Splunk for Cisco Integrated Infrastructure - SPLUNK Course Outline

(2 Days)


Splunk training covers how together, Splunk and UCS enable organizations to realize the potential of Operational Intelligence across the organization and gain real-time business insights that create a strategic advantage. The Splunk for Cisco Integrated Infrastructure training will cover how Splunk software scales to collect and index hundreds of terabytes of data per day, across multi-geography, multi-datacenter and cloud based infrastructures. Using Cisco’s Unified Computing System (UCS) Integrated Infrastructure for Big Data offers linear scalability along with operational simplification for single-rack and multiple-rack deployments. To facilitate faster and more predictable deployments, Cisco has published multiple reference architectures for Splunk software plus a comprehensive Cisco Validated Design that provides prescriptive, step-by-step guidance for deploying Splunk Enterprise on Cisco UCS. Lastly, the Cisco Splunk course will cover Splunk Apps and Add-Ons that provide ready-to-use functions for many Cisco Products and platforms. Find additional course details below.

Audience Profile

The primary audience for this course is as follows:

  • System Engineers
  • System Administrators
  • Architects
  • Channel Partners
  • Data Analysts


The knowledge and skills that a learner should have before attending this course are as follows: • Familiarity with Cisco Products

At Course Completion

Upon completing this course, the learner will be able to meet these overall objectives:

  • Describe how harnessing the power of your machine data enables you to make decisions based on facts, bot intuition or best guesses.
  • Reduce the time you spend investigating incidents by up to 90%.
  • Find and fix problems faster by learning new technical skills for real world scenarios.
  • Get started with Splunk Enterprise, from installation and data onboarding to running search queries to creating simple reports and dashboards.
  • Accelerate time to value with turnkey Splunk integrations for dozens of Cisco products and platforms.
  • Ensure faster, more predictable Splunk deployments with a proven Cisco Validated Design and the latest Cisco UCS server.

Course Outline

Module 1: Cisco Integrated Infrastructure for Big Data and Splunk

  • Lesson 1: What is Cisco CPA?
  • Lesson 2: Architecture benefits for Splunk
    • High Performance unified fabric connecting Splunk nodes and clusters
    • Rapid and easy deployment of Splunk clustered servers with Service profiles
    • Simplified management of large Splunk deployment
    • Integration of Splunk and Enterprise applications in single management/connectivity domain
    • Architectural Scalability
    • Reduced Capex/Opex up to 50% compared to traditional servers
    • Enterprise Service and Support through Cisco/Intel collaboration

  • Lesson 3: Components of IIBD and relationship to Splunk Architecture
    • Cisco UCS C240 M4 Rack Servers
    • Cisco Nexus 2200/2300 Series Fabric Extenders
    • Cisco Nexus 6200/6400 Series Fabric Interconnects
    • Smart Play configurations

  • Lesson 4: Cisco UCS Integrated Infrastructure for Big Data with Splunk Enterprise
  • Lesson 5: Splunk- Big Data Analytics:
    • CVD: Cisco UCS Integrated Infrastructure for Big Data with Splunk Enterprise
    • Solution Brief: Cisco UCS Integrated Infrastructure for Big Data with Splunk Enterprise
    • Lab: Attendees run Queries on Splunk, Capacity Planning on Splunk

  • Lesson 6: Solution Overview
    • Rack Configuration
    • Port Configuration on Fabric Interconnects
    • Configuration and Cabling for C240 M4 Rack Servers
    • Configuration and Cabling for C240 M4 Rack Server
    • Configuration and Cabling for S3260 Rack Server

  • Lesson 7: NFS Configurations for the Splunk Frozen Data Storage
  • Lesson 8: NFS Client Configurations on the Indexers

Module 2: Splunk- Start Searching

  • Lesson 1: Chargeback
  • Lesson 2: Reporting
  • Lesson 3: Building custom reports using the report builder

Module 3: Application Containers

  • Lesson 1: Understanding Application Containers

Module 4: Understanding Advanced Tasks

  • Lesson 1: Task Library & Inputs
  • Lesson 2: CLI & SSH Task
  • Lesson 3: Understanding Compound Tasks
  • Lesson 4: Custom Tasks

Module 5: Open Automation Troubleshooting

  • Lesson 1: UCS Director Restart
  • Lesson 2: Module Loading
  • Lesson 3: Report Errors
  • Lesson 4: Feature Loading
  • Lesson 5: Report Registration

Module 6: REST API- Automation

  • Lesson 1: UCS Director Developer Tools
  • Lesson 2: Accessing REST using a REST client
  • Lesson 3: Accessing REST using the REST API browser

Module 7: Open Automation SDK

  • Lesson 1: Overview
  • Lesson 2: Open Automation vs. Custom Tasks
  • Lesson 3: Use Cases

Module 8: UCS Director PowerShell API

  • Lesson 1: Cisco UCS Director PowerShell Console
  • Lesson 2: Installing & Configuring
  • Lesson 3: Working with Cmdlets

Module 9: Cloupia Script

  • Lesson 1: Structure
  • Lesson 2: Inputs & Outputs
  • Lesson 3: Design
  • Lesson 4: Examples

Lab Outline

  • Lab 1: Self Service Portal creation
  • Lab 2: Advanced Catalog Options
  • Lab 3: Designing an Advanced Workflow
  • Lab 4: Application Containers
  • Lab 5: SSH Scripting
  • Lab 6: Compound Task
  • Lab 7: PowerShell Scripting
  • Lab 8: Cloupia Script
  • Lab 9: Custom Tasks & the API