TN-430: Elasticsearch Engineer (ELK)

Course Overview:

Getting started with the Elastic Stack (ELK), optimizing search performance and building efficient clusters. Ingest and process data, writing complex search requests and response utilization, scaling of clusters up or down, managing indices in large clusters and multiple clusters, management of clusters and troubleshooting recommendations.

Attendees to TN-430: Elasticsearch Engineer (ELK) will receive TechNow approved course materials, expert instruction, and prepare you to take ELK exam.

 

Document Flow Chart iconsm

Dates/Locations:

No Events

Duration: 5 Days

Course Outline:

Data Management

  • Define an index that satisfies a given set of requirements
  • Define and use an index template for a given pattern that satisfies a given set of requirements
  • Define and use a dynamic template that satisfies a given set of requirements
  • Define an Index Lifecycle Management policy for a time-series index
  • Define an index template that creates a new data stream

Searching Data

  • Write and execute a search query for terms and/or phrases in one or more fields of an index
  • Write and execute a search query that is a Boolean combination of multiple queries and filters
  • Write an asynchronous search
  • Write and execute metric and bucket aggregations
  • Write and execute aggregations that contain sub-aggregations
  • Write and execute a query that searches across multiple clusters
  • Write and execute a search that utilizes a runtime field

Developing Search Applications

  • Highlight the search terms in the response of a query
  • Sort the results of a query by a given set of requirements
  • Implement pagination of the results of a search query
  • Define and use index aliases
  • Define and use a search template

Data Processing

  • Define a mapping that satisfies a given set of requirements
  • Define and use a custom analyzer that satisfies a given set of requirements
  • Define and use multi-fields with different data types and/or analyzers
  • Use the Reindex API and Update By Query API to reindex and/or update documents
  • Define and use an ingest pipeline that satisfies a given set of requirements, including the use of Painless to modify documents
  •   Define runtime fields to retrieve custom values using Painless scripting

Cluster Management

  • Diagnose shard issues and repair a cluster’s health
  • Backup and restore a cluster and/or specific indices
  • Configure a snapshot to be searchable
  • Configure a cluster for cross-cluster search
  • Implement cross-cluster replication

 

Comments

Latest comments from students

Liked the class?  Then let everyone know!

Observations of Instructor Led Training with Real Hardware

TechNow has heard many students talk about virtualized/remote training that TechNow Does Not Do.  While training our most recent offering of PA-215: Palo Alto Networks Firewall Essentials FastTrack a student told his story of how he endend up in our course.  His story we have heard for other technologies like Cisco, VMware, BlueCoat and other products.

A large percentage of training is moving to the virtualized/remote lab environments.  Students are asked to use some variant of remote access software and remote into the training company's lab environment. Our student in our Palo Alto Networks Firewall course informed us that he went to a very costly offering of that course from the vendor and was not able to perform any labs.  There were either network connectivity issues, or issues with the remote access software, or other problems.  The whole training experience was very frustrating and not productive.

We keep our labs open to students if they would like after hours, or before hours access.  Repeatedly going through a lab engrains that knowledge for later recall.  Touching hardware is so critical in understanding the problems that arise when a cable comes loose, or a cable gets plugged in the wrong port.  There are other scenarios such as just pulling the power cable, or turning off a power strip, or accidently overwriting a configuration.  These disaster scenarious requires hands-on physical access to hardware.  Preventing and recovering from disasters is what it's all about, and that requires hands-on, instructor led, real hardware.

Post-Class Survey

After you "Send" this form, within 30 seconds, status will be provided at the bottom of the form

Acceptance to allow Your Name/Screen Name to be associated with course comments on website. (Required)

After you "Send" this form, within 30 seconds, status will be provided at the bottom of the form

in