As important and challenging as setting up an efficient Splunk environment is, it is equally important - and sometimes just as challenging - to ensure that you have taken adequate measures to fund and support your Splunk solution so that it continues to provide value well into the future. We'll address several of the most important points in this section.
Supporting your Splunk Deployment
Splunk support personnel
As a rule of thumb, Splunk recommends a minimum of three Splunk support personnel for any significant Splunk deployment. With the following roles and related training/certification and experience, these roles and duties can overlap or be altered depending on the needs of the organization and skill sets within...