.conf  2011 Keynote Outline August 15, 2011 Web Analytics  Throwdown  with NPR and Intuit Sondra Russell and Tim Suh
24/7
Why Splunk? I started using Splunk because I could… I fell in love because I could…. <ul><li>Crunch raw logs </li></ul><ul...
Audio and Video Tracking: The Basic Setup MP3 Downloads On Demand Flash Live Streams ProgramID (?P<ProgramID>[^/]*)(?=/) U...
>   index=“summary” search_name=“ si_download_programID ”   ProgramName= “ All Songs Considered ”   “ How has my podcast b...
>  *  | eval Platform = mvfilter(match(eventtype,&quot;plat*&quot;)) | timechart span=1w count by Platform  “ What platfor...
>  *  | rex field=_raw &quot;Darwin/(?<Version>[0-9.]*)&quot;“ | top Version “ What percentage of our users have upgraded?...
>   index=“twitter” | stats count by story_url “ Which stories are getting Tweeted the most?” timestamp =&quot;2011-07-18T...
.conf  2011 Keynote Outline August 15, 2011 Questions? Sondra Russell and Tim Suh
Upcoming SlideShare
Loading in …5
×

.conf2011: Web Analytics Throwdown: with NPR and Intuit

1,150 views
1,062 views

Published on

Splunk for Web Intelligence? Why not! This session provides a plain-english tour that shows how NPR uses Splunk to track audio and video traffic across our web sites and digital apps (Android, iPhone, etc.). Then Intuit will share how they capture greater insight into visitor sessions and answer questions traditional web analytics tools can’t provide. Intuit will cover a variety of use cases, taking each from the raw data through Splunk “under-the-hood” to the strategic questions and answers.

Published in: Technology
0 Comments
0 Likes
Statistics
Notes
  • Be the first to comment

  • Be the first to like this

No Downloads
Views
Total views
1,150
On SlideShare
0
From Embeds
0
Number of Embeds
20
Actions
Shares
0
Downloads
24
Comments
0
Likes
0
Embeds 0
No embeds

No notes for slide

.conf2011: Web Analytics Throwdown: with NPR and Intuit

  1. 1. .conf 2011 Keynote Outline August 15, 2011 Web Analytics Throwdown with NPR and Intuit Sondra Russell and Tim Suh
  2. 2. 24/7
  3. 3. Why Splunk? I started using Splunk because I could… I fell in love because I could…. <ul><li>Crunch raw logs </li></ul><ul><li>Make pretty reports </li></ul><ul><li>Still go back into the raw data </li></ul><ul><li>Easily group scattered log lines into single transactions </li></ul><ul><li>Slice and dice in new ways </li></ul><ul><li>Actually use data to inform decisions </li></ul>
  4. 4. Audio and Video Tracking: The Basic Setup MP3 Downloads On Demand Flash Live Streams ProgramID (?P<ProgramID>[^/]*)(?=/) UserAgent (?P<UserAgent>[^&quot;]*)(?=&quot; ) AppVersion “ *(? =/) ” Ingest Raw Data Extract Fields Define Transactions > sourcetype = download AND status < 300 AND Method=Get | transaction IPAddress UserAgent maxspan=120… Create Summary Indexes 08/08/2011=>31800 08/09/2011=>29655 08/10/2011=>29903 08/11/2011=>53443 08/12/2011=>32593 08/13/2011=>88654 08/14/2011=>11231 1 2 3 4
  5. 5. > index=“summary” search_name=“ si_download_programID ” ProgramName= “ All Songs Considered ” “ How has my podcast been doing?” pulls from the summary index maps ProgramID to lookup table
  6. 6. > * | eval Platform = mvfilter(match(eventtype,&quot;plat*&quot;)) | timechart span=1w count by Platform “ What platforms are people using to access our show?” Filters for eventtypes that include “plat” plat_iphone_browser UserAgent=&quot;*iPhone*&quot; AND UserAgent!=&quot;*NPRRadio*&quot; AND UserAgent!=&quot;*iPod*“ AND sc!=18
  7. 7. > * | rex field=_raw &quot;Darwin/(?<Version>[0-9.]*)&quot;“ | top Version “ What percentage of our users have upgraded?” Uses regex to extract element from raw log &quot;NPRMusic/2.7 CFNetwork/459 Darwin/10.0.0d3&quot;
  8. 8. > index=“twitter” | stats count by story_url “ Which stories are getting Tweeted the most?” timestamp =&quot;2011-07-18T15:40:34Z&quot;, author =&quot;drpdtapp (Dr. P. D Tapp)&quot;, tweet =&quot;Tinnitus: Why Won't My Ears Stop Ringing?”, story_url =&quot;http://www.npr.org/2011/07/18/138163304/tinnitus-why-wont-my-ears-stop-ringing?sc=tw&quot;, Creates reports from a custom log
  9. 9. .conf 2011 Keynote Outline August 15, 2011 Questions? Sondra Russell and Tim Suh

×