Verwertbare Einblicke in Ihre Daten gewinnen und IT Operations auf den nächsten Level bringen
In unserem Webinar zeigen wir Ihnen anhand einer Demo:
- wie Sie Service-Kontext gewinnen, in dem Sie Verhaltens- und Performance-Daten kombinieren.
- wie Sie ein genaues Bild Ihrer Umgebung erhalten, damit Sie Prozesse optimieren können
- wie Sie Kernursachen-Analysen beschleunigen und so Ausfälle auf Kundenseite entgegenwirken können
- wie Sie Incident Investigation priorisieren und die Time-to-Resolution durch Verhaltens- und Event-Analysen verkürzen
- wie Analytics und Machine Learning Service Intelliegence verbessern können
3. Agenda
● Introduction to Splunk ITSI
● ITSI Demo of Advanced Analytics and Machine Learning Techniques
● Splunk ITSI capabilities
● Case Studies
● Q&A
3
4. Safe Harbor Statement
During the course of this presentation, we may make forward looking statements regarding future events
or the expected performance of the company. We caution you that such statements reflect our current
expectations and estimates based on factors currently known to us and that actual events or results could
differ materially. For important factors that may cause actual results to differ from those contained in our
forward-looking statements, please review our filings with the SEC. The forward-looking statements
made in this presentation are being made as of the time and date of its live presentation. If reviewed
after its live presentation, this presentation may not contain current or accurate information. We do not
assume any obligation to update any forward looking statements we may make. In addition, any
information about our roadmap outlines our general product direction and is subject to change at any
time without notice. It is for informational purposes only and shall not be incorporated into any contract
or other commitment. Splunk undertakes no obligation either to develop the features or functionality
described orto includeany suchfeatureor functionalityina futurerelease.
4
5. What We Hear From Our Customers!
“My CIO is demanding we look at IT from a business service perspective.”
“Splunk is great for break-fix, but I need to show we’re meeting SLAs.”
“I need everyone to be able to see the same thing at the same time.”
“I just want to throw data at Splunk and have it find problems for me.”
“Show me what my data can do for me!”
7. Splunk IT Service Intelligence
Machine Learning-Powered, Analytics-Driven IT Operations
Simplify service operations
Prioritize incidents with context Redefine the role of IT
Combine events & metrics
across silos with ease,
flexibility & scale in days
Unify siloed monitoring
Leverage machine learning to
detect anomalies & highlight
events that matter
Deliver business & service context to prioritize
incident investigation & action
Support decisions & communicate results
with powerful service-level insights
9. Time series index
Schema on read
Fast time to value
Splunk IT Service Intelligence
9
Machine Learning
Adaptive threshold and events framework reduces alert fatigue
Behavior anomaly alerts to proactively address issues
Correlates data into knowledge mitigating SME dependency
Visualizes entire service stack – bare metal through business layer
View the entire ecosystem with customized views for executives
Deep Dives speed up investigations and improve cross-silo collaboration
Dynamic Service Model
Accelerators and Modules minimize SPL coding
Trend aggregation to enable rapid visualization
Multi KPI alerts for proactive irregularity identification
Search Based KPIs
Platform for Machine Data
11. Real-Time Car Auctions Delivered With Intelligence
11
Reduced time-to-
investigate and
resolution with
real-time insights
Reduced incidents
across global
auctions by 90%
Improved end-user
experience and
service reliability
“With Splunk ITSI, we have proactive infrastructure monitoring to ensure a consistent level
of customer service for interested buyers to bid on cars.”
– Ken Gavranovic, VP Technology Application Development & Operations,
Cox Automotive
Scaling the
implementation with
Splunk Cloud
12. Modernizing Enterprise Monitoring at International World
Development Bank
12
Enhanced service reliability and incident response
Ease and flexibility in creating business level
dashboards ad hoc and on-the-fly
Integrations with BMC Remedy to simplify incident
response and action
Tracing business transactions end to end
13. Why Another Splunk Solution?
13
Improve Service
Operations
with Machine Learning
Prioritize Incidents using
Event Analytics with
Business and Services
Context
Unify Siloed Monitoring
with Flexibility, Speed
and Scale
14. How Do You Get Splunk ITSI?
14
ONLINE SANDBOX TRIAL
7 days of access to a free, personal
environment in the cloud, with
prepopulated data
Engage in a proof-of-concept to
index your data and experience
Splunk ITSI
15. Sign Up Now – We’re here to help!
Harness the creativity and domain knowledge of your organization
to unlock the value of data and solve an important Business
Service problem through a joint service intelligence workshop with
key stakeholders
Define methods for:
› Proactive service monitoring
› Reduced risk and failures
› Faster issue resolution
› Increased business performance
What is it?
› 1 Day Splunk-sponsored onsite
Workshop
› Tightly linked with value
› Collaborative approach
› Build your own Glass Table
NOTE: This is the single customer-facing deck for ITSI through the broader launch at .conf2015 (to be repurposed for analysts & partners as necessary).
Assumptions:
The customer seeing this deck is ALREADY A SPLUNK CUSTOMER
The customer seeing this is a large enterprise (>$1B in revenues) with a complex IT environment, several existing point monitoring solutions and an IT-as-a-Service mentality (has the resources to map IT services and sees the value in doing so)
Here are the target customer criteria:
50GB or more of Enterprise/Cloud license
Understands the concept of IT services
Delivers multiple services to the business
Needs better approach and effective way to map services and KPIs
Likely (but not strictly) larger, more mature IT organizations
Splunk safe harbor statement.
That brings us to Splunk IT Service Intelligence – a packaged solution that enables real-time visibility into services driven by machine data.
Splunk ITSI speeds and simplifies service monitoring and analytics and enables IT to make better, smarter and informed business decisions.
This solution allows you to gain a deep understanding of your services. With Splunk ITSI, you have real-time views into the health of your services, and can use advanced analytics to find patterns, detect anomalies and trends to proactively monitor and address issues.
As a result you have improved service visibility, reduced resolution times, and a transformative approach to monitoring and analytics driven by machine-data.
To elaborate on that a bit more, here are the key areas in which Splunk ITSI helps our customers.
First, Splunk ITSI simplifies managing events and operations, with a data-first, analytics-driven approach. Using machine learning to detect normal vs. abnormal behavior and dynamically adapt thresholds to changing behavior. Customers can highlight anomalous activity, trend and alert on anomalous behavior to prevent service degradation. And use multivariate anomaly detection to reduce false positives.
With ITSI, we’re delivering business and service context to events with event analytics. IT can prioritize incidents with context on business criticality, ensuring IT focuses on the right tasks at the right time. They can drill down on problem entities to effectively troubleshoot incidents. ITSI helps improve incident handling by prioritizing notable events and automatically initiating defined incident and remediation responses with built-in integrations into incident management systems. In the last year, this is the area we’ve invested heavily in and you will see capabilities grow by leaps and bounds in the next few quarters.
Next, very much to the response of our customers, we wanted to redefine the role of IT as being strategic to the business. For the longest time, there has been a need to align how IT operates with business priorities. With Splunk ITSI, we enable both IT and the business stakeholders of various services to gain real-time insights into critical performance indicators, in a way that makes most sense to them.
Lastly but most importantly, the foundation principles was to leverage the power of our platform and maximize the value they get from not only machine data but also from all the flexibility and fast time to value that the platform provides. Our platform by itself has proven to scale which is a huge plus and it does not require months of implementation. But the value that our customers most enjoy is the flexibility we provide to customize their insights on-the-fly, on-demand. As business needs evolve for our customers, they can customize their views in Splunk ITSI to gain insights into these new business indicators/needs. The ability to interact with the data on-the-fly without costly customizations is a huge plus. Additionally, in the last year, we’ve invested heavily in ITSI modules – you’ll hear more about it from Alok shortly during and after his demo. These purpose-built domain-specific modules accelerate time to value and reduces the need for costly add-ons, customizations and extensions. By delivering an easy way to integrate machine data and events across silos, we’re delivering on a much desired need for end-to-end visibility.
With ITSI, we’re fast tracking how our customers get insights into their services, key performance indicators and events and incidents, whether that insight is focused on individual technology silos or services, micro-services, applications or business processes.
With that, I’m handing it off to Alok, to for a detailed demo.
Challenges:
In the past, Cox Automotive encountered uptime and application stability challenges during its auto auctions, but had little visibility into the root cause. When a problem occurred, their operations teams lacked visibility into whether the disruption was broad across the network or isolated to a single lane that needed investigation. It also lacked the ability to prioritize incident investigations and needed real-time insights into the performance and availability of each auction lane.
Solution:
Cox Automotive decided to standardize its data aggregation strategy on Splunk IT Service Intelligence to gain much-needed Operational Intelligence. With Manheim, AutoTrader.com and Kelley Blue Book, Cox Automotive is changing the car buying and selling business and enabling people to buy and sell cars from their homes, offices and mobile devices.
Since Cox Automotive implemented Splunk ITSI, the platform has delivered tremendous value and helped drive down key metrics such as mean-time-to-investigate (MTTI) and mean-time-to-resolution. As Cox deploys Splunk ITSI across all of its brands, the solution is already providing nearly instantaneous returns and is improving end-user-experience and service reliability
Now, if an incident with a camera, microphone or other device occurs, staff members get an alert within seconds, can troubleshoot quickly, and rapidly identify the issue and exact location for an auction technician to minimize disruption. Moreover, using advanced analytics and machine learning, staff can predict outages and can even monitor equipment degradation for proactive replacement.
Splunk Cloud:
Given the enormous amount of data at Cox Automotive, they are pleased with the company’s cloud strategy and notes that the ability to have all data flow to one place instead of distributing it among different data centers has been a godsend. With the Splunk platform, the company no longer has to depend on on-premises storage and it has the flexibility to scale on demand. With Splunk ITSI being adopted as the enterprise monitoring and analytics solution, Splunk Cloud has made it possible to scale their implementation and adoption across various brands within Cox Automotive.
Beyond the data associated with Manheim car auctions, Cox is ingesting approximately 2TB of data per day from across its infrastructure into the Splunk Cloud platform. This is enabling teams to not only understand the health and well-being of production systems but also giving release engineering and application development teams insights into new software releases.
Splunk was brought into the organization nearly 3 years ago, primarily to solve security use cases. IT ops teams were struggling with a variety of different monitoring tools, managed by different teams and showing different perspectives of the same data.
Needed to consolidate all this data and visualizations and needed a flexible way to create business dashboards and consolidate the the different tools and data into a single console and replace their Manager of Managers solution.
With (Splunk IT Service Intelligence) ITSI World Bank has realized the ease with which these tools can be integrated, events brought in and parsing the message from these events and to make sure that only what’s being displayed to the console are actionable meaningful alert.
Example service is the was with the treasury department.
There are financial penalties if trades aren’t released in a certain amount of time, as you can imagine. If it goes into the next day, interest rates may change that could cause a lot of problems for the trading desk.
With ITSI, they were able to put together a holistic dashboard that shows what the user experience is, how much time it takes for traders to log in, how many traders are still logged into the system and then when it comes to their business, how many trades have been released, how many are not released, how many are stuck, how many are completed, and then, what that overall processing time is, so that their treasury line managers can see on their desktop a holistic picture of real-time trading activity and what is happening now and do they need to take actions.
They didn’t have to spend weeks and months to integrate data sources to them, customize portlets and other things. With Splunk ITSI, thet were able to build exactly what they needed quickly within hours.
They’ve also built in integration into BMC Remedy to automoate incident workflows.
SANDBOX: (detailed faq available online)
What is the Splunk IT Service Intelligence Online Sandbox?
The Splunk IT Service Intelligence (ITSI) Online Sandbox is a personal online environment provisioned in the cloud where you can immediately try and experience the power of Splunk ITSI – with the ability to search, visualize, and analyze the pre-populated data.
What data is available in the sandbox?
The data in the sandbox is what you might expect to see from a small three-tier web store. There are web and mobile tiers that end users interact with, a middleware tier and a database tier. The web and mobile tiers are generating web logs, while the middleware and database tiers are generating logs from Splunk App for Stream. There are also OS metrics for all tiers: CPU, memory, disk space and IO Latency.
These pre-populated data sets were selected to provide you with meaningful visual indications and enable a thorough walkthrough of the solution.
Do I need to set up a Splunk.com account to use the Sandbox?
Yes. You can create a Splunk.com account on the Splunk Cloud Free Trial page.
How many Splunk IT Service Intelligence Online Sandboxes can I try?
You may try up to three 7-day sandboxes per account.
TRIAL:
Standard POC engagement
For the Presenter: After describing what a Glass Table Exercise is, and how they could benefit from one, ask for use cases that they think could benefit from ITSI. Try to get a room discussion going.