Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
Open-Source Search and Analytics Sovereignty
- Elastic license changes and subsequent forks.
- Feature comparison between OpenSearch and Elasticsearch in 2025-2026.
- Application scenarios: enterprise search, log analytics, SIEM, and observability.
Cluster Architecture
- Node roles: master, data, coordinating, and ingest.
- Security plugin details: TLS internode communication, certificates, and PKI.
- Preventing split-brain scenarios via discovery.seed_hosts and minimum master node configurations.
Data Ingestion
- Indexing via REST API, bulk loading, and mapping definitions.
- Pipelines using Beats, Fluent Bit, and Logstash.
- Collecting traces and metrics with the OpenTelemetry Collector.
Search and Dashboards
- Query DSL elements: match, term, range, aggregations, and nested fields.
- Creating visualizations and dashboards in OpenSearch Dashboards.
- SIEM applications: alert rules and anomaly detection.
Index Management
- Index Lifecycle Management (ILM): rollover, shrinking, and deletion.
- Hot-warm-cold data architecture.
- Mapping optimization and text analysis techniques.
Security and Access Control
- Role-Based Access Control (RBAC) involving users, roles, and tenants.
- Authentication via SAML and OpenID Connect.
- Document-level security and field masking.
Backup and Recovery
- Snapshot repositories on MinIO, S3, or NFS.
- Automating snapshots with Curator/ISM.
- Restoring specific indices and executing cluster-wide disaster recovery.
Requirements
- Foundational knowledge of search engines and inverted indexes.
- Proficiency with REST APIs and JSON.
- Basic Linux administration skills, including systemd, logging, and package management.
Target Audience
- Search and log analytics engineers.
- Teams migrating away from managed Elasticsearch or Splunk.
- Security analysts developing sovereign SIEM backends.
Testimonials (1)
the trainer was very good and made the training perfect for my needs
