Together, Splunk + Puppet have the capabilities to address multiple enterprise initiatives that allow organizations to analyze with intelligence and act quickly - all while successfully scaling their DevOps and transformational practices across the enterprise. Unifying machine data analytics with infrastructure and application orchestration enables IT to speed time from insight to action. In this session, learn how Puppet + Splunk are monitoring, troubleshooting and automating all the things with a set of new integrations to make your DevOps transformation a reality!

1. The Future of Automation.
Moving Faster with Puppet and Splunk.
Hal Rottenberg
Staff Engineer & DevOps Evangelist
Splunk
Andrew Brader
Principal Solutions Engineer - Partner Engineering
Puppet

2. Splunk Forward-Looking Statements

3. What is Splunk?

4. 1. Number one
2. Number two
3. Number three
Splunk turns machine data into answers.

5. Why Splunk?
FAST TIME-TO-VALUE
ONE PLATFORM, MANY USE CASES
VISIBILITY ACROSS STACK--NO SILOS
ASK ANY QUESTION OF DATA
ANY DATA, ANY SOURCE

6. The dev lifecycle is complex
Other Tools
API
SDKs UI
Escalation/
Collaboration
Common Data Fabric
Code Build ConfigTest/QA ReleaseStagePlan Monitor

7. Splunk solutions
Platform for Operational Intelligence
1,000+ Apps
and Add-Ons
Splunk Premium
Solutions

8. Baseline Analyze Act
(if you remember only one thing from this talk, this is that thing)

9. like chocolate and peanut butter, and not like nuts and gum
Using Puppet and Splunk
independently is good.
But using them together
is great!

10. Splunk + Puppet Complementary Capabilities
• System metadata
• Deep system inspection
• Container contents
• Network device interrogation
• APIs
• Community plugins
• Splunk server
• Splunk agent
• Bundles
• Modules
• Query language
• Alerts
• Machine learning
• Anomaly detection
• ITSI
• PuppetDB
• PE reporting
• Reconfigure agents
• Puppet agent
• Puppet code / models
• Reconfigure systems
• Re-discovery
Baseline Analyze Act
Puppet Splunk

11. Connect all your
systems, past,
present, and
future, to Splunk,
automatically!

12. But that’s just the beginning
of a long list of possibilities!

13. Splunk App and Add-On for Puppet
Enterprise
Overview and Demo

14. Splunk App for Puppet Enterprise
● Discover and monitor the
health of all resources under
management
● Ingest all data from Puppet
Enterprise and correlate that
data across your entire tech
stack
● Visualize your Puppet data
with out of the box dashboards
for easy troubleshooting

15. Current discussion and integration
Catalog
Enforce
Report
Design
Simulate
Puppet
Alignment to
Splunk
Ecosystem
Expanding
Visibility by
Extension of
the Puppet API

16. Demo

17. Puppet Enterprise Operational Intelligence
Puppet Enterprise
Real-time Analytics
Normalization of
Puppet API
Predictive
Analytics

18. Puppet Enterprise Facts Data Driven Dynamics
Puppet Facts
with Trending
Correlate with
Other Splunk
Machine Data
Instant
Alerting &
Response

19. Puppet Enterprise Facter Pulled On Demand

20. Puppet Enterprise Catalog Compliance
Drill Down
Analytics via
Splunk
Compliance &
Link back to
Puppet
Full Listing of
All Assets

21. Puppet Enterprise Event Summary
Summary of
Resources
Data Driven
Class
Breakdown
Understanding
Assets
Event
Summary

22. Puppet Enterprise Event Summary with Details
Asset
Summary to
Catalog
Puppet Events
Drilldown
Resource
Allocation
Type, Class
and Status
Analytics

23. Splunk ITSI Module for Puppet
Enterprise

24. Splunk ITSI: Providing Service Insights and Event Analytics

25. Introducing the Splunk ITSI Module for Puppet Enterprise
● Create a Glass Table in Splunk
ITSI to map out your
infrastructure environment
● Detect an issue and take
immediate action through a
Puppet manifest using the Splunk
ITSI notable events framework
● Configure automatic remediation
using Puppet manifests through
machine learning or individual
action

26. Demo
The following is a recorded demo. Our
resident Splunk engineer really wanted to
be here, BUT he also really wanted to be in
Hawaii too.

28. Getting your core Splunk
infrastructure going is
something we can automate!

29. Coming Soon! New Puppet Modules
supported by Splunk.
Puppet Module for Splunk Enterprise
Puppet Module for Splunk Universal Forwarder

30. Overview of Puppet Modules
● Automatically deploy Splunk with
new Puppet modules:
○ Splunk Enterprise
○ Universal Forwarder
● Not approved yet, will be approved
post-PuppetConf
● Supported by Splunk

31. Demo

32. Puppet and Splunk

33. Where to go? 3 Things to Check Out Today!
● Visit the Splunk Booth in the Exhibitor Pavilion!
● Get the Splunk App/Add-On for Puppet Enterprise and Splunk ITSI Module for Puppet
Enterprise on Splunkbase and Github!
● Check out the Puppet Modules for Splunk Enterprise and the Universal Forwarder on Forge!
Baseline Analyze Act
Puppet Module
for Splunk
Universal
Forwarder
Puppet Module
for Splunk
Enterprise

34. Q&A