• Save
SplunkLive! Minneapolis April 2013 - Moneygram

Like this? Share it with your network

  • Full Name Full Name Comment goes here.
    Are you sure you want to
    Your message goes here
    Be the first to comment
    Be the first to like this
No Downloads


Total Views
On Slideshare
From Embeds
Number of Embeds



Embeds 0

No embeds

Report content

Flagged as inappropriate Flag as inappropriate
Flag as inappropriate

Select your reason for flagging this presentation as inappropriate.

    No notes for slide


  • 1. Copyright © 2012 Splunk, Inc.MoneyGram InternationalRob Kelley and Hung DoanEnterprise Systems Monitoring#SplunkLive#Splunk
  • 2. • Payment services company providing the following services:– Funds transfers– Official checks– Money orders– Bill payments2About UsSystems Monitoring provides coveragefor these systems and more
  • 3. BackgroundNeed to quickly identify problemsAggressive SLAs and stringent penaltiesDemand for operational intelligence3
  • 4. Challenges4Limited visibility to service interruptionsDifficulty determining extent of problemsMonitoring efforts hindered by application changesSignificant time spent harvesting logs
  • 5. RequirementsMonitor logs in real-timeMatch complex patterns in logsIntelligent rule-based alertingIntegrate alarms into service desk5
  • 6. 6• Consolidate otherwise disparate application logs• Identify complex patterns in logs• Integrate with service deskCapable• Consume data from virtually any system• Intelligent rule-based alerting• Easily updated to reflect application changesFlexible• Role-based data security & permissions• Store large volumes of asynchronous data• Allow for newly conceived uses of the toolScalable
  • 7. Game ChangerBefore AfterLogs spread across application servers Stream of data presented in single pane of glassLittle confidence in completeness of combined logs Reliable forwarding and consolidation of criticaltransaction processing eventsExtremely limited log monitoring and alerting Rule-based alerting & inclusion of search resultsInflexible transaction monitoring dashboard Easily updated dashboards depicting transactionand business partner flowsDifficulty sharing discoveries made in logs Discoveries easily shared through savedsearches/results, dashboards, reports7
  • 8. Where Splunk ShinesIntuitive search appThorough and concise documentationCommitment to driving value out of our current investmentData driven analytics offers something attractive to any audience8“We used Splunk to accumulate log files and present a unified picture of componentactivity. My architect was able to quickly pinpoint the failing infrastructure component.It’s the only comprehensive tool we have found to help us with our application support.”-- Director, Application Support
  • 9. Organizational Adoption9Requests for additional indexing followed initial implementationPost-release operational visibility grew user baseBusiness intelligence captured attention of leadershipNewfound uses found for Splunk
  • 10. • Establish application logging standards• Index remaining mission critical logs• Promote wider adoption of Splunk• Implement tiered SAN• Leverage newly available featuresFuture Initiatives
  • 11. Recommendations• Address application logging quality• Carefully estimate anticipated log volumes• Require application performanceindicators be logged• Include universal transaction identifiers
  • 12. Copyright © 2012 Splunk, Inc.Thank You!