Visualizing and Alerting in Splunk Infrastructure Monitoring
Summary
​
This course assumes that you have completed the course Splunk Infrastructure Monitoring Fundamentals. It is targeted towards DevOps/SRE/Observability teams, Senior On-call Engineers, Onboarding and Monitoring Strategists and Developers. This 1-virtual day course describes ways to enhance your dashboards and alerts to help with troubleshooting. Find insights using analytics in charts and detectors. Create detectors for common use cases. All concepts are taught using lectures and scenario-based hands-on activities.
Description
-
Add information to dashboards and alerts for better troubleshooting
-
Find insights using analytics and appropriate rollups in charts and detectors
-
Create detectors for common use cases
​
​
Splunk Credit Value: 50
Duration: 4.5 hours
Time: 11am – 3.30 pm AEST
​
Objectives
​
Module 1 - Creating efficient Dashboards and Alerts
-
Add instructions to dashboards
-
Create single-instance dashboards
-
View events on dashboards
-
Configure local data links
-
Customize alert messages
-
Troubleshoot charts and alerts
​
Module 2 – Finding Insights Using Analytics
-
Finding total value across all sources
-
Combining plots in charts
-
View and alert on weekly, daily or hourly comparisons
-
Use percentages and ratios to understand trends
-
Apply analytic functions over moving and calendar time windows
-
Apply analytics functions to a subset of MTS in a signal
Module 3 – Detectors for Common Use Cases
-
Identify common issues with detectors
-
Troubleshoot a detector
-
Create detectors to monitor populations
-
Create non-flapping detectors
-
Monitor metrics with cyclic patterns
-
Monitor large number of sources
-
Monitor an ephemeral infrastructure
Prerequisites
-
Splunk Infrastructure Monitoring Fundamentals
Splunk Course Schedules and Timezones
Ingeniq Course are delivered live and in English and provide access to customers spanning multiple timezones.
​
Dates and times displayed for each course are relative to Australian Eastern Time (AET).
​
​
AM Marked Splunk Courses
AM marked courses start at AET 9:00am and finish at AET 1:30pm (4.5 hour sessions over 1 or more days) and are optimal for customers in the following countries and areas;
​
-
UTC+10 including Australia (East Coast)
-
UCT+11/+12 including New Zealand and the Pacific Islands
-
UTC-8 including USA (West Coast), Canada (West Coast)
-
UTC-7 including USA (Mid West)
PM Marked Splunk Courses
PM marked courses start at AEDT 12:00pm and are optimal for customers in the following countries and areas;
​
-
UTC+10 including Australia (East Coast)
-
UCT+11/+12 including New Zealand and the Pacific Islands
-
UTC-8 including USA (West Coast), Canada (West Coast)
-
UTC-7 including USA (Mid West)