Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
Sovereignty in Open-Source Search and Analytics
- Impact of Elastic license modifications and subsequent forks.
- Comparative feature analysis of OpenSearch versus Elasticsearch for 2025-2026.
- Application scenarios: enterprise search, log analysis, SIEM, and observability.
Cluster Architecture
- Node roles: master, data, coordinating, and ingest functions.
- Security plugin configuration: intra-node TLS, certificates, and PKI.
- Preventing split-brain issues via discovery.seed_hosts and minimum master node settings.
Data Ingestion
- Indexing via REST API, bulk data loading, and defining mappings.
- Pipelines utilizing Beats, Fluent Bit, and Logstash.
- Processing traces and metrics with the OpenTelemetry Collector.
Search Capabilities and Dashboards
- Query DSL components: match, term, range, aggregations, and nested field handling.
- Creating visualizations and dashboards in OpenSearch Dashboards.
- SIEM implementations: configuring alert rules and anomaly detection.
Index Management
- Index Lifecycle Management (ILM): rollover, shrinking, and deletion strategies.
- Designing hot-warm-cold data architectures.
- Optimizing mappings and refining text analysis.
Security and Access Governance
- Implementing RBAC through users, roles, and tenant isolation.
- Authentication integration using SAML and OpenID Connect.
- Enforcing document-level security and field-level data masking.
Backup and Restoration
- Configuring snapshot repositories for MinIO, S3, or NFS.
- Automating snapshot processes using Curator or ISM.
- Restoring specific indices and executing cluster-wide disaster recovery.
Requirements
- Familiarity with search engine mechanics and inverted index structures.
- Proficiency in interacting with REST APIs and handling JSON data.
- Foundational Linux administration skills, including systemd, log management, and package handling.
Target Audience
- Professionals focused on search and log analytics.
- Organizations aiming to replace managed Elasticsearch or Splunk deployments.
- Security specialists developing independent SIEM infrastructure.
Testimonials (1)
the trainer was very good and made the training perfect for my needs
