トピック | 出題範囲 |
---|
トピック 1 | - Forwarder and Deployment Best Practices: Aimed at the Splunk Administrator, this section covers best practices for designing the forwarder tier and managing Splunk components using deployment tools. It emphasises effective configuration management.
|
トピック 2 | - Clarifying the Problem: This section targets the Splunk Administrator and includes identifying relevant internal logs and indexes within Splunk. It supports accurate root cause analysis during troubleshooting.
|
トピック 3 | - Infrastructure Planning: Index Design: Designed for the Enterprise Solutions Architect, this section addresses how to design and size indexes correctly. It also covers estimating storage requirements unrelated to smart store configurations and understanding relevant apps for deployment.
|
トピック 4 | - Infrastructure Planning: Resource Planning: This domain assesses the expertise of the Enterprise Solutions Architect and deals with sizing considerations, hardware specifications, and storage needs for different Splunk components. It also considers security, privacy, and specialised sizing for apps like ES and ITSI.
|
トピック 5 | - Indexer Cluster Management and Administration: This section assesses the Splunk Administrator’s skills in managing indexer clusters, including monitoring, peer management, app bundle handling, and storage utilisation strategies.
|
トピック 6 | - Search Problems: Aimed at the Splunk Administrator, this section explores challenges related to search performance and introduces the Job Inspector tool to investigate query-related problems.
|
トピック 7 | - Clustering Overview: This section is intended for the Splunk Administrator and provides knowledge about search head clustering and related storage needs that are not smart store-specific. It introduces key concepts essential for managing clustered environments.
|
トピック 8 | - Introduction: This section of the exam measures the skills of the Enterprise Solutions Architect and covers the foundational understanding of planning and executing a Splunk deployment. It introduces key concepts, including the definition of deployment plans and outlines the overall process.
|
トピック 9 | - Configuration Problems: This domain evaluates the Splunk Administrator's understanding of input configuration issues that may arise during deployment or log collection stages.
|
トピック 10 | - Licensing and Crash Problems: This section assesses the abilities of the Splunk Administrator to identify and resolve issues related to licensing limits and platform crashes during deployment and daily operations.
|
トピック 11 | - Search Head Cluster Management and Administration: Designed for the Splunk Administrator, this section covers day-to-day operations such as managing the deployer, handling captaincy, and maintaining or removing search head members.
|
トピック 12 | - KV Store Collection and Lookup Management: This final section measures skills of the Splunk Administrator in managing KV Store collections within clustered Splunk environments, supporting dynamic data storage and lookup functionalities.
|
トピック 13 | - Search Head Cluster: Targeted at the Enterprise Solutions Architect, this domain explores the architecture and configuration of search head clusters, necessary for scaling searches across large deployments.
|
トピック 14 | - Performance Monitoring and Tuning: This section of the exam measures the skills of the Splunk Administrator and focuses on optimizing performance using configuration files such as limits.conf, indexes.conf, and props.conf. It also includes methods to improve search efficiency.
|
トピック 15 | - Large-scale Splunk Deployment Overview: This domain measures the Enterprise Solutions Architect’s ability to design and manage Splunk server roles and configure license masters effectively in clustered environments.
|
トピック 16 | - Single-site Indexer Cluster: Intended for the Enterprise Solutions Architect, this section introduces the key aspects of configuring a Splunk single-site indexer cluster, covering essential operational settings.
|
トピック 17 | - Project Requirements: This section evaluates the competencies of the Splunk Administrator and focuses on identifying environment-specific needs such as user volume and technical requirements. It includes the use of checklists and available resources to ensure all deployment needs are clearly understood.
|
トピック 18 | - Splunk Troubleshooting Methods and Tools: Designed for the Splunk Administrator, this domain provides understanding of available Splunk diagnostic tools and resources essential for identifying and resolving issues effectively.
|