Using the Splunk REST APIDSRAPISPSplunkSP-DSRAPI10<p>To be successful, students should have a solid understanding of the following:
</p>
<ul>
<li><span class="cms-link-marked"><a class="fl-href-prod" href="/swisscom/fr/course/splunk-sesa"><svg role="img" aria-hidden="true" focusable="false" data-nosnippet class="cms-linkmark"><use xlink:href="/css/img/icnset-linkmarks.svg#linkmark"></use></svg>Splunk Enterprise System Administration <span class="fl-prod-pcode">(SESA)</span></a></span></li><li><span class="cms-link-marked"><a class="fl-href-prod" href="/swisscom/fr/course/splunk-seda"><svg role="img" aria-hidden="true" focusable="false" data-nosnippet class="cms-linkmark"><use xlink:href="/css/img/icnset-linkmarks.svg#linkmark"></use></svg>Splunk Enterprise Data Administration <span class="fl-prod-pcode">(SEDA)</span></a></span></li><li>Python, JavaScript, or similar scripting languages</li></ul><ul>
<li>Administrators</li><li>Engineers</li></ul><h4>Topic 1 – Splunk REST API</h4><ul>
<li>Introduce REST</li><li>Review HTTP requests</li><li>Describe the Splunk REST API</li><li>Discuss authentication methods</li></ul><h4>Topic 2 – Response Data</h4><ul>
<li>Review HTTP responses</li><li>Describe the Atom specification</li><li>Demonstrate how to retrieve JSON</li><li>Explain how to parse a response</li></ul><h4>Topic 3 – Administration APIs</h4><ul>
<li>Introduce the administration APIs</li><li>Update configuration files</li><li>Work with indexes</li><li>Manage users</li></ul><h4>Topic 4 – Namespaces and Access Control</h4><ul>
<li>Introduce namespaces</li><li>Explain namespace use cases</li><li>Implement access control</li></ul><h4>Topic 5 – Search</h4><ul>
<li>Identify search components</li><li>Review search best practices</li><li>Create a search and retrieve results</li><li>Discuss oneshot searches</li></ul><h4>Topic 6 – Advanced Search</h4><ul>
<li>Utilize real-time searches</li><li>Summarize export searches</li><li>Construct saved searches</li><li>Understand search job management</li></ul><h4>Topic 7 – HTTP Event Collector</h4><ul>
<li>Describe the HTTP Event Collector</li><li>Explain token management</li><li>Explore data ingestion</li><li>Implement data acknowledgement</li></ul><h4>Topic 8 – Key-Value Store</h4><ul>
<li>Examine the Key-Value Store</li><li>Define and manage a collection</li><li>Create and manage records</li></ul>To be successful, students should have a solid understanding of the following:
- Splunk Enterprise System Administration (SESA)
- Splunk Enterprise Data Administration (SEDA)
- Python, JavaScript, or similar scripting languages- Administrators
- EngineersTopic 1 – Splunk REST API
- Introduce REST
- Review HTTP requests
- Describe the Splunk REST API
- Discuss authentication methods
Topic 2 – Response Data
- Review HTTP responses
- Describe the Atom specification
- Demonstrate how to retrieve JSON
- Explain how to parse a response
Topic 3 – Administration APIs
- Introduce the administration APIs
- Update configuration files
- Work with indexes
- Manage users
Topic 4 – Namespaces and Access Control
- Introduce namespaces
- Explain namespace use cases
- Implement access control
Topic 5 – Search
- Identify search components
- Review search best practices
- Create a search and retrieve results
- Discuss oneshot searches
Topic 6 – Advanced Search
- Utilize real-time searches
- Summarize export searches
- Construct saved searches
- Understand search job management
Topic 7 – HTTP Event Collector
- Describe the HTTP Event Collector
- Explain token management
- Explore data ingestion
- Implement data acknowledgement
Topic 8 – Key-Value Store
- Examine the Key-Value Store
- Define and manage a collection
- Create and manage records9 heures1000.00835.001000.001000.001380.001100.001000.00100.00100.00100.00100.00100.00100.00100.00100.00100.00