searches and how they work<\/li><li>Examine some example searches and how to make them more efficient<\/li><\/ul><p><br\/><\/p>\n<p><strong>Topic 8 &ndash; Index Clustering<\/strong>\n<\/p>\n<ul>\n<li>Provide an architecture overview<\/li><li>Describe deployment and component configuration<\/li><li>Review upgrade strategy<\/li><li>Discuss data buckets and lifecycle<\/li><li>Examine failure modes and recovery processes<\/li><li>Introduce multi-site clustering<\/li><li>Understand migration procedures<\/li><li>Lab 6: Upgrade Index Cluster<\/li><li>Lab 7: Expand Cluster &amp; Migrate Indexer data<\/li><\/ul><p><br\/><\/p>\n<p><strong>Topic 9 &ndash; Search Head Clustering<\/strong>\n<\/p>\n<ul>\n<li>Provide overview of Search Head clustering<\/li><li>Explain how to manage and deploy a cluster<\/li><li>Describe content management using the Deployer<\/li><li>Review the role of cluster members and the Captain<\/li><li>Lab 8 &ndash; Install SHC<\/li><\/ul><p><br\/><\/p>\n<p><strong>Appendix A &ndash; REST API<\/strong>\n<\/p>\n<ul>\n<li>Define the Splunk REST API<\/li><li>Discuss requests, endpoints, and namespaces<\/li><li>Examine tools and methods for using the API<\/li><\/ul>","essentials":"<ul>\n<li>Splunk Certified Architect +<\/li><\/ul>","contents":"<ul>\n<li>Splunk architecture<\/li><li>Monitoring Console<\/li><li>Deployment Server<\/li><li>LDAP integration<\/li><li>Collecting and forwarding data<\/li><li>Indexing and Searching<\/li><li>Clustering indexers<\/li><li>Clustering Search Heads<\/li><\/ul>","summary":"<p>This module is an in-person, five-day instructor-led program that covers how to make Splunk Enterprise run efficiently in setting up large\nclustered Splunk environments using best practices. The module evaluates your ability to successfully deploy Splunk Enterprise in several\nscenarios, including Search Head Cluster, Indexer Cluster, and distributed environments. We also create advanced dashboards and\nalerts to ensure customers get the most value from their Splunk environment.<\/p>","objective_plain":"Topic 1 \u2013 Deploying Splunk\n\n\n\n- Introduce the Splunk Validated Architectures\n- Review how Splunk can grow from a standalone environment to a distributed environment with indexer and search head clustering\n- Explain High Availability and Disaster Recovery\n- Discuss migrating Splunk from on-premises to the Cloud\n- Lab 0: Grade Me\n\nTopic 2 \u2013 Monitoring Console\n\n\n\n- Discuss the best instance to configure as the Monitoring Console\n- Configure the MC for a single or distributed environment\n- Examine how the MC uses the server roles and groups assigned to instances\n- Discuss health checks and how they are run\n- Lab 1 - Discovery\n\nTopic 3 \u2013 Configuration Management\n\n\n\n- Define deployment apps\n- Provide overview of Deployment Server\n- Describe deployment system configuration\n- Discuss how to manage Deployment Server at scale\n- Lab 5: Scale DS\n\nTopic 4 \u2013 Access & Roles\n\n\n\n- Discuss how to manage Deployment Server at scale\n- Identify authentication methods\n- Describe LDAP concepts and configuration\n- Discuss SAML and SSO options\n- Define roles and how they are used to protect data\n- Lab 2: LDAP Integration\n\nTopic 5 \u2013 Data Collection\n\n\n\n- Examine Splunk to Splunk (S2S) communication and the different ways data is sent from forwarder to indexer\n- Describe the types and configuration of data inputs\n- Discuss ways to troubleshoot data inputs\n- Lab 3: Triage broken forwarder\n\nTopic 6 \u2013 Indexing\n\n\n\n- Review indexing artifacts and locations\n- Discuss event processing and data pipelines\n- Understand the underlying text parsing and indexing process\n- Examine data retention controls\n- Lab 4: Triage indexing issue\n\nTopic 7 \u2013 Search\n\n\n\n- Examine the inter-workings of a search\n- Discuss how to use search job inspection\n- Look at the different search types and how to maximize search efficiency\n- Review sub-searches and how they work\n- Examine some example searches and how to make them more efficient\n\nTopic 8 \u2013 Index Clustering\n\n\n\n- Provide an architecture overview\n- Describe deployment and component configuration\n- Review upgrade strategy\n- Discuss data buckets and lifecycle\n- Examine failure modes and recovery processes\n- Introduce multi-site clustering\n- Understand migration procedures\n- Lab 6: Upgrade Index Cluster\n- Lab 7: Expand Cluster & Migrate Indexer data\n\nTopic 9 \u2013 Search Head Clustering\n\n\n\n- Provide overview of Search Head clustering\n- Explain how to manage and deploy a cluster\n- Describe content management using the Deployer\n- Review the role of cluster members and the Captain\n- Lab 8 \u2013 Install SHC\n\nAppendix A \u2013 REST API\n\n\n\n- Define the Splunk REST API\n- Discuss requests, endpoints, and namespaces\n- Examine tools and methods for using the API","essentials_plain":"- Splunk Certified Architect +","contents_plain":"- Splunk architecture\n- Monitoring Console\n- Deployment Server\n- LDAP integration\n- Collecting and forwarding data\n- Indexing and Searching\n- Clustering indexers\n- Clustering Search Heads","summary_plain":"This module is an in-person, five-day instructor-led program that covers how to make Splunk Enterprise run efficiently in setting up large\nclustered Splunk environments using best practices. The module evaluates your ability to successfully deploy Splunk Enterprise in several\nscenarios, including Search Head Cluster, Indexer Cluster, and distributed environments. We also create advanced dashboards and\nalerts to ensure customers get the most value from their Splunk environment.","skill_level":"Intermediate","version":"1.0","duration":{"unit":"d","value":5,"formatted":"5 jours"},"pricelist":{"List Price":{"DE":{"country":"DE","currency":"EUR","taxrate":19,"price":4000},"AT":{"country":"AT","currency":"EUR","taxrate":20,"price":4000},"SE":{"country":"SE","currency":"EUR","taxrate":25,"price":4000},"GR":{"country":"GR","currency":"EUR","taxrate":null,"price":4000},"MK":{"country":"MK","currency":"EUR","taxrate":null,"price":4000},"HU":{"country":"HU","currency":"EUR","taxrate":20,"price":4000},"PL":{"country":"PL","currency":"USD","taxrate":23,"price":4000},"CH":{"country":"CH","currency":"CHF","taxrate":8.1,"price":4000}}},"lastchanged":"2025-07-29T12:18:12+02:00","parenturl":"https:\/\/portal.flane.ch\/swisscom\/fr\/json-courses","nexturl_course_schedule":"https:\/\/portal.flane.ch\/swisscom\/fr\/json-course-schedule\/26427","source_lang":"fr","source":"https:\/\/portal.flane.ch\/swisscom\/fr\/json-course\/splunk-sci"}}