Configuring and maintaining a Splunk indexer cluster is not an easy task and requires a good understanding of the different components participating in a cluster. In this course, you’ll learn how to configure and administer all the components of a Splunk indexer cluster. First, you’ll explore the purpose, important concepts, and architecture of both single-site and multi-site indexer clusters. Next, you’ll explore how to set up all the core components of an indexer cluster as well as the components that interact with the cluster: universal forwarders and search heads. Finally, you’ll learn how to monitor and administer an indexer cluster using the Splunk web interface and command line interface. When you’re finished with this course, you’ll have all the skills and knowledge needed to successfully configure and administer Splunk indexer clusters.
Author Name: Johan Raeymaeckers
Author Description:
Johan Raeymaeckers is a systems management consultant with over 20 years of experience. He has been involved in various large scale Tivoli, Symantec, Microsoft and Splunk projects mainly in the financial market. Johan is passionate about teaching and course development. He holds various certifications from IBM, Microsoft, Symantec and Splunk, he is also a certified IBM and Symantec instructor. In his spare time Johan loves to spend time with his two sons and enjoys mountainbiking and playing so… more

Table of Contents

• Course Overview
  1min
• Introduction to Indexer Clustering
  24mins
• Configuring a Splunk Indexer Cluster
  20mins
• Getting Data in and Searching in a Splunk Indexer Cluster
  26mins
• Managing and Administering a Splunk Indexer Cluster
  25mins
• Monitoring and Troubleshooting a Splunk Indexer Cluster
  19mins