SplunkLive! Utrecht 2018 - Customer presentation: Irdeto
1 like1,309 views
Irdeto is a global leader in digital platform security that protects media, entertainment, games, connected transport and IoT industries. It employs nearly 1,000 security experts across 15 locations covering 6 continents. Irdeto's vision is to build a secure future where people can embrace connectivity without fear. The document discusses Irdeto's service operations center and how it has evolved its monitoring framework over time to incorporate more application logs, metrics, and events into Splunk. It analyzes trends and anomalies to more effectively manage incidents. Future goals include adding more data sources into Splunk, introducing ITSI for event correlation, developing more dashboards and anomaly detection through machine learning.
SplunkLive! Utrecht 2018 - Customer presentation: Irdeto
- 1. Jan-Jaap Oosterwijk Technology Evangelist Predictive Monitoring & Efficient Incident Response Tuesday, 20 November, 2018 DeFabrique, Utrecht, the Netherlands Constantin Bajireanu Manager, Service Operations Center
- 3. 70% OF EMPLOYEES ARE IN ENGINEERING/RESEARCH/ DEVELOPMENT +5 BILLION DEVICES AND APPLICATIONS SECURED SERVING 400+ CUSTOMERS IN 75+ COUNTRIES 236 PATENTS & 268 PATENTS PENDING IRDETO IS THE WORLD LEADER IN DIGITAL PLATFORM SECURITY NEARLY 1,000 SECURITY EXPERTS EMPLOYED +15 LOCATIONS COVERING 6 CONTINENTS
- 4. End-to-End Irdeto 360 Security Portfolio Production Content Aggregation Distribution and promotion Consumption Content Owners Broadcasters Distributors Devices ConsumerSport Rights Holders
- 5. IRDETO’S VISION To build a secure future, where people can embrace connectivity without fear. Irdeto protects platforms and applications for media & entertainment, games, connected transport and IoT connected industries.
- 6. 6 Service Operations Center Incident Management ▶ Incident registration ▶ Triaging and initial troubleshooting ▶ Standard resolution procedures ▶ Escalation Monitoring ▶ Service availability ▶ Capacity ▶ Health-check and Performance
- 7. How We Got Started ▶ In 2013 we started offering access to our products as managed service and established a 24/7 Service Operations Center. ▶ Build monitoring framework ▶ Define and implement incident management process ▶ Monitoring infrastructure is important... but not enough.. by far. ▶ Troubleshooting requires logs... logs... and more logs.
- 8. Our past monitoring framework Applications Networks Servers Public Cloud Web Services/Global Events Alerts Logs Service Operations Center Monitoring Incident Logs Logs Troubleshooting Metrics Events Logs
- 9. Our present monitoring framework Applications Networks Servers Public Cloud Web Services/Global Logs Service Operations Center Monitoring Logs Logs Metrics Events Logs Alerts Alerts Events Incident Dashboards Troubleshooting
- 10. 10 Present ▶ Using Splunk since 2013 ▶ Currently at 100Gb a day ▶ What’s in Splunk today ▶ Application logs ▶ Web-server logs ▶ AWS elb/alb logs ▶ Infrastructure logs ▶ Some metrics Ingest Measure Investigate Dashboard Alert Set Treshold Observe Trend Alert Repeat
- 11. 11 What’s been monitored ▶ Business metrics ▶ Number or requests ▶ Error rate ▶ Response time ▶ Trends ▶ Sudden drop in traffic ▶ Sudden increase in errors
- 12. Our Splunk Infrastructure - past AWS AWS Region A AWS Region B
- 13. Our Splunk Infrastructure - current AWS AWS Region A AWS Region B
- 14. Few facts ▶ 328 clients ▶ 340 dashboards ▶ 84k alerts-scheduled / day ▶ 1.44M searches / day
- 15. What’s next? ▶ More logs into Splunk ▶ Ingest metrics into Splunk ▶ Introduce ITSI ▶Correlation of events during incident investigation ▶Dashboards, Dashboards, Dashboards ▶Anomaly detection ▶ML ▶ Enriched alerts with VictorOps
- 16. Machine learning Our future monitoring framework Applications Networks Servers Public Cloud Web Services/Global Logs Service Operations Center Monitoring Logs Logs Troubleshooting Metrics Events Logs Alerts Events Incident Dashboards Predictive Analytics Preventative Maintenance ITSI
- 17. © 2018 SPLUNK INC. 1. Monitor what’s important for your customers 2. Use the top-down approach with KPI definition. 3. Aggregate, Trend and Conquer Key Takeaways
- 18. THANK YOU