Splunk IT Service Intelligence
Grow your knowledge of monitoring mission-critical services with Splunk IT Service Intelligence, including architecture, deployment planning, service design, notable events, glass tables, and deep dives.
Certification Roadmap
1Module 1-2: ITSI Architecture & Deployment Planning
Understand the architecture and planning requirements for a stable ITSI deployment.
ITSI Architecture
Core components, prerequisites, single-instance vs distributed, resource planning
Explore ITSI core components, deployment prerequisites, single-instance vs distributed models, and resource planning for KPI search workloads.
Deployment Planning
Installation sequencing, app dependencies, HA preparation, upgrade/migration
Plan installation sequencing, manage app dependencies, prepare for high availability and scaling, and plan upgrade and migration paths.
Operational Readiness
Index/storage planning, search scheduling, content governance, runbooks
Plan index and storage requirements, configure search scheduling, establish content governance, and create rollback runbooks for production deployments.
2Module 3-4: Service Design & Implementation
Model mission-critical services and align KPIs, entities, and dependencies to business outcomes.
Service Modeling
Service trees, entity/dependency concepts, template-driven design
Understand service, entity, and dependency concepts, build service trees, map components to business services, and apply template-driven design.
KPI Design
KPI selection, adaptive thresholds, anomaly detection, search-backed KPIs
Select meaningful KPIs, configure adaptive thresholds, set up anomaly detection, and build search-backed KPI configurations.
Implementation Workflows
Import tools, service templates, health scoring, change control
Use import tools and service templates, configure health scoring, and manage change control processes for ongoing service updates.
3Module 5-6: Notable Events & Episode Review
Configure alerting, event aggregation, and review workflows that support operations teams.
Notable Event Design
Creating notables, severity/urgency models, KPI state correlation, action rules
Create notable events, define severity and urgency models, correlate notables with KPI states, and configure action rules.
Episode Review
Aggregation policies, analyst triage, assignment/ownership, deduplication
Configure aggregation policies, establish analyst triage workflows, manage assignment and ownership, and reduce duplicate alerts.
Event Management Tuning
Alert storm reduction, threshold tuning, incident process integration
Reduce alert storms, tune thresholds, integrate with incident management processes, and operationalize event workflows.
4Module 7-8: Glass Tables & Deep Dives
Build rich visualizations and investigation views for operators and service owners.
Glass Table Development
Layout design, service health/KPI elements, executive and operations views
Design glass table layouts, add service health and KPI elements, configure interactivity, and create both executive and operations-level views.
Deep Dive Configuration
Lane/swim lane design, KPI correlation over time, root-cause analysis
Design lane and swim lane layouts, correlate KPIs over time, support root-cause analysis, and optimize deep dives for team usability.
Visualization Best Practices
Actionable views, color/threshold consistency, reusable design standards
Build actionable views, maintain color and threshold consistency, optimize performance, and establish reusable visualization design standards.
5Module 9-10: Operational Management & Tuning
Administer ITSI in production and keep service monitoring accurate and sustainable.
ITSI Administration
User roles, content lifecycle, backup/upgrade, monitoring ITSI health
Manage user roles and permissions, maintain content lifecycle, perform backup and upgrade operations, and monitor ITSI platform health.
KPI & Service Tuning
Threshold tuning, health validation, search schedule optimization
Tune KPI thresholds, validate service health accuracy, optimize search schedules, and control KPI sprawl in growing environments.
Troubleshooting
Broken KPIs, missing entities, notable/episode issues, latency
Diagnose broken KPIs, resolve missing entity issues, fix notable and episode problems, and address glass table and deep dive latency.
6Module 11-12: Capstone & Exam Prep
Bring ITSI architecture, service design, and operations together in a practical final project.
ITSI Capstone Project
Mission-critical service model, KPIs, glass tables, notable event workflows
Design a complete mission-critical service model with KPIs, thresholds, glass tables, deep dives, and notable event workflows end to end.
Practice Exams
Full-length ITSI mock tests, scenario questions, gap analysis
Attempt full-length ITSI mock tests, work through scenario-based questions, analyze topic gaps, and review detailed answer explanations.
Final Review
Architecture recap, glass table workshop, operational pitfalls, expert Q&A
Recap architecture and service design, run a glass table and deep dive workshop, review operational pitfalls, and conduct expert Q&A.
Ready to Master this Track?
Get training schedules, role-based pathways, and expert guidance for your certification journey. Our industry-recognized mentors will guide you from fundamentals to professional level.
Program Details
Duration
8-12 Weeks
Mode
Live (Online)
Experience Level
Advanced