TN-430: Elasticsearch Engineer (ELK)

Course Overview:

Getting started with the Elastic Stack (ELK), optimizing search performance and building efficient clusters. Ingest and process data, writing complex search requests and response utilization, scaling of clusters up or down, managing indices in large clusters and multiple clusters, management of clusters and troubleshooting recommendations.

Attendees to TN-430: Elasticsearch Engineer (ELK) will receive TechNow approved course materials, expert instruction, and prepare you to take ELK exam.

 

Document Flow Chart iconsm

Dates/Locations:

No Events

Duration: 5 Days

Course Outline:

Data Management

  • Define an index that satisfies a given set of requirements
  • Define and use an index template for a given pattern that satisfies a given set of requirements
  • Define and use a dynamic template that satisfies a given set of requirements
  • Define an Index Lifecycle Management policy for a time-series index
  • Define an index template that creates a new data stream

Searching Data

  • Write and execute a search query for terms and/or phrases in one or more fields of an index
  • Write and execute a search query that is a Boolean combination of multiple queries and filters
  • Write an asynchronous search
  • Write and execute metric and bucket aggregations
  • Write and execute aggregations that contain sub-aggregations
  • Write and execute a query that searches across multiple clusters
  • Write and execute a search that utilizes a runtime field

Developing Search Applications

  • Highlight the search terms in the response of a query
  • Sort the results of a query by a given set of requirements
  • Implement pagination of the results of a search query
  • Define and use index aliases
  • Define and use a search template

Data Processing

  • Define a mapping that satisfies a given set of requirements
  • Define and use a custom analyzer that satisfies a given set of requirements
  • Define and use multi-fields with different data types and/or analyzers
  • Use the Reindex API and Update By Query API to reindex and/or update documents
  • Define and use an ingest pipeline that satisfies a given set of requirements, including the use of Painless to modify documents
  •   Define runtime fields to retrieve custom values using Painless scripting

Cluster Management

  • Diagnose shard issues and repair a cluster’s health
  • Backup and restore a cluster and/or specific indices
  • Configure a snapshot to be searchable
  • Configure a cluster for cross-cluster search
  • Implement cross-cluster replication

 

Comments

Latest comments from students

Liked the class?  Then let everyone know!

CT-395: CySA+ Cybersecurity Analyst

 

Course Overview:

CT-395: CompTIA CySA+ Cybersecurity Analyst is for IT professionals looking to gain IT security analyst skills, and for those following the recommended skills pathway to achieve cybersecurity mastery. It provides a bridge between CompTIA Security+ (CT-325) and CompTIA Advanced Security Practitioner (CASP,CT-425), thus completing a certification path within the CompTIA family of certifications. As attackers have learned to evade traditional signature-based solutions, an analytics-based approach has become extremely important. CySA+ applies behavioral analytics to the IT security market to improve the overall state of security. The CompTIA Cybersecurity Analyst (CySA+) certification verifies that successful candidates have the knowledge and skills required to configure and use threat detection tools, perform data analysis and interpret the results to identify vulnerabilities, threats and risks to an organization, with the end goal of securing and protecting applications and systems within an organization. Let us help you bridge this gap, and leave you prepared for the certification exam (CS0-002).

TechNow is a CompTIA partner uses official CompTIA CySA+ curriculum.

Dates/Locations:

Date/Time Event
12/02/2024 - 12/06/2024
08:00 -16:00 		CT-395: CYSA+
TechNow, Inc, San Antonio TX

Duration: 5 Days

Course Objectives:

  • Threat Management
  • Vulnerability Management
  • Cyber Incident Response
  • Security Architecture and Tool Sets

Prerequisites: 

While there is no required prerequisite, the CompTIA CySA+ certification is intended to follow CT-325: Security+ or equivalent experience.  It is recommended for CompTIA CySA+ candidates to have the following:

  • 3-4 years of hands-on information security or related experience
  • Network+, Security+, or equivalent knowledge.

Comments

Latest comments from students

 

Liked the class?  Then let everyone know!

Artificial Intelligence

TechNow has been training IT, programming, and Cyber Security for over 28 years. Artificial Intelligence skills are being developed across many enterprises.

Here is our list of Artificial Intelligence and Machine Learning related courses.

in   

DevOps

TechNow has been training IT, programming, and Cyber Security for over 28 years. To stay competitive and to adequately secure an enterprise, organizations need to move towards the DevOps Model. DevOps breaks down barriers between the developer and operations teams to improve collaboration and communication.

DevOps is radically changing the way organizations design, build, deploy, and operate online systems. Development and Operations teams come together to move requirements through a continuous workflow.

DevOps leaders deploy hundreds of changes every day, utilizing Continuous Integration and Continuous Delivery to leave their competitors behind. As DevOps becomes commonplace, organizations need to evolve their security practices to the DevOps Model.

Here is our list of DevOps related courses.

in