Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Sovereignty in Open-Source Search and Analytics
- Elastic license changes and resulting forks.
- Feature parity between OpenSearch and Elasticsearch in 2025-2026.
- Use cases: enterprise search, log analytics, SIEM, and observability.
Cluster Architecture
- Node roles: master, data, coordinating, and ingest nodes.
- Security plugin configuration: TLS internode communication, certificates, and PKI.
- Preventing split-brain scenarios: discovery.seed_hosts and minimum master node settings.
Data Ingestion
- REST API indexing, bulk loading, and mapping definitions.
- Pipelines using Beats, Fluent Bit, and Logstash.
- Using the OpenTelemetry Collector for traces and metrics.
Search and Dashboards
- Query DSL concepts: match, term, range, aggregations, and nested fields.
- Creating visualizations and dashboards in OpenSearch Dashboards.
- SIEM applications: alert rules and anomaly detection.
Index Management
- Index Lifecycle Management (ILM): rollover, shrinking, and deletion.
- Implementing hot-warm-cold architectures.
- Optimizing mappings and text analysis.
Security and Access Control
- Role-based access control (RBAC) involving users, roles, and tenants.
- Authentication via SAML and OpenID Connect.
- Document-level security and field masking.
Backup and Recovery
- Configuring snapshot repositories on MinIO, S3, or NFS.
- Automating snapshots using Curator or ISM.
- Restoring specific indices and performing cluster-wide disaster recovery.
Requirements
- Familiarity with search engines and inverted indexes.
- Proficiency with REST APIs and JSON.
- Basic Linux administration skills, including systemd, logging, and package management.
Target Audience
- Search and log analytics engineers.
- Teams transitioning away from managed Elasticsearch or Splunk.
- Security analysts developing sovereign SIEM backends.
14 Hours
Testimonials (1)
the trainer was very good and made the training perfect for my needs
