Planning, Deploying, and Configuring Splunk Enterprise Security

Focused View

Joe Abraham

1:37:24

116 View

0. Course Overview

0. Course Overview.mp4

02:26

1. Designing a Splunk Enterprise Security Deployment

0. Introduction.mp4

02:22

1. Course Overview.mp4

02:35

2. Indexer Functionality and Design.mp4

03:31

3. Designing a Splunk Enterprise Security Deployment.mp4

05:13

4. Ingesting Data into Splunk Enterprise Security.mp4

06:25

5. Data Models and Acceleration Overview.mp4

02:27

6. Splunk Enterprise Security Requirements.mp4

04:06

7. Other Design Considerations.mp4

02:41

2. Planning and Preparing for Splunk Enterprise Security

0. Be Prepared.mp4

03:05

1. Data Input Planning.mp4

06:16

2. Installation Prerequisites.mp4

04:20

3. Install Splunk Enterprise Security.mp4

05:31

4. Splunk Certificates.mp4

03:29

5. Search Head Clustering.mp4

04:43

6. CIM Data Mapping.mp4

04:43

7. Post Installation.mp4

02:13

3. Configuring Splunk Enterprise Security

0. Introduction.mp4

04:28

1. Splunk ES Initial Configuration.mp4

03:59

2. Additional Configuration Options.mp4

07:06

3. Splunk ES Users and Roles.mp4

06:38

4. Learning About Settings and Menus.mp4

02:59

5. Splunk ES Data Models.mp4

03:04

6. Lets Wrap!.mp4

03:04

Description

Splunk Enterprise Security is a premium application used within the Splunk deployment to help with SOC operations. This course will teach you how to plan for, design, and deploy the application to use in your environment.

What You'll Learn?

Splunk Enterprise Security (ES) solves many problems within our SOCs including efficient operations. In this course, Planning, Deploying, and Configuring Splunk Enterprise Security, you’ll learn how to get this application installed and configured quickly. First, you’ll explore the design process and learn how all of the design considerations in a Splunk ES deployment. Next, you’ll discover how to prepare your environment for a Splunk Enterprise Security deployment. Finally, you’ll learn how to configure the tool and all of the applicable data modifications you’ll need to make. When you’re finished with this course, you’ll have the skills and knowledge of Splunk Enterprise Security needed to get it up and running.

More details

User Reviews

Rating

average 0

Total votes0

Focused display

Windows Server

Joe Abraham

Instructor's Courses

Joe Abraham, CCIE #62417, is a Network Security Consultant working in the public sector space, assisting customers develop and implement functional and secure network architectures. He graduated from Excelsior College with an M.S. in Cybersecurity and a B.S. in Information Technology (Network Management). He currently holds many IT certifications to include CCIE, CISSP, GSEC, and CCNP Security. He is also a member of the GIAC Advisory Board. Joe is a mentor to IT professionals and a blogger who spends his time either with his wife and three children, exercising, researching and writing about technology, or learning new technologies. Spending much of his experience helping to train and educate IT professionals, he is passionate about teaching and always strives to be a positive influence in the IT field.

Pluralsight

View courses Pluralsight

Pluralsight, LLC is an American privately held online education company that offers a variety of video training courses for software developers, IT administrators, and creative professionals through its website. Founded in 2004 by Aaron Skonnard, Keith Brown, Fritz Onion, and Bill Williams, the company has its headquarters in Farmington, Utah. As of July 2018, it uses more than 1,400 subject-matter experts as authors, and offers more than 7,000 courses in its catalog. Since first moving its courses online in 2007, the company has expanded, developing a full enterprise platform, and adding skills assessment modules.