Time is money, especially when it’s downtime impacting your services. Splunk IT Service Intelligence (ITSI) introduces an enhanced troubleshooting and monitoring experience that enables you to visually investigate issues and prevent outages, faster than ever before.
Thiis demo-rich webinar helps you to understand how you can use Splunk ITSI to:
- Speed up investigations by organizing and correlating relevant metrics and events into “swim lanes”
- Compare performance over time with real-time performance to understand trends and identify systemic issues
- Identify and alert on notable events by creating predefined correlation searches
4. Safe Harbor Statement
During the course of this presentation, we may make forward looking statements regarding future events
or the expected performance of the company. We caution you that such statements reflect our current
expectations and estimates based on factors currently known to us and that actual events or results could
differ materially. For important factors that may cause actual results to differ from those contained in our
forward-looking statements, please review our filings with the SEC. The forward-looking statements
made in this presentation are being made as of the time and date of its live presentation. If reviewed
after its live presentation, this presentation may not contain current or accurate information. We do not
assume any obligation to update any forward looking statements we may make. In addition, any
information about our roadmap outlines our general product direction and is subject to change at any
time without notice. It is for informational purposes only and shall not be incorporated into any contract
or other commitment. Splunk undertakes no obligation either to develop the features or functionality
described orto includeany suchfeatureor functionalityina futurerelease.
4
7. What We Hear From Our Customers
“My CIO is demanding we look at IT from a business service perspective.”
“Splunk is great for break/fix, but I need to show we’re meeting SLAs.”
“I need everyone to be able to see the same thing at the same time.”
“I just want to throw data at Splunk and have it find problems for me.”
“Show me what my data can do for me!”
9. Splunk IT Service Intelligence
SPLUNK IT SERVICE INTELLIGENCE
Time-Series Index
Platform for Machine Data
Dynamic
Service Models
Schema-on-Read Data Model
Common
Information Model
At-a-Glance
Problem Analysis
Early Warning
on Deviations
Simplified Incident
Workflows
11. Terminology Matters
Logical grouping of
operations
• Online banking
• Authentication
• Virtualization
EXAMPLES
SERVICES
Set of actions
performed with
specific business goals
• Sell products
• Fulfill orders
• Process payroll
EXAMPLES
BUSINESS PROCESSES
Component required
to deliver a service
• Hosts
• Users
• OS Processes
EXAMPLES
ENTITIES
Metrics used to
evaluate success
• Service health
• Order revenue
• Latency
EXAMPLES
KEY PERFORMANCE
INDICATORS
12. 12
Accelerate Troubleshooting With Splunk ITSI
Narrow down problem areas quickly with powerful,
easy-to-understand visualizations
Pinpoint root cause with structured and detailed review of
services and entities
Get a holistic view by logically combining KPIs and data sources
Build preventative alerts easily by grouping relevant indicators
16. Sign Up Here - We’re Here To Help!
Unlock the value of data and solve an important service problem
through a free guided engagement with key stakeholders
Define methods for:
• Proactive service monitoring
• Reduced risk and failures
• Faster issue resolution
• Increased business
performance
What is it?
• 1-day on-site workshop
• Tightly linked with value
• Collaborative approach
• Build your own Splunk
ITSI Glass Table
17. Get Started
ONLINE SANDBOX TRIAL
Seven days of access to a free,
personal environment in the cloud,
with pre-populated data
Engage in a proof-of-concept to
index your data and experience
the power of Splunk ITSI
http://bit.ly/24nZvU1 Contact your Splunk representative
18. Next In The Webinar Series
1st September
10.30am BST / 11.30 CEST, 60 min
Adaptive Thresholds and Anomaly Detection: Unleash
the Power of Machine Learning for Improved Operations
Register now at: http://explore.splunk.com/itsi-emea
First of all I want to level set and talk about Splunk
Because ITSI runs on top of the Splunk platform
At it’s core, the Splunk platform enables you to:
Collect data from anywhere – with universal forwarding and and of course our powerful indexing technology.
Search and analyze across all your data – with powerful search and schema on the fly technology.
Schema on the fly means you don’t have to structure your data before sending it into Splunk.
We only need a couple of data fields host or sourcetype as an identifier and then essentially everything else is on the fly
This gives you a very powerful search capability which allows you to pretty much search through anything without having to structure data.
AlWe can Rapidly deliver real-time insights from machine data to IT and business people – through a powerful UI and dashboards all based on our search technology.
This is what we call Operational Intelligence.
So that rounds up the core functionality of the splunk platform which ITSI is built on.
So a quick chat about where splunk has come from
Initially we were founded on enabling IT administrators to solve IT challenges but over the years we’ve manifested this into various other use cases including Application Management, Security and Compliance (the top 3 being our core use-cases)
We now of course have exciting new use cases around Business Analytics and IoT, all of which has been led by our customers.
As our customers grow their asks from Splunk also began to evolve. They’re looking for an integrated holistic packaged solution that helps them break-down information silos. They want to apply machine learning to enable their business analysts and IT practitioners with the right data at the right time.
They want to exploit the data they have within Splunk to discover new ways to improve their operations against real business priorities with the end goal of achieve real differentiated advantage in the market and business growth.
Of course to do this they want to gain the highest levels of adoption of these data insights into as many use cases as possible
They want to Not just meet SLAs but use their captured performance data to plan and invest at the right time…integrated capacity planning
They want to have operational visibility shared across a widest audience to improve communication
They want to get ahead of service problems and empower their DevOps processes
That brings us to Splunk IT Service Intelligence – a packaged solution that enables real-time visibility into services driven by machine data.
Splunk ITSI speeds and simplifies service monitoring and analytics and enables IT to make better, smarter and informed business decisions.
It’s a solution which allows you to gain a really deep understanding of your services.
With ITSI, you have real-time views into the health of your services…
You can use advanced analytics to find patterns, detect anomalies and trends acting proactively to monitor and address issues.
The end result is you have improved service visibility, reduced resolution times, and a transformation within your business and technology teams in their approach to monitoring and analytics driven by machine-data.
This slide rally gives you a good idea of where ITSI sits in the ecosystem of Splunk.
You can see that ITSI which is shown really as the grey bar and the functionality above sits on and dependent on the core of the Splunk platform.
We make use of the Time Series index ; Schema on Read ; its data model and of course the common information model
What we’ve built in ITSI is that layer on top of Splunk…
The ability to build dynamic service models to aide diagnostic and reporting processes
To enable at-a-glance problem analytics
we’ll talk in the next webinar about early warning on deviation
and today we will focus on simplified incident workflows with the right dashboards and consoles at you fingertips…to go from detecting a deviation to a norm in a service view to deep technical diagnostics and root cause analysis
Concepts that we use with ITSI
First of all, what is a service? I’m not exacting here, I don’t care what you which to define as a service, business or technology.
A service is simply a contracted facility a group of processes that is offered by one group or team to another
Services are high level concepts but very important to your organisations
Business processes are the set of actions performance with specific business goals…..Request to fulfilment
Business services will often be made up of many processes
Theses processes will supported by systems, whether IT, manufacturing or people and the individual components of these systems we call entities
We create entities in ITSI because they have data associated with them that we what to evaluate…simple really, hosts users, OS processes
The data we are evaluating we group together and evaluate through KPIs…these are the significant metrics which we care about and are essential to ITSI…Things we want to measure
I’ve given you the preamble of Splunk and the terminology associated with ITSI
Now we are going to start talking about what we are going to show you today,
Troubleshooting with ITSI
We’re going to show you how we can start with high level visualizations to review service health, to help us understand when we do have a problem with our service and to enable communication between teams
How to progress into a deeper view for analysis and diagnostics. Root causes analysis using drilldown through custom visualizations and method with ITSI
How we combine metrics to provide both automated and heuristic approaches to provide greater insight into service health
…and how once we have found the root cause of a problem we can build preventative measures to make sure we proactive catch similar problems in the future
If you are looking to understand ITSI and evaluate it should be done in context of a service
Complex organization will have countless services and these services can be layered on each other and be nested within other services…this hopefully all makes sense
Now when we are modelling services we want to look at one that people care about.
Bring experts together who are motivated
And most of all design before implementation