San Francisco Bay Area Splunk usergroup meeting, July 13, 2022: recap of .conf22 and discussion about change control.

1. © 2019 SPLUNK INC.
Welcome to the July SF Bay Area
Splunk User Group Meeting!
Glad you could join us!
The meeting will start at 12:00 pm PDT, so we’ll kick things off soon.
Notes:
● The meeting will start off with a welcome & announcements before our speakers take the floor.

2. © 2019 SPLUNK INC.
Welcome to the July SF Bay Area
Splunk User Group Meeting!
SFBA User Group Leader:
Becky Burwell, Sr. Production Engineer, Yahoo
burwell@yahooinc.com

3. © 2019 SPLUNK INC.
Agenda
● Welcome!
● Announcements
● .conf22 Highlights
● Daniel Wilson: Change control
● Discussion

4. © 2019 SPLUNK INC.
Announcement
s
● Next virtual UG meeting August 10, 2022:
12:00pm PT
○ Speaker TBA
● Interested in giving a talk at a future meeting?
○ Becky burwell@yahooinc.com
● Join our SFBA Group Hub on
community.splunk.com!
https://community.splunk.com/t5/San-Francisc
o-Bay-Area-User/gh-p/ug-sfbay
○ Send a request and Becky will approve!
○ Find links to recordings of past talks
○ Suggest future meeting topics

5. © 2019 SPLUNK INC.
Announcement
s
continued
● Join the global Splunk Community on Slack @
splk.it/slack
○ Our user group channel is #ug_sfba
● Long-time leader Patrick Pablo moved on!

6. © 2019 SPLUNK INC.
2022 SFBA
User Group
Meeting
Schedule
Planned meeting dates for 2022:
● Wed August 10
● Skipping September
● October 19: possibly in person, 18:00 PT
Question: Who would attend an in-person
evening meeting in San Jose?
https://docs.google.com/forms/d/1rdeTtxvFjkZff2qY
PQIvRz2ziwFoS0I9L0tuoh8OGfI/

7. © 2019 SPLUNK INC.
.conf22: Highlights

8. Got to be in person!

9. Coolest Search Party!
Rapper SnoppDogg at the Splunk Search Party

10. Becky’s highlights
● Seeing people in person, especially SplunkTrust members, Splunk account
team members, met up with SFBA members
● Conference talks and slides are now online:
○ https://conf.splunk.com/watch/conf-online.html
● PLA1466B - Fields, Indexed Tokens and You
○ Martin Müller, SplunkTrust talk
○ Very thorough talk on examining the lispy commands in search to see what Splunk is really doing
○ Highly recommend looking at slides and watching video to improve search
● PLA1107B - Automate Log Onboarding With Splunk!
○ 2 TransUnion people: onboarding took up 25% of their time
○ They used rundeck with Cribl to achieve onboarding requests
○ Interesting use of technologies
● PLA1202A - What’s new in Splunk Cloud and Enterprise Platform 9

11. Leigh's Highlights
● Observability
○ Log Observer Connect
Distributed Traces in Cloud, Logs On Prem OBS1303C
○ Unified Security and Observability
(Papa John's, Heineken, Splunk) PLA1795
○ Designing and Managing a
Large Scale Splunk Platform (T-Mobile) PLA1601B
○ Monolith to Microservices
Prepare for the Shift (Strava) OBS1492B
○ Beyond O11Y WIth AWS OBS1866
○ Using OpenTelemetry and Splunk APM at
Care.com DVO1377B
○ Splunk .conf22 Observability Sessions
● Splunk Enterprise & Cloud
○ Flex Index
A Low Cost for Long Term Data (Srinivas Boba)
PLA1697A
○ Clara-fication
Finding and Improving Expensive Searches
(Clara Merriman and Martin Müller) PLA1162B
● Machine Learning
○ How to Train and English to SPL Translation
Model PLA1152C
● Open Telemetry
○ Scalability and Efficiency With the
OpenTelemetry Collector in Kubernetes
(replacing fluentd) GitHub OBS1668C
○ OpenTelemetry Meet the Developers
(Steve Flanders, Paulo Janotti, Tigran Najarayan,
Tyler Yahn) OBS1146C
○ Embrace, Extend, and Enjoy
Using OpenTelemetry in a "We Can't" World
(Lockheed Martin) OBS1464B
○ End-to-end Visibility (marketing video) OBS1831

12. Other people’s highlights?
What other highlights from the community?

13. © 2019 SPLUNK INC.
Change Control: Some thoughts
Daniel Wilson, Senior Security Engineer
Voleon

14. © 2019 SPLUNK INC.
Discussion

15. © 2019 SPLUNK INC.
Thank You!

16. © 2019 SPLUNK INC.
Title and Content
Phasellus et nisi lacus, mauris ultricies arcu faucibus orci sit
Donec fermentum sollicitudin neque, nec viverra neque lacinia eu
Donec mattis tortor vitae egestas pulvinar
• Vivamus eu dignissim turpis
Nunc eu cursus est, at ullamcorper dui
Optional subtitle