Splunk OverDrive

Course Description

This training covers how together, Splunk and Cisco enable organizations to realize the potential of Operational Intelligence across the organization and gain real-time business insights that create a strategic advantage.  We will cover how Splunk software scales to collect and index hundreds of terabytes of data per day, across multi-geography, multi-datacenter and cloud based infrastructures. Using Cisco’s Unified Computing System (UCS) Integrated Infrastructure for Big Data offers linear scalability along with operation simplification for single-rack and multiple-rack deployments. To facilitate faster and more predictable deployments, Cisco has published multiple reference architectures for Splunk software plus a comprehensive Cisco Validated Design that provides prescriptive, step-by-step guidance for deploying Splunk Enterprise on Cisco UCS.

Course Objectives
  • Harnessing the power of your machine data enables you to make decisions based on facts, not intuition or best guesses.
  • Reduce the time you spend investigating incidents by up to 90%!*
  • Find and fix problems faster by learning new technical skills for real world scenarios.
  • Get started with Splunk Enterprise, from installation and data onboarding to running search queries to creating simple reports and dashboards
  • Accelerate time to value with turnkey Splunk integrations for dozens of Cisco products and platforms
  • Ensure faster, more predictable Splunk deployments with a proven Cisco Validated Design and the latest Cisco UCS server

Course Type
  • Instructor-Led Training, Classroom with Hands-on Lab
Who should attend
  • Anyone Interested in improving the results in the data center

Duration

  • 1 day
Prerequisites

The knowledge and skills that you must have before attending this course are as follows:

  • Familiarity with Cisco Products.

Course Content

Module 1: Cisco Integrated Infrastructure for Big Data and Splunk

  • What is Cisco CPA (v4)
  • Architecture benefits for Splunk
  • Components of IIBD and relationship to Splunk architecture
  • Cisco UCS Integrated Infrastructure for Big Data with Splunk Enterprise
  • Splunk – Big Data Analytics:
  • Solution Overview
  • NFS Configurations for the Splunk Frozen Data Storage
  • NFS Client Configurations on the Indexers

Module 2: Splunk – Start Searching

  • Introduce Splunk and the Search app
  • Run basic searches
  • Identify the contents of search results
  • Control a search job
  • Set the time range of a search
  • Use the output of a search to refine your search

Module 3: Saving Results and Searches

  • Export search results
  • Save and share search results
  • Save searches
  • Schedule searches


Module 4: Splunk – Fields, Tag, and Events

  • Understand fields
  • Use fields in searches
  • Use the fields sidebar
  • Understand tags
  • Create tags and use tags in a search
  • Describe event types and their uses
  • Create and use event types in a search

Module 5:Splunk – Creating Alerts and Reports

  • Describe alerts
  • Create an alert
  • View fired alerts
  • Create reports and charts
  • Create dashboards and add reports
  • Create and edit dashboards

 Module 6: Intro to Splunk Apps for Cisco

  • Cisco UCS Data In Splunk
  • Cisco Integrations with Splunk

Module 7: UCS Director Express for Big Data

  • Splunk Deployment with UCSDE for Big Data
  • Splunk Management with UCSDE for Big Data
  • Creating a Splunk Cluster with UCSDE for Big Data

 

 

 


Lab 1: Installing and Navigating Splunk

Lab 2: Importing Data into Splunk

Lab 3: Exploring Search Views in Splunk

Lab 4: Basic Searches and Search Results

Lab 5: Field Lookups and Events

Lab 6: Creating Reports and Charts

Lab 7: Creating Dashboard

Lab 8: Cisco UCS and Splunk Integration

Lab 9: Cisco ACI (or maybe IOS) and Splunk Integration

Lab 10: UCS Director Express for Big Data – Splunk Deployment