Search Optimization

Search OptimizationSSOSPSplunkSP-SSO1.0To be successful, students must have completed these Splunk Education course(s) or have equivalent working knowledge: <ul> <li>How Splunk works</li><li>Creating search queries</li><li>Creating reports and data models</li></ul><ul> <li>Knowledge Managers</li><li>Users/Analysts</li></ul>Module 1 - Optimize Search <ul> <li>Understand how search modes affect performance</li><li>Examine the role of the Splunk Search Scheduler</li><li>Review general search practices</li></ul>Module 2 - Report Acceleration <ul> <li>Define acceleration and acceleration types</li><li>Understand report acceleration and create an accelerated report</li><li>Reveal when and how report acceleration summaries are created</li><li>Search against acceleration summaries</li></ul>Module 3 - Data Model Acceleration <ul> <li>Understand data model acceleration</li><li>Accelerate a data model</li><li>Use the datamodel command to search data models</li></ul>Module 4 - Using the tstats Command <ul> <li>Explore the tstats command</li><li>Search acceleration summaries with tstats</li><li>Search data models with tstats</li><li>Compare tstats and stats</li></ul>To be successful, students must have completed these Splunk Education course(s) or have equivalent working knowledge: - How Splunk works - Creating search queries - Creating reports and data models- Knowledge Managers - Users/AnalystsModule 1 - Optimize Search - Understand how search modes affect performance - Examine the role of the Splunk Search Scheduler - Review general search practices Module 2 - Report Acceleration - Define acceleration and acceleration types - Understand report acceleration and create an accelerated report - Reveal when and how report acceleration summaries are created - Search against acceleration summaries Module 3 - Data Model Acceleration - Understand data model acceleration - Accelerate a data model - Use the datamodel command to search data models Module 4 - Using the tstats Command - Explore the tstats command - Search acceleration summaries with tstats - Search data models with tstats - Compare tstats and stats3 heures500.00500.00420.00500.00500.00690.00550.00500.0050.0050.0050.0050.0050.0050.0050.0050.0050.0050.00