Implementing Splunk IT Service Intelligence

This 4 virtual-day course prepares consultants to install and configure Splunk's app for IT Service Intelligence (ITSI). Students will learn to use ITSI to monitor mission-critical services. Topics include ITSI architecture, deployment planning, installation, service design and implementation, configuring entities, notable events, and developing glass tables and deep dives.

Obsah školení

Course Objectives

Module 1 - Introducing ITSI

• Identify what ITSI does
• Describe reasons for using ITSI
• Examine the ITSI user interface

Module 2 - Glass Tables

• Describe glass tables
• Use glass tables
• Design glass tables
• Configure glass tables

Module 3 - Managing Notable Events

• Define key notable events terms and their relationships
• Describe examples of multi-KPI alerts
• Describe the notable events workflow
• Work with notable events

Module 4 - Investigating Issues with Deep Dives

• Describe deep dive concepts and their relationships
• Use default deep dives
• Create and customize new custom deep dives
• Add and configure swim lanes
• Custom views
• Describe effective workflows for troubleshooting

Module 5 - Installing and Configuring ITSI

• List ITSI hardware recommendations
• Describe ITSI deployment options
• Identify ITSI components
• Describe the installation procedure
• Identify data input options for ITSI
• Add custom data to an ITSI deployment

Module 6 - Designing Services

• Given customer requirements, plan an ITSI implementation
• Identify site entities

Module 7 - Data Audit and Base Searches

• Use a data audit to identify service key performance indicators
• Design base searches

Module 8 - Implementing Services

• Use a service design to implement services in ITSI

Module 9 - Thresholds and Time Policies

• Create KPIs with static and adaptive thresholds
• Use time policies to define flexible thresholds

Module 10 - Entities and Dependencies

• Using entities in KPI searches
• Defining dependencies

Module 11 - Correlation and Multi KPI Searches

• Define new correlation searches
• Define multi KPI alerts
• Manage notable event storage

Module 12 - Aggregation Policies

• Create new aggregation policies
• Use smart mode

Module 13 - Anomaly Detection

• Enable anomaly detection
• Work with generated anomaly events

Module 14 - Access Control

• Configure user access control
• Create service level teams

Module 15 - Troubleshooting ITSI

• Backup and restore
• Maintenance mode
• Creating modules
• Troubleshooting