Splunk SPLK-2002 考試大綱：

主題	簡介
主題 1	Splunk Troubleshooting Methods and Tools: Designed for the Splunk Administrator, this domain provides understanding of available Splunk diagnostic tools and resources essential for identifying and resolving issues effectively.
主題 2	Clustering Overview: This section is intended for the Splunk Administrator and provides knowledge about search head clustering and related storage needs that are not smart store-specific. It introduces key concepts essential for managing clustered environments.
主題 3	Search Head Cluster Management and Administration: Designed for the Splunk Administrator, this section covers day-to-day operations such as managing the deployer, handling captaincy, and maintaining or removing search head members.
主題 4	Indexer Cluster Management and Administration: This section assesses the Splunk Administrator’s skills in managing indexer clusters, including monitoring, peer management, app bundle handling, and storage utilisation strategies.
主題 5	Introduction: This section of the exam measures the skills of the Enterprise Solutions Architect and covers the foundational understanding of planning and executing a Splunk deployment. It introduces key concepts, including the definition of deployment plans and outlines the overall process.
主題 6	Configuration Problems: This domain evaluates the Splunk Administrator's understanding of input configuration issues that may arise during deployment or log collection stages.
主題 7	Licensing and Crash Problems: This section assesses the abilities of the Splunk Administrator to identify and resolve issues related to licensing limits and platform crashes during deployment and daily operations.
主題 8	Infrastructure Planning: Index Design: Designed for the Enterprise Solutions Architect, this section addresses how to design and size indexes correctly. It also covers estimating storage requirements unrelated to smart store configurations and understanding relevant apps for deployment.
主題 9	Search Head Cluster: Targeted at the Enterprise Solutions Architect, this domain explores the architecture and configuration of search head clusters, necessary for scaling searches across large deployments.
主題 10	KV Store Collection and Lookup Management: This final section measures skills of the Splunk Administrator in managing KV Store collections within clustered Splunk environments, supporting dynamic data storage and lookup functionalities.
主題 11	Search Problems: Aimed at the Splunk Administrator, this section explores challenges related to search performance and introduces the Job Inspector tool to investigate query-related problems.
主題 12	Large-scale Splunk Deployment Overview: This domain measures the Enterprise Solutions Architect’s ability to design and manage Splunk server roles and configure license masters effectively in clustered environments.
主題 13	Single-site Indexer Cluster: Intended for the Enterprise Solutions Architect, this section introduces the key aspects of configuring a Splunk single-site indexer cluster, covering essential operational settings.
主題 14	Multisite Indexer Cluster: This domain is designed for the Enterprise Solutions Architect and provides knowledge of multisite cluster configurations, including upgrades, migration, and redundancy planning.
主題 15	Project Requirements: This section evaluates the competencies of the Splunk Administrator and focuses on identifying environment-specific needs such as user volume and technical requirements. It includes the use of checklists and available resources to ensure all deployment needs are clearly understood.
主題 16	Forwarder and Deployment Best Practices: Aimed at the Splunk Administrator, this section covers best practices for designing the forwarder tier and managing Splunk components using deployment tools. It emphasises effective configuration management.
主題 17	Infrastructure Planning: Resource Planning: This domain assesses the expertise of the Enterprise Solutions Architect and deals with sizing considerations, hardware specifications, and storage needs for different Splunk components. It also considers security, privacy, and specialised sizing for apps like ES and ITSI.