Opleiding: Troubleshooting Splunk Enterprise (TSE)

This course is for Splunk administrators.

The course covers topics and techniques for troubleshooting a standard Splunk distributed deployment using the tools available with Splunk Enterprise.

Th...

This course is for Splunk administrators.

The course covers topics and techniques for troubleshooting a standard Splunk distributed deployment using the tools available with Splunk Enterprise.

This course may be delivered in one day or, two days of 4.5 hour sessions.

This course is also part of the following bundle: Splunk Enterprise Architect Fast Start (ARCH-FT)

Administrators

Module 1 – Splunk Troubleshooting Methods and Tools


- Describe the Splunk Troubleshooting Approach
- List Splunk Diagnostic Resources and Tools
- Create and Splunk a Diag
- Use RapidDiag
Module 2 – Indexing Problems


- Discover Splunk Deployment Topology and its Server Roles
- Identify Where to Check the Index-Time Pipeline Status
- Use the metrics.log to Clarify the Index-Time Problem
Module 3 – Input Configuration Problems


- Data Input Issues
- Troubleshooting Inputs with the Monitorin...