Opleiding: Splunk On-Call Administration (SOCA)

Splunk On-Call Administration (SOCA)

This course is targeted towards Splunk On-call admins responsible for setting up incident response with Splunk On-Call. This 4.5-hour virtual course describes the tasks required to set up on-call teams, including defining schedules, on-call rotations and shifts. Learn to set-up and configure alerts and integrations. Explore post-incident review reports, track response metrics and customize reports. Use advanced features such as the Rules engine for advanced customization and configure webhook integrations.
Learn the concepts and apply the knowledge through interactive lectures, discussions, and hands-on exercises.

- Site Reliability Engineer
- IT/Ops

Module 1 – Getting Started with Users and Teams



- Describe What Splunk On-Call is
- Describe the flow of an alert/ incident in Splunk On-Call
- Create a plan for incident response
- Describe the layout of the On-Call User Interface
- Create new users and teams
- Create user paging (notification) policies
- Create new Teams
- Add users to teams
Module 2 – Incident Response Through Team Rotations and Escalation Policies



- Create on-call schedules
- Add rotations
- Add shifts
- Add members...