Splunk Enterprise Certified Architect

Course Description

Splunk Enterprise Certified Architect exam is the final step towards completion of the Splunk Enterprise Certified Architect certification. This highly technical certification exam evaluates a candidate’s knowledge and skills in Splunk Deployment Methodology and best practices for planning, data collection, and sizing, managing, and troubleshooting a standard with indexer and search head clustering. This certification demonstrates an individual’s ability to deploy, manage, and troubleshoot complex Splunk Enterprise environments.

Program Objectives

• Introduction
• Project Requirements
• Infrastructure Planning: Index Design
• Infrastructure Planning: Resource Planning
• Clustering Overview
• Forwarder and Deployment Best Practices
• Performance Monitoring and Tuning
• Splunk Troubleshooting Methods and Tools
• Clarifying the Problem
• Licensing and Crash Problems
• Configuration Problems
• Search Problems
• Deployment Problems
• Large-scale Splunk Deployment Overview
• Single-site Indexer Cluster
• Multisite Indexer Cluster
• Indexer Cluster Management and Administration
• Search Head Cluster
• Search Head Cluster Management and Administration
• KV Store Collection and Lookup Management

Prerequisites

Prerequisite Certification

The prerequisite exams for this certification are Splunk Core Certified Power User and Splunk Enterprise Certified Admin.

Prerequisite Course

Candidates for this exam must complete the lecture, hands-on labs, and quizzes that are part of the Architecting Splunk Enterprise Deployments, Troubleshooting Splunk Enterprise, and Splunk Enterprise Cluster Administration courses, as well as the Splunk Enterprise Deployment Practical Lab.