Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Promoting Sovereignty in Open-Source Search and Analytics Infrastructure
- Evolutions in licensing frameworks and the emergence of independent software forks.
- Assessment of feature equivalence between OpenSearch and Elasticsearch projected for 2025–2026.
- Application domains: enterprise information retrieval, log data analytics, Security Information and Event Management (SIEM), and system observability for government operations.
Cluster Infrastructure Design
- Node functions: master-eligible nodes, data storage nodes, coordinating nodes, and ingest processors.
- Security protocols: Transport Layer Security (TLS) for inter-node communication, certificate management, and Public Key Infrastructure (PKI).
- Mitigation of split-brain scenarios: configuration of discovery seed hosts and minimum master node thresholds.
Data Acquisition and Ingestion
- RESTful API indexing methods, bulk data loading procedures, and mapping schema definitions.
- Data pipeline integration using Beats, Fluent Bit, and Logstash for government agencies.
- Utilization of the OpenTelemetry Collector for telemetry traces and performance metrics.
Information Retrieval and Visualization
- Structured Query Language (DSL) capabilities: match queries, term filters, range bounds, aggregations, and nested field handling.
- OpenSearch Dashboards implementation for data visualization and executive reporting.
- SIEM applications: configuration of alert rules and identification of anomalous activities.
Index Lifecycle Management
- Automated lifecycle policies including index rollover, segment shrinking, and archival deletion.
- Implementation of hot-warm-cold storage tiering architectures.
- Optimization of mapping schemas and text analysis processes.
Security Posture and Access Governance
- Role-Based Access Control (RBAC) frameworks utilizing users, roles, and multi-tenant isolation.
- Enterprise authentication via SAML and OpenID Connect standards for government systems.
- Granular document-level security and dynamic field masking to protect sensitive data.
Data Preservation and Disaster Recovery
- Snapshot repositories configured on MinIO, AWS S3, or Network File System (NFS) storage.
- Automation of snapshot operations via Curator or Index State Management (ISM).
- Procedures for restoring specific indices and executing cluster-wide disaster recovery plans for government continuity.
Requirements
**Prerequisites**
* Comprehensive knowledge of search engine architectures, including inverted index mechanisms.
* Practical expertise in utilizing RESTful APIs and JSON data interchange formats.
* Foundational competency in Linux system administration, encompassing systemd service management, log analysis, and package handling.
**Target Audience**
* Engineering personnel specializing in search and log analytics infrastructure.
* Operational teams transitioning from managed Elasticsearch or Splunk solutions to sovereign environments for government.
* Security analysts developing independent Security Information and Event Management (SIEM) backends.
14 Hours
Testimonials (1)
the trainer was very good and made the training perfect for my needs
