When you enroll through our links, we may earn a small commission—at no extra cost to you. This helps keep our platform free and inspires us to add more value.
Splunk Enterprise Administration: Configuring Distributed Search
You will gain an understanding of how Splunk executes a search and how Splunk distributes a search across a set of indexers.
This Course Includes
pluralsight
0 (0 reviews )
1 hour 31 minutes 
english
Online - Self Paced
core courses
pluralsight
About Splunk Enterprise Administration: Configuring Distributed Search
Learning to configure a distributed search doesn't need to be difficult. In this course, Splunk Enterprise Administration: Configuring Distributed Search, you'll gain the ability to configure Splunk platform correctly for efficient searching. First, you'll explore the anatomy of a search. Next, you'll discover how Splunk separates search management and presentation layers from indexing and search retrieval layers. Finally, you'll learn what knowledge bundles are and how Splunk manages knowledge bundles. When you are finished with this course, you'll have the skills and knowledge of how to configure distributed search groups needed to scale options available for distributed search.
What You Will Learn?
- Course Overview : 1min.
- Understanding distributed search : 35mins.
- Configuring distributed search : 29mins.
- Scaling distributed search : 26mins.