SplunkLive! Toronto Jolera


Published on

Published in: Technology
  • Be the first to comment

  • Be the first to like this

No Downloads
Total Views
On Slideshare
From Embeds
Number of Embeds
Embeds 0
No embeds

No notes for slide
  • First time we started seeing the data – seeing all the information – IP address, what the request is – even before I had searches, round trip time; We were batteling with this for so long. And knowing we can report on a monthly bases. We were making stuff up because we had no idea. Additional logging – down fall appflow – Netscaler firewall; -> AHA moment not only do I have appflow also traffic can be pointed and parsed. Nobody likes exporting csv’s.
  • SplunkLive! Toronto Jolera

    1. 1. Copyright © 2012 Splunk, Inc.Sherri Smith,Project Manager
    2. 2. About MeWorked at Jolera for 2 yearsActually earned my Honours BA inReligion and CultureAlways have had a passion fortechnologyWhen not in front of computer Ienjoy running, yoga and cooking 2
    3. 3. About JoleraInformation Technology Partner founded in 200160+ associatesOffers a multitude of services from a 24/7service desk, onsite support as well asinfrastructure consulting and implementationsRecognized in PROFIT 100 Canada’s FastestGrowing Companies for 2008, 2009, and 2010 3
    4. 4. Challenge: Meeting SLAsManaging a high availability virtual environment which hosts acustom application for clientsMonitoring 10,000s transactions a monthSLA requirement to report on the round trip time of alltransactionsHad no way to report without manually wading through logsWe werent meeting our SLAs “Splunk gives us the granular reporting we need to run our business and deliver on SLAs—it was painful before Splunk.” 4
    5. 5. Anatomy of a Transaction Back end web serversClient Network Firewall Round trip time = <200ms 5
    6. 6. Why Splunk?Citrix Edgesight– Uses http injection, complicated to setup and test– Captures only full round trip information, wasnt granular enoughSolarwinds– Didnt capture more than an hour in the free tool, no plans to integrate in the full paid version of the softwareSplunk– Ability to get granular reporting on Application Performance– Easy to set up, install and upgrade 6
    7. 7. The Perfect PairCitrix Netscaler for load balancing andpushing Appflow on configured virtualserversSplunk custom searches to analyze theAppFlow data and measure time taken fromhop to hop of a round trip transaction "Before Splunk we needed 4 hours to parse through logs – now we only need minutes!" 7
    8. 8. Aha-Moment: Seeing the Data 8
    9. 9. Data, Glorious Data!Using Splunk with Citrix Appflow for Netscaler gave us completevisibility to our data in one place without parsing logs!– Request Host– Request URL– Request Method (POST vs. GET) 9
    10. 10. Keeping Processes HummingCustom Splunk Application and theCitrix Applflow Splunk module provide:– Monthly reports on SLAs– Ability to set proactive alerts against thresholds  To keep us ahead of our customers!– Data is in searchable format– Easy to create reports– Ability to auto schedule reporting 10
    11. 11. Endless Possibilities for Customization SLA Dashboard for real time pass and fail reporting Saved custom searches and reports Easy to use interactive pre-built reports 11
    12. 12. Future PlansSplunk for Syslogging the firewallOffer SLA reporting services to other custom applicationcustomers or future customersMonitor development environment to assist with future productsand releases "Now we can check the environment health whenever we want." 12
    13. 13. Thank You