- Free Courses
-
Learning Paths
- Courses for Users
- Courses for Splunk Administrators
- Courses for Splunk Cloud Customers
-
Courses for Splunk Architects
- Overview
- Splunk Fundamentals 1
- Splunk Fundamentals 2
- Creating Dashboards with Splunk
- Splunk Fundamentals 3
- Advanced Searching and Reporting
- Splunk Enterprise System Administration
- Splunk Enterprise Data Administration
- Troubleshooting Splunk Enterprise
- Splunk Enterprise Cluster Administration
- Architecting Splunk Enterprise Deployments
- Administering Splunk Enterprise Security
- Courses for App Developers
-
Courses for Enterprise Security Administrators
- Overview
- Splunk Fundamentals 1
- Splunk Fundamentals 2
- Creating Dashboards with Splunk
- Splunk Fundamentals 3
- Advanced Searching and Reporting
- Splunk Enterprise System Administration
- Splunk Enterprise Data Administration
- Architecting Splunk Enterprise Deployments
- Administering Splunk Enterprise Security
- Courses for Enterprise Security End-Users
- Courses for IT Service Intelligence Administrators
- Courses for IT Service Intelligence End-Users
- Courses for Phantom Customers
-
Certification Tracks
- Splunk Core Certified User
- Splunk Core Certified Power User
- Splunk Core Certified Advanced Power User
- Splunk Enterprise Certified Admin
- Splunk Enterprise Certified Architect
- Splunk Certified Developer
- Splunk Enterprise Security Certified Admin
- Splunk IT Service Intelligence Certified Admin
-
Splunk Core Certified Consultant
- Overview
- Splunk Fundamentals 1
- Splunk Fundamentals 2
- Splunk Enterprise System Administration
- Splunk Enterprise Data Administration
- Architecting Splunk Enterprise Deployments
- Troubleshooting Splunk Enterprise
- Splunk Enterprise Cluster Administration
- Splunk Enterprise Practical Lab
- Splunk Fundamentals 3
- Creating Dashboards with Splunk
- Advanced Searching and Reporting
-
Courses
- Splunk Fundamentals 1
- Splunk Fundamentals 2
- Splunk Fundamentals 3
- Advanced Searching and Reporting
- Creating Dashboards with Splunk
- Advanced Dashboards and Visualizations
- Building Splunk Apps
- Splunk for Analytics and Data Science
- Splunk Infrastructure Overview
- Splunk Enterprise System Administration
- Splunk Enterprise Data Administration
- Troubleshooting Splunk Enterprise
- Splunk Enterprise Cluster Administration
- Splunk Cloud Administration
- Architecting Splunk Enterprise Deployments
- Splunk Enterprise Practical Lab
- Developing with Splunk's REST API
- Administering Splunk Enterprise Security
- Using Splunk Enterprise Security
- Implementing Splunk IT Service Intelligence
- Using Splunk IT Service Intelligence
- Splunk User Behavior Analytics
- Administering Phantom
- Developing Phantom Playbooks
- Working with Metrics in Splunk
- Implementing Splunk SmartStore
- Splunk Workload Management
-
Videos
- All Videos
- Splunk Cloud Tutorial
- Installing Splunk Enterprise on Linux
- Installing Splunk Enterprise on Windows
- Getting Data In to Splunk Enterprise (Linux)
- Getting Data In (Windows)
- Getting Data In with Forwarders
- Basic Search in Splunk Enterprise
- Create a Dashboard in Splunk Enterprise
- Splunk Certification Candidate Journey
- Creating Alerts in Splunk Enterprise
-
- Certification Exams
- Program Guide + FAQ
- Download Fact Sheet
Course Description
This 4 virtual-day course prepares consultants to install and configure Splunk's app for IT Service Intelligence (ITSI). Students will learn to use ITSI to monitor mission-critical services. Topics include ITSI architecture, deployment planning, installation, service design and implementation, configuring entities, notable events, and developing glass tables and deep dives.
Instructor-led Training Schedule
- ITSI architecture and deployment
- Installing ITSI
- Designing Services-discovery and best practices
- Implementing services and entities
- Configuring correlation searches and multi KPI alerts
- Managing aggregation policies and anomaly detection
- Troubleshooting and maintenance
- Splunk Fundamentals 1
- Splunk Funamentals 2
- Splunk Enterprise System Administration
- Splunk Enterprise Data Administration
- Identify what ITSI does
- Describe reasons for using ITSI
- Examine the ITSI user interface
- Describe glass tables
- Use glass tables
- Design glass tables
- Configure glass tables
- Define key notable events terms and their relationships
- Describe examples of multi-KPI alerts
- Describe the notable events workflow
- Work with notable events
- Describe deep dive concepts and their relationships
- Use default deep dives
- Create and customize new custom deep dives
- Add and configure swim lanes
- Custom views
- Describe effective workflows for troubleshooting
- List ITSI hardware recommendations
- Describe ITSI deployment options
- Identify ITSI components
- Describe the installation procedure
- Identify data input options for ITSI
- Add custom data to an ITSI deployment
- Given customer requirements, plan an ITSI implementation
- Identify site entities
- Use a data audit to identify service key performance indicators
- Design base searches
- Use a service design to implement services in ITSI
- Create KPIs with static and adaptive thresholds
- Use time policies to define flexible thresholds
- Using entities in KPI searches
- Defining dependencies
- Define new correlation searches
- Define multi KPI alerts
- Manage notable event storage
- Create new aggregation policies
- Use smart mode
- Enable anomaly detection
- Work with generated anomaly events
- Configure user access control
- Create service level teams
- Backup and restore
- Maintenance mode
- Creating modules
- Troubleshooting