Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Open-Source Search and Analytics Sovereignty
- Elastic license changes and subsequent forks.
- Feature parity between OpenSearch and Elasticsearch in 2025-2026.
- Use cases: enterprise search, log analytics, SIEM, and observability.
Cluster Architecture
- Node roles: master, data, coordinating, and ingest nodes.
- Security plugin features: TLS inter-node communication, certificates, and PKI.
- Avoiding split-brain scenarios via discovery.seed_hosts and minimum master node settings.
Data Ingestion
- REST API indexing, bulk loading, and mapping definitions.
- Pipelines utilizing Beats, Fluent Bit, and Logstash.
- OpenTelemetry Collector for handling traces and metrics.
Search and Dashboards
- Query DSL: match, term, range, aggregations, and nested fields.
- Visualizations and dashboards in OpenSearch Dashboards.
- SIEM use cases: alert rules and anomaly detection.
Index Management
- ILM (Index Lifecycle Management): rollover, shrinking, and deletion.
- Hot-warm-cold architecture implementation.
- Mapping optimization and text analysis techniques.
Security and Access Control
- RBAC configuration with users, roles, and tenants.
- SAML and OpenID Connect authentication methods.
- Document-level security and field masking.
Backup and Recovery
- Snapshot repositories for MinIO, S3, or NFS storage.
- Automating snapshots using Curator or ISM.
- Restoring specific indices and ensuring cluster-wide disaster recovery.
Requirements
- Familiarity with search engines and inverted indexes.
- Experience working with REST APIs and JSON.
- Basic knowledge of Linux administration: systemd, logs, and packages.
Target Audience
- Engineers specializing in search and log analytics.
- Teams transitioning away from managed Elasticsearch or Splunk solutions.
- Security analysts developing sovereign SIEM backends.
14 Hours
Testimonials (1)
the trainer was very good and made the training perfect for my needs
