Splunk Different
2 likes817 views
Rob Frazier discusses his experience discovering the power of Splunk beyond simple log aggregation. He found that Splunk enabled operational intelligence by allowing correlation of multiple logs and system metrics. This revealed hidden issues and significantly reduced troubleshooting times. Splunk can analyze data from any source and uncover new insights through creative exploration of different contexts and correlations within the data. Splunk unleashes hidden value in existing machine and system data.
Ad
More Related Content
Similar to Splunk Different (20)
More from Splunk (20)
Ad
Recently uploaded (20)
Ad
Splunk Different
- 1. Copyright © 2015 Splunk Inc. “Splunk Different” Rob Frazier, Concanon Certified Splunk Architect, Professional Consultant
- 2. 2 About Concanon • Consulting arm of the Scianta Analytics group • Splunk professional services and reseller partner • Expertise in Big Data and Business Analytics
- 3. 3 Rob’s Voyage of Splunk Discovery • Rob Frazier, Certified Splunk Architect & Professional Consultant – Started as Security Guy – Worked for an Enterprise with performance struggles that viewed Splunk as a “log aggregator” – Used “*Nix” app & solved initial problem • Experimented with reverse-engineered dashboards • And Voila! – a Splunk Analyst was born
- 4. 4 Like Aladdin, I Found a Whole New World • Data opens the doors to the “magic carpet” of Operational Intelligence (OI) • Suddenly, I was able to: – Correlate multiple logs – Compare CPU usage, memory, network latency storage – See all through one pane of glass “Expand your horizons beyond your immediate use case.”
- 5. 5 Data Riches in a New World • With Operational Intelligence, hidden secrets turn into discoveries • Correlating networks discovered latency bottle necks • Tracking logs pinpointed issues down to the building (and sometimes floor) • Troubleshooting shaved break fixes from hours to minutes
- 6. 6 So What Is Splunk? • Splunk is more than: – a log aggregrator – a single use-case fix • Splunk is the Data Platform • Gathers any and all data – If it creates logs, it will go into Splunk • Once inside Splunk, view the data from 360 degrees, every angle, any context • Data already being collected applied in creative ways brings business value/impact • Go even farther with Java What can you do with Splunk & Java? Anything you can imagine!
- 7. 7 Splunk Value • Digital devices create logs – From super computers to traffic signals, baby monitors to car engines, elevators, smart appliances • Splunk log analysis “out of the box” helps keep your systems running and healthy • Added value comes when you start to look at data – context - collection and correlation with other devices – timing - what was happening at the same time, leading up to, or following events
- 8. 8 Splunk-oration Spans Industries: Manufacturing • Large Manufacturer set up high availability Splunk instance on two continents – Fed manufacturing data into Hadoop (Hunk on front end) – Found causes of defects faster • They were able to: – Find and fix machines that should be going “whompa whompa whompa whompa” but instead went “whompa whompa *click* whompa whompa” – Predict defects in products before they reached the customer – Learn from machinery when maintenance is needed (planes, trains, automobiles), IC chips, robots
- 9. 9 Splunk-oration for Security Ninjas • Installed Splunk ES – Data Driven Security Operations Center – Great Side effects • Critical App, fixed in 20 minutes • Maintenance data fed into Splunk • Operational Intelligence from Security Intelligence • Maximum ROI
- 10. 10 Splunk-oration for the Internet of Things • Network Access Solution – IoT devices like cameras, door alarms, vaults, DVRs - don’t behave like laptops, workstations – BYOD such as phones, tablets – Gaps in existing commercial security appliances • Splunk Correlation and Analysis – Use data from security vendor devices – Establish patterns of correlation, behaviors – Use weighted scores for predictive analysis – Know if a device is an IoT device you want on your network, and what is a foreign device you don’t
- 11. 11 Splunk-oration for Smart Buildings • Resort Hotel Customer • Tracked maintenance and security of hotel rooms – Doors card key locks working, door shut or ajar – A/C ok – Elevators operating correctly • Enhanced customer experience • By-product: reduced operating cost for energy and maintenance
- 12. 12 Splunk-oration for Telcos (Drive Marketing and Revenue Opps) • Large Telco in Europe uses Splunk to: – Monitor wireless networks health and performance – See valuable info from connected devices – Target ads based on user behavior to drive sales – Increase revenue from roaming users – Gain usable marketing info from user patterns on mobile devices, websites visited
- 13. 13 “Splunk Different” – Find Your Gold Mines • Collecting logs is like mining for gold – tons of ore >> ounces of gold • Splunk mines the tons of ore in the indexers • Searches extract the gold • Splunk-spectors search for the gold in the data • You strike it rich when you find new contexts and correlation that reveal insight and information about your systems, devices, customers and business “Data is the raw material; you build the machine that mines gold out of it.”
- 14. 14 Where Will Your Data Take You Today? • Splunk is more than a logging tool – it is a data analysis platform • Splunk Different – What data do you have? – How do you use it? – Find new contexts and content from correlations • Splunk is limited only by imagination • The information is there for you to discover
- 15. 15 Become a Splunk-overer • Splunk education programs – Delivered anywhere via webex – No travel, half-day classes – Minimum schedule impact, maximum work value • Splunkconf – Hogwarts for data wizards – New ways to find new value – Fabulous new use cases Splunk Yourself Minecraft Brewing with Splunk Internet of Things Data Science
- 16. 16 Expand the Splunk Universe • Splunk Universe – Apps – Answers – Premium Apps – Docs
- 17. Thank You