(SDM)<\/span><\/a><\/span><\/li><\/ul>","audience":"Administrators<\/p>","outline":"
Module 1 – Splunk Troubleshooting Methods and Tools<\/strong><\/p>\n\n- Describe the Splunk Troubleshooting Approach<\/li>
- List Splunk Diagnostic Resources and Tools<\/li>
- Create and Splunk a Diag<\/li>
- Use RapidDiag<\/li><\/ul>
Module 2 – Indexing Problems<\/strong><\/p>\n\n- Discover Splunk Deployment Topology and its Server Roles<\/li>
- Identify Where to Check the Index-Time Pipeline Status<\/li>
- Use the metrics.log to Clarify the Index-Time Problem<\/li><\/ul>
Module 3 – Input Configuration Problems<\/strong><\/p>\n\n- Data Input Issues<\/li>
- Troubleshooting Inputs with the Monitoring Console<\/li><\/ul>
Module 4 – Deployment and Forwarder Problems<\/strong>\n<\/p>\n\n- Deployment Server Issues<\/li>
- Forwarding and Receiving Issues<\/li><\/ul>
Module 5 – Search Management Problems<\/strong>\n<\/p>\n\n- Troubleshoot Distributed Search Issues<\/li>
- Identify Job Scheduling Problems<\/li>
- Learn to Diagnose Crashing Problems<\/li>
- Describe How to Prioritize Resources for Critical Splunk Processes<\/li><\/ul>
Module 6 – User Search Problems<\/strong>\n<\/p>\n\n- Identify the Types of Search Problems<\/li>
- Isolate and Troubleshoot Search Problems<\/li><\/ul>","summary":"
This course is for Splunk administrators.<\/p>\n
The course covers topics and techniques for troubleshooting a standard Splunk distributed deployment using the tools available with Splunk Enterprise.<\/p>\n
This course may be delivered in one day or, two days of 4.5 hour sessions.<\/strong><\/p>\nThis course is also part of the following bundle: