The best of Splunk .conf22 content all wrapped up as recommended reading and watching - just for you!

1. © 2022 SPLUNK INC.
● PLA1202A - What’s new with Splunk® Cloud and Enterprise Platform 9.0
● PLA1579A - Unlocking the Limitless Potential of SPL2™
● PLA1422B - Learn Your Data - Getting Started With Exploring Data via
the UI and SPL™
● PLA1128C - Dashboard Wowzahs!
● PLA1670A - Splunk® Mobile: Get Started With Mobile Experiences to
Quickly and Securely Turn Data Into Doing™
● PLA1137A - Power Your Workforce With Splunk® Augmented Reality
Recommended Reading / Viewing
Platform - Beginner

2. © 2022 SPLUNK INC.
Previews
PLA1597C Just the Data You
Want, Nothing More, Nothing Less
PLA1604A Search Your Cloud
Data with the New Splunk
Federated Search Feature for
Amazon S3
PLA1718C, PLA1573C,
PLA1671C, DEV1352C and more
Recommended Reading / Viewing
Automation
PLA1151B .conf® to the Moon – A
One-way Ticket To Effortless
Splunk Management With
Ansible®
PLA1353C Splunk® Operator for
Kubernetes: Amadeus and Splunk
on Customer Use Cases and
Deployment
PLA1402B, DEV1120B,
DEV1518B, DEV1703B and more
BP / Optimization
PLA1162B Clara-Fication: Finding
and Improving Expensive
Searches
PLA1627B Master Index Sizing
Configuration and Monitoring To
Avoid Data Loss
PLA1446B Data Onboarding: Best
Practices and Troubleshooting
Masterclass
PLA1261B, PLA1466B,
PLA1349B, PLA1171C, PLA1583
and more
Platform - Advanced

3. © 2022 SPLUNK INC.
For those who want to shine during team lunches:
● OBS1641C – What Is Observability? – The “formal” definition of observability doesn’t really say much but this session will help you
understand what observability is and how it translates into business value, whether you are an SRE, Sysadmin or CIO.
For those using or considering microservices, are worried about monitoring
transactions in a distributed world or are just sports fans, this Strava session is for you:
● OBS1429B – Monolith To Microservices: Prepare For The Shift – This talk will highlight how Strava, the leading platform for athletes
with over 100 million registrants, started on a journey to refactor their legacy applications into microservices and how they handled the
monitoring and troubleshooting challenges. To be honest, I’m not really a sports guy (I’m more a pizza guy. That's why I will also make
sure to join the mainstage session with Papa Johns as they share their story of how they use data to drive incredible outcomes.), but the
Strava feedback sounds really interesting.
Here are some recommendations:
Observability - Beginner

4. © 2022 SPLUNK INC.
For those whose infrastructure is becoming a monster:
● OBS1674C – Discover Infrastructure Observability for Modern Applications and Rapidly Changing Kubernetes Environments
with Splunk! The title might be long but in only a few minutes our speakers discuss the importance of speed and scale in monitoring
your modern infrastructure, including Kubernetes, and observe the dependencies between hosts and services for troubleshooting or root
cause analysis.
For those who think that logs are not for Developers and SREs:
● OBS1263C – Splunk Log Observer: A Log Investigation Experience Designed for Developers and SREs – well, the title says it all,
but this session will not only talk about logs but also about how to navigate between logs, metrics and traces easily.
Ok, now that your systems are observable, now what?Let’s talk about what happens once the incident
has been discovered:
● OBS1558A – Introducing the Next Generation of Incident Management within Splunk Observability Cloud – Are you tired of on-
call management chaos? Are you flooded with a storm of daily alerts? Then this session is for you. Join to see the latest incident
management innovations!
● OBS1126C – Eliminating Alert Fatigue: 9 Ways One Team Reduced Alerts by 80% In a Month – let’s see how one overloaded team
managed to make their life easier within a month.
Here are some recommendations:
Observability - Beginner

5. © 2022 SPLUNK INC.
For those who want a promotion or just want to be the team superhero, you should
attend this session:
● OBS1208C – ITSI – An Introduction and What's New Since .conf21 – in this session, you’ll see the latest features added to ITSI
including the latest in-service monitoring, event management and predictive analytics. ITSI is “the one ring to rule them all” of your
toolsets. You can’t miss this one.
And for those who will bring their laptop, why not attend one of our hands-on
workshops?
● OBS1754: Interactive Observability Cloud Demo - during this limited attendance session (hurry up!!!) you’ll troubleshoot a problem
from the user’s browser through a microservices-based application and into the actual backend code using AlwaysOn Code Profiling.
You’ll get a login to the Observability Cloud system so you can experience it yourself while we guide you through an end-to-end
troubleshooting journey.
● OBS1863: Splunk IT Service Intelligence (ITSI) Hands-on Workshop – you’ll get an overview of the fundamental concepts of ITSI
and we will set you up with an interactive lab environment to investigate and get to the root cause of a real-world incident impacting a
critical business service. You’ll see how to proactively (yes, before it happens) detect incidents and how to provide business owners with
real-time visibility of the health of your critical business service. ITSI is the best way to get a promotion.
Here are some recommendations:
Observability - Beginner

6. © 2022 SPLUNK INC.
● OBS1641C – What Is Observability? – The “formal” definition of observability doesn’t really say much but this session will help you understand
what observability is and how it translates into business value, whether you are an SRE, Sysadmin or CIO.
● OBS1429B – Monolith To Microservices: Prepare For The Shift – This talk will highlight how Strava, the leading platform for athletes with over
100 million registrants, started on a journey to refactor their legacy applications into microservices and how they handled the monitoring and
troubleshooting challenges.
● OBS1674C – Discover Infrastructure Observability for Modern Applications and Rapidly Changing Kubernetes Environments with Splunk! The title
might be long but in only a few minutes our speakers discuss the importance of speed and scale in monitoring your modern infrastructure, including
Kubernetes, and observe the dependencies between hosts and services for troubleshooting or root cause analysis.
● OBS1263C – Splunk Log Observer: A Log Investigation Experience Designed for Developers and SREs – well, the title says it all, but this session will
not only talk about logs but also about how to navigate between logs, metrics and traces easily.
● OBS1558A – Introducing the Next Generation of Incident Management within Splunk Observability Cloud – Are you tired of on-call management
chaos? Are you flooded with a storm of daily alerts? Then this session is for you. Join to see the latest incident management innovations!
● OBS1126C – Eliminating Alert Fatigue: 9 Ways One Team Reduced Alerts by 80% In a Month – let’s see how one overloaded team managed to make
their life easier within a month.
● OBS1208C – ITSI – An Introduction and What's New Since .conf21 – in this session, you’ll see the latest features added to ITSI including the latest in-
service monitoring, event management and predictive analytics. ITSI is “the one ring to rule them all” of your toolsets. You can’t miss this one.
● OBS1754: Interactive Observability Cloud Demo - during this limited attendance session (hurry up!!!) you’ll troubleshoot a problem from the user’s browser
through a microservices-based application and into the actual backend code using AlwaysOn Code Profiling. You’ll get a login to the Observability Cloud
system so you can experience it yourself while we guide you through an end-to-end troubleshooting journey.
● OBS1863: Splunk IT Service Intelligence (ITSI) Hands-on Workshop – you’ll get an overview of the fundamental concepts of ITSI and we will set you up
with an interactive lab environment to investigate and get to the root cause of a real-world incident impacting a critical business service. You’ll see how to
proactively (yes, before it happens) detect incidents and how to
Here are some sessions worth seeing
Observability - Advanced

7. © 2022 SPLUNK INC.
A beginner’s guide to
SOAR
Automate 5 basic security
processes in under 30 Min
SEC1304C
Recommended Reading / Viewing
Security - Beginner
DevSecOps Delivers
Results
More than the latest
Buzzword… only from
Splunk
SEC1383A
Transform Your
Intelligence for Informed,
Actionable Automation
SEC1371C
Fünf einfache und effektive Prozesse, die
man automatisieren kann, um das Leben
eines Security Analysten zu erleichtern
Fünf einfache und effektive Prozesse, die
man automatisieren kann, um das Leben
eines Security Analysten zu erleichtern

8. © 2022 SPLUNK INC.
Intelligence
Management
SEC1647C Fusing Intelligence
Into Splunk SOAR
Recommended viewing
Automation
SEC1359C Responding to Risk
Notable at Machine Speed Using
Automation
SIEM
SEC1144C Curating Your Risk
Ecology: Making Risk Based
Alerting Magic
Security - Advanced

9. © 2022 SPLUNK INC.
Thank You!