• Save
SplunkLive! Toronto Jolera

SplunkLive! Toronto Jolera






Total Views
Views on SlideShare
Embed Views



0 Embeds 0

No embeds



Upload Details

Uploaded via as Microsoft PowerPoint

Usage Rights

© All Rights Reserved

Report content

Flagged as inappropriate Flag as inappropriate
Flag as inappropriate

Select your reason for flagging this presentation as inappropriate.

  • Full Name Full Name Comment goes here.
    Are you sure you want to
    Your message goes here
Post Comment
Edit your comment
  • First time we started seeing the data – seeing all the information – IP address, what the request is – even before I had searches, round trip time; We were batteling with this for so long. And knowing we can report on a monthly bases. We were making stuff up because we had no idea. Additional logging – down fall appflow – Netscaler firewall; -> AHA moment not only do I have appflow also traffic can be pointed and parsed. Nobody likes exporting csv’s.

SplunkLive! Toronto Jolera SplunkLive! Toronto Jolera Presentation Transcript

  • Copyright © 2012 Splunk, Inc.Sherri Smith,Project Manager
  • About MeWorked at Jolera for 2 yearsActually earned my Honours BA inReligion and CultureAlways have had a passion fortechnologyWhen not in front of computer Ienjoy running, yoga and cooking 2
  • About JoleraInformation Technology Partner founded in 200160+ associatesOffers a multitude of services from a 24/7service desk, onsite support as well asinfrastructure consulting and implementationsRecognized in PROFIT 100 Canada’s FastestGrowing Companies for 2008, 2009, and 2010 3
  • Challenge: Meeting SLAsManaging a high availability virtual environment which hosts acustom application for clientsMonitoring 10,000s transactions a monthSLA requirement to report on the round trip time of alltransactionsHad no way to report without manually wading through logsWe werent meeting our SLAs “Splunk gives us the granular reporting we need to run our business and deliver on SLAs—it was painful before Splunk.” 4
  • Anatomy of a Transaction Back end web serversClient Network Firewall Round trip time = <200ms 5
  • Why Splunk?Citrix Edgesight– Uses http injection, complicated to setup and test– Captures only full round trip information, wasnt granular enoughSolarwinds– Didnt capture more than an hour in the free tool, no plans to integrate in the full paid version of the softwareSplunk– Ability to get granular reporting on Application Performance– Easy to set up, install and upgrade 6
  • The Perfect PairCitrix Netscaler for load balancing andpushing Appflow on configured virtualserversSplunk custom searches to analyze theAppFlow data and measure time taken fromhop to hop of a round trip transaction "Before Splunk we needed 4 hours to parse through logs – now we only need minutes!" 7
  • Aha-Moment: Seeing the Data 8
  • Data, Glorious Data!Using Splunk with Citrix Appflow for Netscaler gave us completevisibility to our data in one place without parsing logs!– Request Host– Request URL– Request Method (POST vs. GET) 9
  • Keeping Processes HummingCustom Splunk Application and theCitrix Applflow Splunk module provide:– Monthly reports on SLAs– Ability to set proactive alerts against thresholds  To keep us ahead of our customers!– Data is in searchable format– Easy to create reports– Ability to auto schedule reporting 10
  • Endless Possibilities for Customization SLA Dashboard for real time pass and fail reporting Saved custom searches and reports Easy to use interactive pre-built reports 11
  • Future PlansSplunk for Syslogging the firewallOffer SLA reporting services to other custom applicationcustomers or future customersMonitor development environment to assist with future productsand releases "Now we can check the environment health whenever we want." 12
  • Thank You