Module 1 – Introduction

• Overview of the Splunk deployment planning process and associated tools

Module 2 – Project Requirements

• Identify critical information about the environment, volume, users, and requirements
• Review checklists and resources to aid in collecting requirements

Module 3 – Infrastructure Planning: Index Design

• Design and size indexes
• Estimate storage requirements
• Identify relevant apps

Module 4 – Infrastructure Planning: Resource Planning

• List sizing factors for servers
• Describe how reference hardware is used to scale deployments
• Identify the impact of clustering for index replication and for search heads

Module 5 – Clustering Overview

• Describe the different clustering capabilities
• Introduce the concepts of indexer and search head clustering

Module 6 – Forwarder and Deployment Best Practices

• Review types of forwarders
• Describe how to manage forwarder installation
• Review configuration management for all Splunk components, using Splunk deployment tools
• Provide best practices for a Splunk deployment

Module 7 – Integration

• Describe integration methods
• Identify common integration points

Module 8 – Performance Monitoring and Tuning

• Use the Monitoring Console to track the performance of your test environment
• List options to fine-tune performance for the production environment

Module 9 – Use Cases

• Provide example architecture topologies
• Discuss different architecture options based on use cases

Architecting Splunk Enterprise Deployments Course Prerequisites:

• Fundamentals 1 & 2

Or, equivalent single-subject courses:

• What is Splunk?
• Intro to Splunk
• Using Fields
• Introduction to Knowledge Objects
• Creating Knowledge Objects
• Creating Field Extractions

Additional Recommended Courses:

• Splunk Enterprise System Administration
• Splunk Enterprise Data Administration