Overview

Exam Details:Level: ExpertPrerequisite certification:Splunk Core Certified Power UserSplunk Enterprise Certified AdminPrerequisite coursework:Architecting Splunk Enterprise Deployments -> 9 HoursTroubleshooting Splunk Enterprise -> 9 HoursSplunk Cluster Administration -> 13.5 HoursSplunk Enterprise Deployment Practical Lab -> 24 HoursLength: 90 minutesFormat: 85 multiple choice questionsPricing: $130 USD per exam attemptDelivery: Exam is conducted by Pearson VUETopics Covered In The Exam -1.0 Introduction 2%1.1 Describe a deployment plan1.2 Define the deployment process2.0 Project Requirements 5%2.1 Identify critical information about environment, volume, users, andrequirements2.2 Apply checklists and resources to aid in collecting requirements3.0 Infrastructure Planning: Index Design 5%3.1 Understand design and size indexes3.2 Estimate non-smart store related storage requirements3.3 Identify relevant apps4.0 Infrastructure Planning: Resource Planning 7%4.1 List sizing considerations4.2 Identify disk storage requirements4.3 Define hardware requirements for various Splunk components4.4 Describe ES considerations for sizing and topology4.5 Describe ITSI considerations for sizing and topology4.6 Describe security, privacy, and integrity measures5.0 Clustering Overview 5%5.1 Identify non-smart store related storage and disk usage requirements5.2 Identify search head clustering requirements6.0 Forwarder and Deployment Best Practices 6%6.1 Identify best practices for forwarder tier design6.2 Understand configuration management for all Splunk components, using Splunk deployment tools7.0 Performance Monitoring and Tuning 5%7.1 Use limits.conf to improve performance7.2 Use indexes.conf to manage bucket size7.3 Tune props.conf7.4 Improve search performance8.0 Splunk Troubleshooting Methods and Tools 5%8.1 Splunk diagnostic resources and tools9.0 Clarifying the Problem 5%9.1 Identify Splunk's internal log files9.2 Identify Splunk's internal indexes10.0 Licensing and Crash Problems 5%10.1 License issues10.2 Crash issues11.0 Configuration Problems 5%11.1 Input issues12.0 Search Problems 5%12.1 Search issues12.2 Job inspector13.0 Deployment Problems 5%13.1 Forwarding issues13.2 Deployment server issues14.0 Large-scale Splunk Deployment Overview 5%14.1 Identify Splunk server roles in clusters14.2 License Master configuration in a clustered environment15.0 Single-site Indexer Cluster 5%15.1 Splunk single-site indexer cluster configuration16.0 Multisite Indexer Cluster 5%16.1 Splunk multisite indexer cluster overview16.2 Multisite indexer cluster configuration16.3 Cluster migration and upgrade considerations17.0 Indexer Cluster Management and Administration 7%17.1 Indexer cluster storage utilization options17.2 Peer offline and decommission17.3 Master app bundles17.4 Monitoring Console for indexer cluster environment18.0 Search Head Cluster 5%18.1 Splunk search head cluster overview18.2 Search head cluster configuration19.0 Search Head Cluster Management and Administration 5%19.1 Search head cluster deployer19.2 Captaincy transfer19.3 Search head member addition and decommissioning20.0 KV Store Collection and Lookup Management 3%20.1 KV Store collection in Splunk clusters

Skills

Reviews