SFBA Splunk Usergroup meeting December 2022: Splunk Ideas and Data Manager

1. © 2022 SPLUNK INC.
All About
Splunk Ideas!
Malini Mahes - Product Manager
November 2022

2. This presentation may contain forward-looking statements regarding future events, plans or the
expected financial performance of our company, including our expectations regarding our products,
technology, strategy, customers, markets, acquisitions and investments. These statements reflect
management’s current expectations, estimates and assumptions based on the information currently
available to us. These forward-looking statements are not guarantees of future performance and
involve significant risks, uncertainties and other factors that may cause our actual results,
performance or achievements to be materially different from results, performance or achievements
expressed or implied by the forward-looking statements contained in this presentation.
For additional information about factors that could cause actual results to differ materially from those
described in the forward-looking statements made in this presentation, please refer to our periodic
reports and other filings with the SEC, including the risk factors identified in our most recent quarterly
reports on Form 10-Q and annual reports on Form 10-K, copies of which may be obtained by visiting
the Splunk Investor Relations website at www.investors.splunk.com or the SEC's website at
www.sec.gov. The forward-looking statements made in this presentation are made as of the time and
date of this presentation. If reviewed after the initial presentation, even if made available by us, on our
website or otherwise, it may not contain current or accurate information. We disclaim any obligation to
update or revise any forward-looking statement based on new information, future events or otherwise,
except as required by applicable law.
In addition, any information about our roadmap outlines our general product direction and is subject to
change at any time without notice. It is for informational purposes only and shall not be incorporated
into any contract or other commitment. We undertake no obligation either to develop the features or
functionalities described, in beta or in preview (used interchangeably), or to include any such feature
or functionality in a future release.
Splunk, Splunk> and Turn Data Into Doing are trademarks and registered trademarks of Splunk Inc. in the United States and other countries. All other
brand names, product names or trademarks belong to their respective owners. © 2022 Splunk Inc. All rights reserved.
Forward-
Looking
Statements
03.10.22-15:28

3. © 2022 SPLUNK INC.
Malini Mahes
Product Manager - Splunk Ideas
San Francisco, California

4. © 2022 SPLUNK INC.
1. What is Splunk Ideas?
• Program Overview, Metrics, Lifecycle of an Idea
2. Behind the scenes
• Analytics driven prioritization & reports
3. Coming up soon…
• Customer champions, newsletters and more
4. Feedback!
Agenda
We won’t be talking
about specific Ideas

5. © 2022 SPLUNK INC.
Ideas Portal
https://ideas.splunk.com
Search for, vote,
subscribe and request
enhancements (Ideas)
for any of our GA
products!

6. © 2022 SPLUNK INC.
YOU Made This Possible
5,700+
Ideas
139,000+
Votes
4,600+
Comments
7,100+
Users
The best way to have a good idea is to
have a lot of ideas. — Linus Pauling

7. © 2022 SPLUNK INC.
We’ve Sealed the Abyss
1,700+
Triaged
213+
Completed
70+
In Development
200+
Planned
We’re finally listening to your ideas, and
we have metrics to prove it!

8. © 2022 SPLUNK INC.
Idea Highlights from 2022!
1. Backport fix for SVD-2022-0608
(Enterprise)
2. Change terms in “Master” and “Slave” in indexer clustering and licensing
(Enterprise)
3. Implement SNMP Monitoring
(Enterprise)
4. Splunk ES Notable Backfill
(Enterprise Security)
5. Support SSAI (Self Service App Install) for all deployment types (ES, ITSI, IDM,
SHC, etc)
(Enterprise)

9. © 2022 SPLUNK INC.
What Happens When I Submit an Idea?
Lifecycle of an Idea: Submission
New
Idea
Community Review (Ideas & Comments)
•Check for accidental inclusion of sensitive information
•Make sure ideas and descriptions make sense
•Ensure our community guidelines are followed
Daily
Review

10. © 2022 SPLUNK INC.
What Happens When I Submit an Idea?
Lifecycle of an Idea: Monthly Top Idea Purchases
Gating
Criteria
New
Idea
The Secret Sauce: Splunk App for Ideas
•PM, Category, and Cohort Allowances
•Idea Scoring

11. © 2022 SPLUNK INC.
Gating Criteria
Input Channels Example

12. © 2022 SPLUNK INC.
What Happens When I Submit an Idea?
Lifecycle of an Idea: Monthly Top Ideas Triage
Gating
Criteria
New
Idea
Triaging
(Field PM)
First week of
each month
Field PM: Splunk Ideas Team
•Validate Category
•Ask for clarification and examples
•Merge duplicate ideas
•Tag Objectives & other qualitative context
•Private Comments
•Assign Owner (PM)
•Update Status (Triaging → Under Consideration)

13. © 2022 SPLUNK INC.
What Happens When I Submit an Idea?
Gating
Criteria
New
Idea
Triaging
(Field PM)
Under
Consideration
(Product PM)
In
Development
Planned
Future
Prospect
Done Shipped
Now
Next/Future
Maybe
Declined
No
PM Workflow:
•Are we going to do
address the idea with
development work?
–When?
•Update Idea Status
•Provide Public
Comments
Quarterly
Lifecycle of an Idea:
Quarterly Idea Consideration

14. © 2022 SPLUNK INC.
Quantitative Qualitative
● Aggregate ARR
(Annual Recurring Revenue)
● Votes:
– Total
– Unique accounts
– Priority customers
– PAC/CAB members
– Splunkers
● Customer Success insights
– Health, risk
● Lost opportunities
● Age
● Alignment with internal themes & initiatives
● Competitors
● Advisory Board feedback (customer & field)
● Field escalations
● Comments
● Support cases
Decision Time!
Bringing context to PMs for data-driven prioritization

15. © 2022 SPLUNK INC.
Question Answer
When can I expect my Idea to be shipped? When it’s done! (kidding)
We’d love to expose deadlines, but it’s complicated.
How can I see all of the ideas my company
has submitted, or voted on?
Ask your Account team, we’ve built tools for them!
Why has my idea been “Under
Consideration” for so long?
Why hasn’t my Idea been considered yet?
PMs are busy, and we just launched a bot for this.
Our choices are not just based on the top-voted ideas
How can I engage with the Ideas team
directly?
#ideas on Splunk-Usergroups
https://splk.it/slack
Some Frequently Asked Questions
Do we take bribes in exchange for idea prioritization?

16. © 2022 SPLUNK INC.
What’s Coming Up…
Newsletters/Blogs Customer Champions Improved
Response Rates

17. © 2019 SPLUNK INC.
We want to hear YOUR voice!

18. © 2022 SPLUNK INC.
On-Demand
Customer
Roadmap
❖ Use keywords to ‘search’ for
roadmap features
❖ See timeframe of features
❖ Check regional availability
and compliance information
❖ View roadmap information
whenever, wherever
❖ Fill out our survey to
incorporate your feedback!

19. © 2022 SPLUNK INC.
Submit enhancement requests for
all Splunk Products
Vote and comment to influence
Splunk's roadmap
Subscribe to track the progress of any Idea
Do You Have an Idea to Make
Splunk More Awesome?
Splunk
Ideas
https://ideas.splunk.com
#ideas on
Splunk-Usergroups
https://splk.it/slack
mmahes@splunk.com
Thank you!

20. During the course of this presentation, we may make forward-looking statements
regarding future events or the expected performance of the company. We caution
you that such statements reflect our current expectations and estimates based on
factors currently known to us and that actual events or results could differ
materially. For important factors that may cause actual results to differ from those
contained in our forward-looking statements, please review our filings with the SEC.
The forward-looking statements made in this presentation are being made as of the
time and date of its live presentation. If reviewed after its live presentation, this
presentation may not contain current or accurate information. We do not assume
any obligation to update any forward-looking statements we may make. In addition,
any information about our roadmap outlines our general product direction and is
subject to change at any time without notice. It is for informational purposes only
and shall not be incorporated into any contract or other commitment. Splunk
undertakes no obligation either to develop the features or functionality described or
to include any such feature or functionality in a future release.
Splunk, Splunk>, Listen to Your Data, The Engine for Machine Data, Splunk Cloud,
Splunk Light and SPL are trademarks and registered trademarks of Splunk Inc. in
the United States and other countries. All other brand names, product names, or
trademarks belong to their respective owners. © 2019 Splunk Inc. All rights
reserved.
Forward-
Looking
Statements
© 2019 SPLUNK INC.

21. © 2019 SPLUNK INC.
Data Manager for
Splunk Cloud

22. © 2019 SPLUNK INC.
Build for Cloud.
Modern UX.
Automation.
Simplicity.
Faster
TTV
Cloud
Experience
Data Source
Complexities
Minutes - not
days, not hours.
Multiple services,
regions and
accounts.
Automate
Prerequisites.
Bake in Best
Practices. Apply
Right Ingestion
Pattern.
Maintain
Currency.
We Heard You…
Centralized
Data
Management
Single Page. CRUD
on Configs. Monitor
status. Troubleshoot.
Health Check.
Notifications
…and here’s what we focused more on!

23. © 2019 SPLUNK INC.
Central Data Management Capability
Modern Data Onboarding Experience
+
The new GDI landing page allows users to create, manage,
monitor and troubleshoot GDI configs and push proactive
health notifications.
Data Manager Overview
Data Manager automates and minimizes GDI
prerequisites, simplify configuration steps, bake
in data source specific best practices.
A modern, simple and automated GDI experience for Splunk®
Cloud

24. © 2019 SPLUNK INC.
Data Manager Capabilities
Data Ingestion. Simplified. Modernized. Automated. Centrally Managed.
Configure Data Onboarding in minutes, with a modern user experience
and data source specific best practices
Centralized Data Management, to create, manage, monitor and
troubleshoot your data configurations in one place
• Support for critical AWS data sources including AWS GuardDuty, AWS
Security Hub, IAM Access Analyzer, IAM Credentials Report,
Amazon CloudWatch, and AWS CloudTrail
• Generate insights related to security posture of your AWS environment,
critical alerts, auditing, threat detection, governance, and cross
account access
• Automation for AWS pre-requisites & configuration
• Central Data Management to create, manage & troubleshoot
• Proactive Health Check & Notifications on your configs
• Ability to Tag the AWS resources used for data ingestion at the time of
resource creation
Available Onboarding AWS data sources

25. © 2019 SPLUNK INC.
Data Manager Capabilities
● Configure, monitor, troubleshoot and manage data
onboarding for Microsoft Azure data sources
● Support for critical Microsoft Azure data sources such as
Azure Active Directory and Azure Activity logs, thereby
enabling customers to generate insights related to sign-in
patterns, critical alerts related to Azure resource
modifications, system activities related to users, groups, and
applications, and visibility into the health status of critical
resources.
● Automation for Microsoft Azure prerequisites and
configuration
● Ability to tag Azure resources used for ingesting data into
Splunk using Data Manager
Available Onboarding Microsoft Azure data sources

26. © 2019 SPLUNK INC.
Data Manager Capabilities
• Configure, monitor, troubleshoot, and manage data
onboarding for GCP data sources
• Support for critical GCP data sources such as Audit logs and
Access Transparency logs, thereby enabling customers to
generate insights related to actions taken by Google staff
when accessing your Google Cloud content, critical alerts
related to GCP resource modifications, system activities for
Google Cloud actions that modify the configuration of
resources, and visibility into security policy violations
• Ability to easily onboard data from 100s of GCP projects and
folders through GCP organization resource and
automatically add remove projects/folders in Data Manager
based on changes to your Google Cloud resource hierarchy
• Automation for GCP prerequisites and configuration
Available Onboarding GCP data sources

27. © 2019 SPLUNK INC.
Benefits of
Data Manager
One solution to ingest cloud
data sources…
1) Time to value in minutes
1) Centralized way to bring cloud data into
Splunk
2) Easy to scale
3) Improved performance
4) No cloud expertise or maintenance
necessary
5) Immediate access to new cloud data
sources

28. © 2019 SPLUNK INC.
Key Takeaways
Available for Splunk
Cloud Customers with
AWS as their provider
https://ideas.splunk.com/ https://www.splunk.com/en_us/
blog/platform/meet-the-data-ma
nager-for-splunk-cloud.html
Try Data Manager
Today!
Tell Us About Your
Use Cases
Learn More About
Data Manager

29. © 2019 SPLUNK INC.
Thank you!