Partner Executive Summit, Frankfurt, 21. November 2018

1. © 2018 SPLUNK INC.© 2018 SPLUNK INC.
Partner Executive Summit
Splunk for Industrial IoT
Ronald Perzul, Senior Sales Engineer
rperzul@splunk.com
November 21st 2018

2. © 2018 SPLUNK INC.
During the course of this presentation, we may make forward-looking statements regarding future events or
the expected performance of the company. We caution you that such statements reflect our current
expectations and estimates based on factors currently known to us and that actual events or results could
differ materially. For important factors that may cause actual results to differ from those contained in our
forward-looking statements, please review our filings with the SEC.
The forward-looking statements made in this presentation are being made as of the time and date of its live
presentation. If reviewed after its live presentation, this presentation may not contain current or accurate
information. We do not assume any obligation to update any forward-looking statements we may make. In
addition, any information about our roadmap outlines our general product direction and is subject to change
at any time without notice. It is for informational purposes only and shall not be incorporated into any contract
or other commitment. Splunk undertakes no obligation either to develop the features or functionality
described or to include any such feature or functionality in a future release.
Splunk, Splunk>, Listen to Your Data, The Engine for Machine Data, Splunk Cloud, Splunk Light and SPL are trademarks and registered trademarks of Splunk Inc. in
the United States and other countries. All other brand names, product names, or trademarks belong to their respective owners. © 2018 Splunk Inc. All rights reserved.
Forward-Looking Statements

3. © 2018 SPLUNK INC.
▶ Industrial Data and Challenges
▶ Introduction to Splunk for Industrial IoT
▶ Splunk Industrial Asset Intelligence
▶ Good to Know
Agenda

4. © 2018 SPLUNK INC.
Industrial Data
and Challenges

5. © 2018 SPLUNK INC.
ML
Predictive
Maintenance
Condition-based
Maintenance
Preventative Maintenance
Reactive Maintenance
Real-time analytics and sensing insights
to predict machine reliability
Rules-based logic for sensor data
Scheduled and planned maintenance
based on usage and time
Fix when broken
Advanced machine learning and AI
driven maintenance
80% of Industrial Operations Are Reactive
The global process industry loses $20 billion annually from unplanned downtime*
O
E
E
Proactive,
Strategic
Operations
*ARC Advisory Group

6. © 2018 SPLUNK INC.© 2018 SPLUNK INC.
MANUFACTURING
Operational technology (OT) and Sensor data
Industrial controls, SCADA, actuator and other equipment
IDC estimates that by 2025, more than a quarter of data
created in the global datasphere will be real time in nature,
and real-time IoT data will constitute more than 95% of this.
Work order data
Alarms, location and inventory data
Maintenance work order processes need to be defined and
managed as an integrated part of the production order,
materials procurement and logistics processes.
Security data
Firewall data, endpoint data
A 2018 security study revealed 147 vulnerabilities in 34
separate SCADA mobile applications.
What is Machine Data?

7. © 2018 SPLUNK INC.© 2018 SPLUNK INC.
Industrial Data Contains Critical Insights
Sensor Data
Work Order
Alarms and
Events
05/27/2014T10:24:17GMT applicationId="safetyObs" eventType="safety" assetID="CV1002384-1045"
employeeId="114635" jobSite="PLEC-2014-GC" observationId="184568-451124-256" observation="Control Valve
handle extracted to manual position. No lockout/tagout or other tag visible. Process is running."
observationCriticality="5" imageId="PLEC-2014-GC-184568-451124-256"
imageUri="https://mybucket.s3.amazonaws.com/PLEC-2014-GC-184568-451124-256.png"
1543541, workorder, bsic, 78544, pipefitting, CV1002384, "install manual bleed bypass", 04/13/2014, 05/21/2014,
25663, complete
05/22/2014 03:17:31 Tag="CV1002384.ValvePos" Value=”50" Quality=“Good”
05/22/2014 03:17:46 Tag="CV1002384.ValveCmd" Value=”100" Quality=“Good”
05/22/2014 03:19:22 Tag="CV1002384.ValveCmd" Value=”100" Quality=“Good”
05/22/2014 03:19:27 Tag="CV1002384.ValvePos" Value=”50" Quality=“Bad”
Alarm Date Alarm Type Asset ID
Asset IDTechnician Completed
Asset IDMTBF Quality
SOURCES

8. © 2018 SPLUNK INC.
Introduction to
Splunk for
Industrial IoT

9. © 2018 SPLUNK INC.© 2018 SPLUNK INC.
Factories of the Future Need Operational
Intelligence to Survive and Compete
REAL-TIME
MONITORING
PREDICTIVE
ANALYTICS
OT
SECURITY
Data aggregation across
disparate systems
Condition based and
predictive maintenance to
reduce costs
Mitigating cyber security
risks due to outdated
software and controls

10. © 2018 SPLUNK INC.© 2018 SPLUNK INC.
Platform for Machine Data
Data Integrations (OPC, MQTT, Kepware, OSIsoft..)
Search and
Reporting
Machine Learning
Industrial Asset
Intelligence
Splunk for Industrial IoT
Real-time visibility and predictive analytics
Real-time
Monitoring
OT Security Predictive
Maintenance
Diagnostics and
Troubleshooting
Sensor (metric) data Unstructured (event) data

11. © 2018 SPLUNK INC.
Splunk Industrial
Asset Intelligence

12. © 2018 SPLUNK INC.
Improve Availability and Performance of
Industrial Assets
Splunk Industrial Asset Intelligence (IAI)
Gain real-time visibility across the operation
Monitor and analyze silos of data that span
historians, SCADA, EAM, purchasing and inventory
Give engineers the ability to quickly diagnose issues
Simple visualization of disparate data allows
engineers to quickly pinpoint root cause of issues
Customize for diverse set of operations
Build custom visualizations, create complex
formulas, and set real-time alerts without the need
for programming

13. © 2018 SPLUNK INC.
DescriptionFeature
Key Features of Splunk Industrial Asset Intelligence
Create complex calculations without using SPL
Develop visualizations of an asset, process, or
system via a drag and drop editor
Build asset hierarchies and associate data to
individual assets from disparate data sources
Set Splunk conditions (e.g., thresholds) and alerts
(e.g., SMS, email) via a graphical UI tool
Perform ad-hoc analysis of time-series data to
troubleshoot process or equipment issues
Asset
Hierarchy
Spatial
View
Formula
Builder
Conditions
& Actions
Analyze
View
1
Asset
Groups
2
3
4
5
Create & replicate visualizations, custom formulas,
KPIs and alerts across fleets/groups of assets
6

14. © 2018 SPLUNK INC.
IAI Walkthrough

15. © 2018 SPLUNK INC.
Splunk Search Processing Language (SPL)
In the past IT staff
was responsible
for data
onboarding,
creating searches
and dashboards
for non-IT users.
No more
SPL needed

16. © 2018 SPLUNK INC.
Drag & Drop and Self-Service UI
Now engineers can
create their own
dashboards without
programming.
After adding OEE for
Utica Pilot Line spatial
view is complete.
NEW

17. © 2018 SPLUNK INC.
Additional Investigation
By having a closer
look at the OEE we
can see that we
have a quality
problem.
The different views
can be linked
providing top-down
analysis and
troubleshooting.
NEW

18. © 2018 SPLUNK INC.
Self-Service Time-Series Analysis
Engineers can add
additional metrics or
alarms/events by
just clicking on the
element name.
Contextual
information like
alarms will be shown
using event
annotations.
NEW
Hierarchy tree
provides the option
to combine
information from
different levels or
assets.

19. © 2018 SPLUNK INC.
Use Formula Builder for Custom Metrics
Add fields from
different data
sources.
Select from a variety
of mathematical,
statistical, etc.
functions.
NEW
Define search span
and time window.

20. © 2018 SPLUNK INC.
Create Custom Alerts
Create custom
alerts and conditions
based on
thresholds.
NEW
Define trigger
conditions and
thresholds. Execute the
appropriate alert
action like eMail,
webhook or
workorder.

21. © 2018 SPLUNK INC.
Good to Know

22. © 2018 SPLUNK INC.
▶ The pricing metric for Splunk Industrial IoT is based on sensors.
▶ Sensors refer to a unit that streams a single type of numerical time-stamped data
from an asset, application or other entities.
▶ Customers get:
• Unlimited data ingestion for data generated by the sensors that are ingested into Splunk’s
metric index
• For every 1,000 sensors licensed, customers are entitled to 6GB of Daily Indexing Volume to
index unstructured data in Splunk’s event index
Splunk for Industrial IoT Licensing

23. © 2018 SPLUNK INC.
IoT Use Cases & References
Energy Optimization
Vessel Monitoring
Assembly Line Monitoring
Monitoring Wind Turbines
Chiller Plant Monitoring
Carpet Process Monitoring
Diagnostic equipment monitoring
Pallet Process Monitoring & Optimization
Assembly & Testing Line Optimization
Selected CustomersSelected Use Cases

24. © 2018 SPLUNK INC.
Splunk for Industrial IoT on Oxygen
Industrial Asset Intelligence Predictive Maintenance ICS Security

25. © 2018 SPLUNK INC.
Splunk Ready IoT End-to-End Solutions
▶ Drive Starter Kit for the
railway industry.
▶ First ”Splunk Ready”
End-to-End solution.
▶ Announced at Innotrans
2018.

26. © 2018 SPLUNK INC.
▶ This app provides 13 different use cases designed to help you gain a clearer
understanding of the impact of security incidents on Industrial Control Systems
(ICS) and how you can use Splunk to see and respond to real-world threats
immediately.
▶ https://splunkbase.splunk.com/app/4150/
Splunk Essentials for ICS Security and Compliance

27. © 2018 SPLUNK INC.© 2018 SPLUNK INC.
Thank you!