Splunk 9: Configuring and Administering Splunk Indexer Clusters
This course will teach you how to configure and administer all the components of a Splunk Indexer Cluster. After completing this course you will be able to set up and manage a complete Splunk indexer cluster.
What you'll learn
Configuring and maintaining a Splunk indexer cluster is not an easy task and requires a good understanding of the different components participating in a cluster. In this course, you’ll learn how to configure and administer all the components of a Splunk indexer cluster. First, you’ll explore the purpose, important concepts, and architecture of both single-site and multi-site indexer clusters. Next, you’ll explore how to set up all the core components of an indexer cluster as well as the components that interact with the cluster: universal forwarders and search heads. Finally, you’ll learn how to monitor and administer an indexer cluster using the Splunk web interface and command line interface. When you’re finished with this course, you’ll have all the skills and knowledge needed to successfully configure and administer Splunk indexer clusters.
Table of contents
- Configuring a Splunk Indexer Cluster 1m
- Three Ways to Configure 1m
- Configuring the License Master 3m
- Demo: License Master 2m
- Configuration Data 2m
- Configuring Master and Peer 3m
- Demo: Configuring Master and Peer 3m
- Verifying Cluster Configuration 3m
- Demo: Verifying Cluster Configuration 2m
- Summary 1m
- Getting Data in and Searching 1m
- Two Ways to Get Data 2m
- Splunk Forwarder Configuration 4m
- Understanding Indexer Discovery 2m
- Configuring Indexer Discovery 5m
- Demo: Indexer Discovery 2m
- Configuring a Search Head 3m
- Demo: Configuring a Search Head 2m
- Searching in a Splunk Indexer Cluster 4m
- Summary 1m