An Introduction to Splunk IT

Service Intelligence (ITSI)

Brief introduction to ITSI’s goals, use cases
and a demo

Alok Bhide | Director of Product Management, ITSI

September 26, 2017 | Washington, DC
 Forward-Looking Statements
During the course of this presentation, we may make forward-looking statements regarding future events or
the expected performance of the company. We caution you that such statements reflect our current
expectations and estimates based on factors currently known to us and that actual events or results could
differ materially. For important factors that may cause actual results to differ from those contained in our
forward-looking statements, please review our filings with the SEC.

The forward-looking statements made in this presentation are being made as of the time and date of its live
presentation. If reviewed after its live presentation, this presentation may not contain current or accurate
information. We do not assume any obligation to update any forward looking statements we may make. In
addition, any information about our roadmap outlines our general product direction and is subject to change
at any time without notice. It is for informational purposes only and shall not be incorporated into any contract
or other commitment. Splunk undertakes no obligation either to develop the features or functionality
described or to include any such feature or functionality in a future release.
Splunk, Splunk>, Listen to Your Data, The Engine for Machine Data, Splunk Cloud, Splunk Light and SPL are trademarks and registered trademarks of Splunk Inc. in
the United States and other countries. All other brand names, product names, or trademarks belong to their respective owners. © 2017 Splunk Inc. All rights reserved.
 About Me
Director of Product Management

Alok Bhide
▶ 6+ years at Splunk
▶ Product Owner of several solutions,
apps and add-ons, focused on IT Ops
▶ Part of the IT Markets Group
▶ With ITSI From the start 4 years ago
 Rethink and Improve How IT Operates
Using Artificial Intelligence for IT Operations

0101101
0010101

Traditional IT Data Driven IT

▶ Structured data ▶ Structured and unstructured data
▶ Brittle tools and integrations ▶ Robust data integrations

▶ Obsession with “faults” and “traps” ▶ Real-time insights from big data

▶ Focus on components parts ▶ Focus on the whole service

▶ Search oriented ▶ Machine learning-driven analytics

 Applications, business/mission services

Web Server (Apache, TomCat)

App Server (WebLogic, JBoss EAP, WebSphere)

How IT Operates Database (Oracle, SQL Server, MySQL)

Today: IT Stack POV Guest OS (Windows/Linux/*Nix)

Hypervisor (ESX, HyperV, Citrix)

Physical Server (Dell, HP, CISCO blades or servers)

SAN/NAS Storage (EMC, NetApp)

Network
 Service/App Claims

Status
Web Server (1,2,3,4,5,6,7,8,9,10…N) 100%

App Server (1,2,3,4,5,6,7,8,9,10…N) 100%

What is Needed: Database (1,2,3,4,5,6,7,8,9,10…100) 98%

Service/App POV Guest OS (1,2,3,4,5,6,7,8,9,10…N) 100%

VM/Hypervisor (1,2,3,4,5, …N) 95%

Physical Server (1,2,3,4,5,6,7,8,9,10…N) 100%

SAN/NAS Storage (1,2,3,4,5,6,7,8,9,10…N) 100%

Network 100%
 Service/App Claims Outage!

Status
Web Server (1,2,3,4,5,6,7,8,9,10…N) 100%

App Server (1,2,3,4,5,6,7,8,9,10…N) 100%

What is Needed: Database (1,2,3,4,5,6,7,8,9,10…100) 98%

Service/App POV Guest OS (1,2,3,4,5,6,7,8,9,10…N) 100%

VM/Hypervisor (1,2,3,4,5, …N) 95%

Physical Server (1,2,3,4,5,6,7,8,9,10…N) 100%

SAN/NAS Storage (1,2,3,4,5,6,7,8,9,10…N) 100%

Network 100%
 You Need an Approach That…
Provides easy and seamless access to all data of any type and volume

1 Delivers
service context
to prioritize investigation

2 Understands
time-based behavior
based on historical patterns

3 Helps you find what’s broken

quickly with human-scale
actionable alerts
 Artificial Intelligence for IT Operations
Powered by machine learning and analytics for real-time service insights,
simplified operations and root-cause isolation
 Splunk ITSI Multiple Use Case, One Solution

Service Insights Event Analytics

• Dynamic Service Maps • Service context on events

• Search based KPIs • ML clustering of events for less noise
• ML for thresholding and anomalies • Flexible aggregation policies
• Cross environment views • Conditional actions
• Deep dive service diagnostics • Management capabilities
• Cross KPI alerting
 Splunk IT Service Intelligence
Data-driven service monitoring and analytics

Dynamic At-a-Glance Early Warning Simplified Incident

Event Analytics
Service Models Problem Analysis on Deviations Workflows

Splunk IT Service Intelligence

Platform for Operational Intelligence

Common
Time-Series Index Schema-on-Read Data Model
Information Model
Splunk ITSI Demo
 Splunk IT Service Intelligence

Strategic, Data-Centric
Accelerated
Business-Centric Approach to Service
Value for IT
View of IT Mapping
 How Do You Get Splunk ITSI?
Online Sandbox Value Assurance

7 days of access to a free, personal Engage in a proof-of-concept to

environment in the cloud, with index your data and experience
prepopulated data Splunk ITSI
 Splunk-Sponsored Guided Workshop

What is it? Define methods for:

▶ 1-day on-site workshop ▶ Proactive service
▶ Tightly linked with value monitoring
▶ Collaborative approach ▶ Reduced risk and
failures
▶ Build your own Splunk
ITSI Glass Table ▶ Faster issue resolution
▶ Increased business
performance
Q&A
 © 2017 SPLUNK INC.

Don't forget to rate this session in the

.conf2017 mobile app
 Want to Learn More About ITSI at .conf2017?
▶ Ready, Set, Go! Learn From Others - The First 30 Day Experiences of ITSI Customers: Tuesday, September 26th, 201712:05 PM- 12:50 PM Room Salon C

▶ Splunk ITSI Overview: Tuesday, September 26th, 2017 1:10 PM-1:55 PM Room 147 AB
▶ PWC: End-to-End Customer Experience: Tuesday, September 26th, 2017 2:15 PM-3:00 PM Room 143ABC
Tuesday ▶ RSI: Operational Intelligence: How to go From Engineering to Operationalizing IT Service Intelligence Where the Rubber Meets the Road:
September Tuesday, September 26th, 2017 2:15 PM-3:00 PM Room147AB
26th, 2017 ▶ Cardinal Health: Ensuring Customer Satisfaction Through End-To-End Business Process Monitoring Using Splunk ITSI:

Tuesday, September 26th, 20173:30 PM-4:15 PM Room143ABC

▶ ITSI in the Wild - Why Micron Chose ITSI and Lessons Learned From Real World Experiences: Tuesday, September 26th, 2017 4:35 PM- 5:20 PM Room Salon C
▶ Event Management is Dead. Time Series Events are the Means to the End, not the End Itself. See How Event Analytics is Revolutionizing IT:
Wednesday, September 27th, 201711:00 AM-11:45 AM Ballroom C

Wednesday ▶ Triggering Alerting (xMatters) and Automated Recovery Actions from ITSI: Wednesday, September 27th, 2017 1:10 PM- 1:55 PM Room Salon C

September ▶ Leidos - Our Journey to ITSI: Wednesday, September 27th, 2017 2:15 PM-3:00 PM Room147AB

27th, 2017 ▶ How Rabobank's Monitoring Team Got a Seat at the Business Table by Securing Sustainability on Competitive Business Services Build on Splunk’s ITSI:
Wednesday, September 27th, 2:15-3:00pm Room 147AB
▶ Here Comes the Renaissance: Digital Transformation of the IT Management Approach: Wednesday, September 27th, 2017 3:30 PM-4:15 PM Room Salon C
▶ The ITSI ‘Top 20’ KPI’s: Thursday, September 28th, 2017 10:30 AM-11:15 AM Room Salon C
▶ Automation of Event Correlation and Clustering with Machine Learning Algorithms – An ITSI Tool:

Thursday Thursday, September 28th, 2017 11:35 AM- 12:20 PM Room Salon C

September ▶ Event Management is Dead. Time Series Events are the Means to the End, not the End Itself. See How Event Analytics is Revolutionizing IT:

28th, 2017 Thursday, September 28th 11:35 AM - 12:20 PM in Ballroom B

▶ IT Service Intelligence for When Your Service Spans Your Mainframe and Distributed ITSI:
Thursday, September 28th, 2017 1:20 PM-2:05 PM Room Salon C