Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Open-Source Search and Analytics Sovereignty
- Impact of Elastic licensing changes and the rise of forks.
- Feature parity comparison between OpenSearch and Elasticsearch in 2025-2026.
- Key use cases: enterprise search, log analytics, SIEM, and observability.
Cluster Architecture
- Node roles: master, data, coordinating, and ingest.
- Security plugin configuration: internode TLS, certificates, and PKI.
- Preventing split-brain scenarios via discovery.seed_hosts and minimum master node settings.
Data Ingestion
- Indexing via REST API, bulk data loading, and defining mappings.
- Utilizing Beats, Fluent Bit, and Logstash pipelines.
- Implementing OpenTelemetry Collector for traces and metrics.
Search and Dashboards
- Query DSL: match, term, range, aggregations, and nested fields.
- Creating visualizations and dashboards in OpenSearch Dashboards.
- SIEM applications: configuring alert rules and anomaly detection.
Index Management
- Index Lifecycle Management (ILM): rollover, shrinking, and deletion.
- Designing hot-warm-cold architectures.
- Optimizing mappings and text analysis.
Security and Access Control
- Implementing RBAC using users, roles, and tenants.
- Authentication via SAML and OpenID Connect.
- Enforcing document-level security and field masking.
Backup and Recovery
- Configuring snapshot repositories to MinIO, S3, or NFS.
- Automating snapshots with Curator or ISM.
- Restoring specific indices and executing cluster-wide disaster recovery.
Requirements
- Familiarity with search engines and inverted indexes.
- Working knowledge of REST APIs and JSON.
- Foundational Linux administration skills, including systemd, log management, and package handling.
Target Audience
- Search and log analytics professionals.
- Teams migrating away from managed Elasticsearch or Splunk solutions.
- Security analysts developing sovereign SIEM backends.
14 Hours
Testimonials (1)
the trainer was very good and made the training perfect for my needs
