Bengaluru Splunk User Group meetup to share your Splunk .Conf20 takeaways, best moments, learning and of course virtual Splunkiness.

1. © 2020 SPLUNK INC.

2. © 2020 SPLUNK INC.
© 2020 SPLUNK INC.

3. During the course of this presentation, we may make forward-looking statements
regarding future events or plans of the company. We caution you that such statements
reflect our current expectations and estimates based on factors currently known to us
and that actual events or results may differ materially. The forward-looking statements
made in the this presentation are being made as of the time and date of its live
presentation. If reviewed after its live presentation, it may not contain current or
accurate information. We do not assume any obligation to update
any forward-looking statements made herein.
In addition, any information about our roadmap outlines our general product direction
and is subject to change at any time without notice. It is for informational purposes only,
and shall not be incorporated into any contract or other commitment. Splunk undertakes
no obligation either to develop the features or functionalities described or to include any
such feature or functionality in a future release.
Splunk, Splunk>, Data-to-Everything, D2E and Turn Data Into Doing are trademarks and registered trademarks of Splunk Inc. in the
United States and other countries. All other brand names, product names or trademarks belong to their respective owners. © 2020
Splunk Inc. All rights reserved
Forward-
Looking
Statements

4. © 2020 SPLUNK INC.
Agenda 1) Recap of .conf20
2) Data Age has Arrived
3) Data-to-Everything Platform Innovation
4) Cloud for the Data Age
5) Market-Leading Portfolios
• Observability
• IT
• Security

5. © 2020 SPLUNK INC.
30,000+
Attendees
200+
Sessions
50
Hours of Global Education
7
Guest Speakers
1
Gwen Stefani
0
Dollars Lost in Vegas
Splunk’s Biggest .conf Ever!
By the Numbers

6. © 2020 SPLUNK INC.
Over 165+ Customers Featured at .conf20

7. © 2020 SPLUNK INC.
The
Has Arrived

8. © 2020 SPLUNK INC.
Source: Splunk Data Age Report
80% of
organizations say
data is critical to
success

9. © 2020 SPLUNK INC.
Customers Turn Data Into
Doing with Splunk
Chief Information Officer
Link
Karen McElhatton
Chief Executive Officer
Link
Eric Yuan Chris Taylor
Vice President of Digital
Link

10. © 2020 SPLUNK INC.
Three Areas
of Focus
Today
• Massive innovation in
Data-to-Everything
Platform
• Cloud for The Data Age
• Investment in Market-
Leading Portfolios

11. © 2020 SPLUNK INC.
TM

12. © 2020 SPLUNK INC.
Market-Leading Portfolio
ITSecurity Observability
Stream
Processing
Machine
Learning
Collaboration and
Orchestration
Scalable
Index
Federated Search
and Analytics
Common Work Surface, APIs, Developer Tools | Mobile & Connected Experiences
Hybrid and Multicloud Ingestion and Processing

13. © 2020 SPLUNK INC.
Splunk Equips Customers to Fill Each
New Data Platform Requirement
Stream
Processing
Machine
Learning
Scalable
Index
Federated
Search and
Analytics
Collaboration
and Orchestration

14. © 2020 SPLUNK INC.
Turn Raw Data Into
High-value Information
Protect Sensitive Data
Distribute Data To Splunk
Or Other Destinations
Splunk Data Stream Processor
Detect Data Patterns or Conditions
Mask Sensitive Data
Aggregate Format
Normalize Transform
Filter Enhance
Public
Cloud
Message
Bus
Splunk Data Stream Processor
A real-time stream processing solution that collects, processes and
delivers data to Splunk and other destinations in milliseconds

15. © 2020 SPLUNK INC.
Unrestricted Learning
By Volume
Cardinality
and Flexibility
Splunk Streaming ML

16. © 2020 SPLUNK INC.
SMLE
Splunk Machine
Learning Environment

17. © 2020 SPLUNK INC.
Scalable
Index
• Faster management
• Parallel reduce
• Workload management

18. © 2020 SPLUNK INC.
Federation
• Platform federation
• Solutions federation
Hybrid Search
On-Premises Splunk Cloud

19. © 2020 SPLUNK INC.
Collaboration
and
Orchestration
• SecOps collaboration
• On-call management

20. © 2020 SPLUNK INC.
Innovation for the
Data Age Keynote
Tim Tully
Chief Technology Officer, Splunk
Watch the Keynote here
Want to
Learn More?

21. © 2020 SPLUNK INC.

22. © 2020 SPLUNK INC.
Four Week Release Cycle
3x Reduction in
Upgrade Time
Expanding to 100TB
Daily Ingest
Automated Private
App Vetting
75% of Apps
Self-Installable
The All New
Splunk Cloud:
Faster Delivery and Broader Availability

23. © 2020 SPLUNK INC.
SmartStore
Storage and compute separation
Search / Ingest
Elasticity – stateless indexing
Federated Search
Search across deployments
SPL2
Next-gen analytics language
KV Service
Scalable look-up service
Stream Processing
Stream-based analytics & ML
Stateless App
Tier
Stateless search head tier
Splunk Cloud
Rebuilt for the Data Age

24. © 2020 SPLUNK INC.
© 2019 SPLUNK INC.
Splunk Cloud
on AWS or Google
Generally
Available
(New)
New Regions
(Seoul)

25. © 2020 SPLUNK INC.
Nasdaq Goes All-In on Cloud
Brad Peterson
CIO/CTO, Nasdaq
We view Splunk as a strategic partner in
our cloud journey, and a key part of our
delivery and understanding of what's
going on with our customers and
how they use our products.”
Check out the interview!

26. © 2020 SPLUNK INC.
Empower Everyone with
a Data-to-Everything
Platform
Sendur Sellakumar
Chief Product Officer, Splunk
Watch the Keynote here
Want to
Learn More?

27. © 2020 SPLUNK INC.

28. © 2020 SPLUNK INC.
Source Security: Gartner Market Share Analysis; Security Software, Worldwide 2019, June 2020
Source IT: Gartner Market Share Analysis; ITOM, Performance Analysis Software, Worldwide 2019, June 2020
Source Observability: Gartner Inc. Gartner Magic Quadrant Application Performance Monitoring, C. Rich, F. De Silva, April 2020
Security ObservabilityIT
Splunk Leads in All Three Markets

29. © 2020 SPLUNK INC.

30. © 2020 SPLUNK INC.
Metrics, Traces, Logs
Splunk Observability Suite
NoSample™
Everything

31. © 2020 SPLUNK INC.
Observability Suite
Single, tightly integrated user experience
Splunk RUM
Splunk
Infrastructure
Monitoring
Splunk Log Observer Splunk On-Call

32. © 2020 SPLUNK INC.
Splunk
Log Observer
Purpose-built
for DevOps
B
ETA

33. © 2020 SPLUNK INC.
B
ETA
Splunk
Real User
Monitoring
(RUM)
End-to-end
Visibility

34. © 2020 SPLUNK INC.
New Acquisitions
Expand Splunk Observability

35. © 2020 SPLUNK INC.
Best in Class
Observability Capabilities
Capability Splunk
Metrics and infrastructure monitoring ✓
Tracing and APM ✓
Log investigation ✓
Byte code instrumentation ✓
Real user monitoring ✓
Synthetic monitoring* ✓
Full-fidelity ingestion ✓

36. © 2020 SPLUNK INC.
Open Standards
Data Collection
Observability
Suite
Splunk #1 Contributor in OTel

37. © 2020 SPLUNK INC.
Colby Funnell
Head of O11y, Atlassian
Atlassian Accelerates Observability
You can't do reliability without
observability. Data-driven decisions are
the best decisions. How do you know where
to invest time if you’re not measuring
availability? How do you know your
reliability if you’re not measuring
performance? Reliability is incredibly
important in this data age.”
Check out the interview!

38. © 2020 SPLUNK INC.

39. © 2020 SPLUNK INC.
IT Investigation and Monitoring
Event Analytics and Management
Service Monitoring and Insights
Incident Response and Automation
AIOps
IT Portfolio
Splunk Cloud / Splunk
Enterprise
Splunk Infrastructure Monitoring
Splunk IT Service Intelligence
Splunk On-Call
Market-Leading IT Portfolio
IT Products

40. © 2020 SPLUNK INC.
Splunk
Service
Intelligence
for SAP®
Solutions
• Prebuilt visualizations
• Ml-based predictive
analytics
• Advanced
troubleshooting
LA
R

41. © 2020 SPLUNK INC.
Splunk
Infrastructure
Monitoring
Add-On
• Detect, visualize and
resolve complex issues
• AI/ML directed
investigation
and monitoring
• Faster MTTD and MTTR

42. © 2020 SPLUNK INC.
Splunk IT
Essentials
• Prioritized Use Cases
• Step-by-step SPL
Search Guidance
• Track Your Learning
Progress

43. © 2020 SPLUNK INC.
The Most Comprehensive Platform for
Monitoring, Observability & AIOps
For every app, every location, every team
FP
O
3rd Party Ecosystem
DevOpsIT Ops
Logs Metrics Traces
On-Prem Infrastructure | Hybrid – Multicloud | Applications
Infrastructure Investigation and Monitoring
AIOps Observability
Incident Response and Automation

44. © 2020 SPLUNK INC.
McLaren: Driven By Data
Karen McElhatton
Group CIO, McLaren
The Splunk platform allows us to analyze
our data and make real-time decisions,
then act on those insights to inform the
experience that we’re tailoring. We’ve
always been data junkies, but it’s this data-
to-everything mindset that’s
made all the difference.”
Check out the interview!

45. © 2020 SPLUNK INC.

46. © 2020 SPLUNK INC.
Market-Leading Security Portfolio
Investigation and Forensics
SIEM/Security Analytics
Automation and Orchestration
Security Incident Response
Unified Security Operations
Security Portfolio
Splunk Cloud / Splunk
Enterprise
Splunk Enterprise Security
Splunk UBA
Splunk Phantom
Splunk Mission Control
Security Products

47. © 2020 SPLUNK INC.
Cloud
Security
Monitoring
Splunk Enterprise Security 6.4
• Proactively detect, monitor, and
investigate threats across cloud
environments
• Create a common cloud security
criteria for enhanced visibility
and faster response
• Comprehensive cloud security with
enhanced auditing, visualization,
and analytics

48. © 2020 SPLUNK INC.
Plug-In
Framework
Mission Control
The Plug-in Framework allows security
teams to plug their preferred tools into
Mission Control to:
• Unify security operations
• Simplify security while maintaining
best-of-breed choice
• Achieve faster, more efficient, and
more effective security operations
For customers: ideas.splunk.com

49. © 2020 SPLUNK INC.
Risk-
Based
Alerting
Splunk Enterprise Security
6.4
• Dramatically reduce false positives,
saving analyst time and headaches
• Detect threats, like ‘low-and-slow’
attacks, that traditional correlation
search methods miss
• Align your security operations to
industry frameworks, like MITRE
ATT&CK, by mapping frameworks
to detections
• Streamline investigations by surfacing
rich context and ‘story’
from the start

50. © 2020 SPLUNK INC.
Custom
Functions
Splunk Phantom 4.9
• OOTB custom function blocks
make playbook creation easier
and faster
• Reuse custom functions across
playbooks
• Little-to-no coding requirements
• Cascade changes to all
playbooks that include it
(or not)

51. © 2020 SPLUNK INC.
Zoom Thrives in the Data Age
Eric Yuan
CEO, Zoom
Splunk is our bodyguard for
our entire infrastructure”
Check out the interview!

52. © 2020 SPLUNK INC.
Observability
Service Intelligence
for SAP (LAR)
ITSI 4.7
Splunk Infra
Monitoring Add-On
and Content Pack
IT Essentials
ITSecurity
Service Observability
Suite (Beta)
Splunk RUM (Beta)
Splunk Log
Observer (Beta)
Splunk Observability
Mobile
Mission Control
Plug-in Framework
Enterprise Security 6.4
Phantom 4.9
DSP 1.2 SMLE
(Beta)
Launch Announcements

53. © 2020 SPLUNK INC.
New Resources to Help You
Thrive in the Data Age
Splunk Lantern
Role Based Learning
OnDemand and
Expert Services

54. © 2020 SPLUNK INC.
Check out .conf20 Sessions and More!
Observability
Sessions
Observability in the Data Age
Observability Breakouts
Platform Sessions
Platform for the Data Age
Platform Breakouts
Keynotes
How to Thrive in
the Data Age
Innovation for the Data Age
Empower Everyone with a Data-to-
Everything Platform
Success in the Data Age
Customer Interviews
Customer Interviews
Pioneers EBook
Security Sessions
Securing the Cloud Journey
in the Data Age
Security Breakouts
IT Sessions
Modernize IT Ops for
the Data Age
IT Breakouts

55. © 2020 SPLUNK INC.
Thank You!

56. © 2020 SPLUNK INC.
Appendix

57. © 2020 SPLUNK INC.
Don’t Miss These
DevOps Sessions from .conf20
APP1643B
Crossing the Streams: Integrating
SignalFx and Splunk (Yelp)
APP1571B
Infrastructure Monitoring at Scale: We
Learned the Hard Way So You Don’t
Have To (Atlassian)
APP1732B
Two Clicks to Root Cause: How Global
Payments Unified their Incident
Response (TSYS)
APP1933A
A Sneak Peek Into End-to-End Visibility
with Splunk (RUM)
APP1932A
Logging for Observability – Your
Requirements and Splunk’s New
Approach (Log Observer)
APP1938
Observability Super Session:
Observability in the Data Age
APP1453A
What’s New with Splunk’s
Observability Portfolio
Super Session for Observability Here
Customer-Led SessionsNew Product Deep DivesWhat’s New
A full list of DevOps sessions are here
in the .conf20 Session Catalog.

58. © 2020 SPLUNK INC.
Don’t Miss These
IT Ops Sessions from .conf20
ITO1189
An Introduction to ITSI with the
Latest and Greatest from the
New Release
ITO1606B
Site Reliability Engineering
with Phantom (Dell)
ITO1607B
How AIOps helps IT become a better
Business Partner (Accenture)
ITO1387B
Explode your Splunk ITSI Footprint:
Automate your Service Decomps!
(Cox Auto)
ITO1204B
Keeping the Trains Running with
Splunk at Transport for NSW
ITO1831B
That escalated quickly! Addressing
Telehealth delivery challenges in real-
time. (Iron Bow)
APP1935B
Stop, Investigate & Listen!
(IIM tech preso)
ITO1191B
Getting the Most Out of Logs for IT
Monitoring and Troubleshooting
ITO1536A
SignalFx + Splunk: Getting the
Best of Both Worlds
Mapped to Key IT Solutions and Sales Plays
ITOM
Modernization (AIOps)
Business Service
Insights (BSI)
Infra Investigation
and Monitoring (IIM)
ITO1937: IT Super Session: Modernizing IT Operations for Achieving
Better Outcomes In the Data Age
Full list of IT Ops sessions here

59. © 2020 SPLUNK INC.
Don’t Miss These
Security Sessions from .conf20 SEC1939
Securing the Cloud Journey
Mapped to New Product Announcements
Security Super Session
Full list of Security sessions here
SEC1280C
AWS Security and the
Splunk Security Suite
SEC1782
Enhance your security
posture with Google Cloud
and Splunk Security
Operations Suite
SEC1827A
Analytics based investigation
and automated response
with AWS + Splunk Security
Solutions
Cloud Security
Monitoring
SEC1593C
Blast Off Into the Future of
SecOps with Splunk
Mission Control
SEC1589A
How to Unify your Security
Tools with Splunk Mission
Control
Plug-In
Framework
SEC1391C
Full Speed Ahead with Risk-
Based Alerting (RBA)
SEC1113A
Streamlining Analysis of
Security Stories with Risk-
Based Alerting
Risk-Based
Alerting
SEC1853C
Phantom in Focus - A Deep
Dive on Splunk’s Security
Orchestration, Automation,
and Response Technology
SEC1928C
Little Code, Big Impact:
Easily Scale your Security
Automation with Splunk
SOAR
Custom
Functions

60. © 2020 SPLUNK INC.
Send Customers to .conf20
APP1935B
Leverage metrics from
Splunk Infrastructure
Monitoring (fka SignalFx
IM) for a more holistic, end-
to-end view of
infrastructure (IIM
solution and sales play)
To Learn About Key Announcements
Splunk
Infrastructure
Monitoring Add-On
ITO1536A
Leverage metrics from
Splunk Infrastructure
Monitoring (fka SignalFx
IM) for more holistic KPIs
and complete service
monitoring in IT Service
Intelligence #bettertogether
Metrics for Service
Intelligence
ITO1108B
New starter experience for
IT use cases on Splunk to
help customers achieve
more rapid time-to-value
Beta of IT
Essentials
ITO1353B
New ITSI add-on to monitor
and ensure performance of
critical SAP environments
(LAR)
Splunk Service
Intelligence for
SAP® Solutions