What is Splunk? At the end of this session you’ll have a high-level understanding of the pieces that make up the Splunk Platform, how it works, and how it fits in the landscape of big data. You’ll see practical examples that differentiate Splunk while demonstrating how to gain quick time to value. This was presented at SplunkLive! Stockholm October 2015, for more information visit http://live.splunk.com/stockholm

1. Copyright
©
2014
Splunk
Inc.
Ge:ng
Started
with
Splunk
Enterprise
Robin
Crohns,
Senior
Sales
Engineer,
CISSP

2. 2

3. IoT

4. Applica+on
Delivery

5. ITSM

6. SECURITY

7. BI

8. MANY
USE
CASES

9. ONE
PLATFORM

10. 10

11. Agenda
Basics
of
Splunk
Enterprise
Demo

12. Make
machine
data
accessible,
usable
and
valuable
to
everyone.

13. Machine
Data
Contains
CriKcal
Insights
Order
ID
Customer’s
Tweet
Time
WaiKng
On
Hold
Product
ID
Company’s
TwiQer
ID
Order
ID
Customer
ID
TwiQer
ID
Customer
ID
Customer
ID
Sources
Order
Processing
TwiDer
Care
IVR
Middleware
Error

14. Ingests
Data
From
Heterogeneous
Data
Sources
perf
shell
API
Mounted
File
Systems
hostnamemount
syslog
TCP/UDP
Event
Logs
Performance
Ac+ve
Directory
syslog
hosts
and
network
devices
Unix,
Linux
and
Windows
hosts
Local
File
Monitoring
Splunk
Forwarder
virtual
host
Windows
Scripted
or
Modular
Inputs
shell
scripts
API
subscrip:ons
Mainframes
*nix
Wire
Data
Splunk
App
for
Stream

15. Inside
Universal
Indexing
Accurate
searching
and
trending
by
Kme
across
all
data
AutomaKc
event
boundary
idenKficaKon
AutomaKc
Kmestamp
normalizaKon

16. Industry
Leading
PlaXorm
For
Machine
Data
MACHINE
DATA
Online
Services
Web
Services
Servers
Security
GPS
LocaKon
Storage
Desktops
Networks
Packaged
ApplicaKons
Custom
ApplicaKons
Messaging
Telecoms
Online
Shopping
Cart
Web
Clickstreams
Databases
Energy
Meters
Call
Detail
Records
Smartphones
and
Devices
RFID
On-­‐
Premises
Private
Cloud
Public
Cloud
ANSWER
ANY
QUESTION
Developer
PlaQorm
Report
and
analyze
Custom
dashboards
Monitor
and
alert
Ad
hoc
search

17. Industry
Leading
PlaXorm
For
Machine
Data
MACHINE
DATA
Online
Services
Web
Services
Servers
Security
GPS
LocaKon
Storage
Desktops
Networks
Packaged
ApplicaKons
Custom
ApplicaKons
Messaging
Telecoms
Online
Shopping
Cart
Web
Clickstreams
Databases
Energy
Meters
Call
Detail
Records
Smartphones
and
Devices
RFID
On-­‐
Premises
Private
Cloud
Public
Cloud
ANSWER
ANY
QUESTION
Developer
PlaQorm
Report
and
analyze
Custom
dashboards
Monitor
and
alert
Ad
hoc
search

18. Industry
Leading
PlaXorm
For
Machine
Data
MACHINE
DATA
Online
Services
Web
Services
Servers
Security
GPS
LocaKon
Storage
Desktops
Networks
Packaged
ApplicaKons
Custom
ApplicaKons
Messaging
Telecoms
Online
Shopping
Cart
Web
Clickstreams
Databases
Energy
Meters
Call
Detail
Records
Smartphones
and
Devices
RFID
On-­‐
Premises
Private
Cloud
Public
Cloud
ANSWER
ANY
QUESTION
Developer
PlaQorm
Report
and
analyze
Custom
dashboards
Monitor
and
alert
Ad
hoc
search

19. Industry
Leading
PlaXorm
For
Machine
Data
MACHINE
DATA
Online
Services
Web
Services
Servers
Security
GPS
LocaKon
Storage
Desktops
Networks
Packaged
ApplicaKons
Custom
ApplicaKons
Messaging
Telecoms
Online
Shopping
Cart
Web
Clickstreams
Databases
Energy
Meters
Call
Detail
Records
Smartphones
and
Devices
RFID
On-­‐
Premises
Private
Cloud
Public
Cloud
ANSWER
ANY
QUESTION
Developer
PlaQorm
Report
and
analyze
Custom
dashboards
Monitor
and
alert
Ad
hoc
search

20. Industry
Leading
PlaXorm
For
Machine
Data
MACHINE
DATA
Online
Services
Web
Services
Servers
Security
GPS
LocaKon
Storage
Desktops
Networks
Packaged
ApplicaKons
Custom
ApplicaKons
Messaging
Telecoms
Online
Shopping
Cart
Web
Clickstreams
Databases
Energy
Meters
Call
Detail
Records
Smartphones
and
Devices
RFID
On-­‐
Premises
Private
Cloud
Public
Cloud
ANSWER
ANY
QUESTION
Developer
PlaQorm
Report
and
analyze
Custom
dashboards
Monitor
and
alert
Ad
hoc
search

21. Industry
Leading
PlaXorm
For
Machine
Data
Machine
Data:
Any
Loca+on,
Type,
Volume
Online
Services
Web
Services
Servers
Security
GPS
LocaKon
Storage
Desktops
Networks
Packaged
ApplicaKons
Custom
ApplicaKons
Messaging
Telecoms
Online
Shopping
Cart
Web
Clickstreams
Databases
Energy
Meters
Call
Detail
Records
Smartphones
and
Devices
RFID
On-­‐
Premises
Private
Cloud
Public
Cloud
PlaQorm
Support
(Apps
/
API
/
SDKs)
Enterprise
Scalability
Universal
Indexing
Answer
Any
Ques+on
Developer
PlaQorm
Report
and
analyze
Custom
dashboards
Monitor
and
alert
Ad
hoc
search
Any
amount,
any
locaKon,
any
source
Schema-­‐
on-­‐the-­‐fly
Universal
indexing
No
back-­‐end
RDBMS
No
need
to
filter
data

22. 1.
2.
3.
4.
Simple
Steps
to
Deploy
Splunk
Enterprise
Download
Install
Forward
Data
Search
Databases
Networks
Servers
Virtual
Machines
Smart
phones
and
Devices
Custom
ApplicaKons
Security
Web
Server
Sensors
Four
steps:

23. Scales
to
Hundreds
of
TBs/Day
Enterprise-­‐Class
Scale,
Resilience
and
Interoperability
Send
data
from
thousands
of
servers
using
any
combinaKon
of
Splunk
Forwarders
Auto
load-­‐balanced
forwarding
to
Splunk
Indexers
Offload
search
load
to
Splunk
Search
Heads

24. Define
Product
Roles
Searching
and
ReporKng
(Search
Head)
Indexing
and
Search
Services
(Indexer)
Data
CollecKon
and
Forwarding
(Forwarder)
Data
Governor
(Cluster
Master)
Distributed
Management
(Deployment
Server)
Databases
Networks
Servers
Virtual
Machines
Smart
phones
and
Devices
Custom
ApplicaKons
Security
Web
Server
Sensors

25. 25

26. 26

27. 27

28. 28

29. 29

30. How
Search
Works

31. How
Search
Works

32. How
Search
Works

33. How
Search
Works

34. How
Search
Works

35. Enrich
Raw
Data
to
Make
It
More
Meaningful
LDAP,
AD
Watch
Lists
CRM/ERP
CMDB
External
Data
Sources
Insight
comes
out

36. AcKonable
AlerKng

37. Dynamic
ReporKng
Chart
on
any
search
Choose
visualizaKon
Save
as
a
report

38. Combine
Reports
to
Create
Dashboards
Use
the
built-­‐in
dashboard
editor
Or
embed
the
reports
into
external
sites
like
a
wiki

39. Educa+on
Healthcare
Technology
Energy
and
U+li+es
Manufacturing
Telecommunica+ons
Cloud
and
Online
Services
Government
Retail
Financial
Services
and
Insurance
Media
Travel
and
Leisure
39
Proven
at
10
000+
Customers
in
100
Countries

40. A
Growing
Global
Community
of
Users
Dev.splunk.com
40,000+
ques+ons
and
answers
500+
apps
Local
User
Groups
and
SplunkLive!
events

41. Summary
Universal
Machine
Data
PlaXorm
Real
Time
Architecture
Schema
on
the
Fly
Agile
ReporKng
and
AnalyKcs
Scales
from
Desktop
to
Enterprise
Fast
Time
to
Value
Passionate
and
Vibrant
Community

42. Which
is
the
most
central
func+on
in
Splunk?

43. What
machine
data
can
Splunk
consume?

44. Is
it
hard
to
start
using
Splunk?

45. Thank
You