Full-Stack End-to-End SAP-Monitoring mit Splunk - Splunk webinar slides

1. © 2021 SPLUNK INC.
Splunk for
SAP
Spring 2022
Full-Stack End-to-End
SAP-Monitoring mit Splunk

2. © 2021 SPLUNK INC.
Business
Operations
IT
Security
Migration
The
Data-to-Everything
Platform

3. © 2021 SPLUNK INC.
Business
Operations
IT
Security
Migration
Holistic
SAP & non-SAP
Supervision

4. © 2021 SPLUNK INC.
Daily SAP Monitoring
● Help you SAP Team to free up time for important tasks
● Average time spent on daily checks per SID is 20 - 45
Minutes
● Multiple Transaction
● Different Filters per Transaction
● Step 1: A Splunk Dashboard including all Checks
● Step 2: Make your daily checks to hourly checks with
Alarming
https://blogs.sap.com/2020/10/19/basis-daily-monitoring-t-codes/

5. © 2021 SPLUNK INC.
Splunk Service Intelligence for SAP
What It Is
Out-of-the-box ITSI content pack for SAP application
and infrastructure monitoring
● Service Analyzer Tree for SAP
● Service Health Dashboard with 100s of SAP metrics & KPIs
● ITSI AI/ML predictive analytics for SAP
● Correlation of SAP and infrastructure data for advanced
troubleshooting
● Glass Tables for SAP health data
Why It Matters
SAP is mission critical for business. SAP environments
are very large, complex with many integrations. Suffer
frequent outages, long MTTR and MTTI due to siloed
monitoring tools.
SI for SAP addresses these issues:
● Reduces MTTR & MTTI with real-time correlated view of -
SAP Applications, infrastructure / Cloud
● Prevents outages with proactive alerting
● Reduce time to value with OOTB SAP content

6. © 2021 SPLUNK INC.
Infrastructure, Performance and
Availability Monitoring
● SAP performance and transaction dashboards and
alerts
● Work process utilisation
● SAP server and database availability.
● JVM load and memory
● Real-time and historic view of load and response by
user, transaction code or any field in the dataset
● Availability monitoring of SAP solution components

7. © 2021 SPLUNK INC.
SAP® AIOps for
Incident
Intelligence
AIOps Event Analytics and
Management
Reduce event/alarm noise and cluster
events into episodes for better
management
Meet SLAs with additional service
context and be more productive with a
prioritized approach
Clean feed into ServiceNow / other
ITSM enriched with all SAP telematics
Launch automated actions
Intelligent Incident Management
Accelerate MTTR using real-time
event correlation, automated incident
prioritization and integrations with IT
service management (ITSM) tools

8. © 2021 SPLUNK INC.
SAP® AIOps for
Incident Avoidance
Predictive Analytics
AIOps for predicting the health score of
SAP services 30 minutes in the future
Advanced warning for predictive service
delivery
550+ Out-Of-The-Box Adaptive and
configurable SAP KPIs
Dynamic Thresholding
Show health of critical services
AIOps for detecting normal / not-normal
behavior
Proactive alerts when services behave
abnormally

9. © 2021 SPLUNK INC.
Business
Operations
IT
Security
Migration
Holistic
SAP & non-SAP
Supervision

10. © 2021 SPLUNK INC.
SAP Security
The facts
Average cost of a data
breach is about $4M
206 days is the average time to identify a breach and the average time to contain a breach was 73 days

11. © 2021 SPLUNK INC.
SAP Breach
One example: Follow the Trail

12. © 2021 SPLUNK INC.
SAP as part of the SOC
DNS
DHCP
Physical Access Control
Files
VPN

13. © 2021 SPLUNK INC.
Business
Operations
IT
Security
Migration
Holistic
SAP & non-SAP
Supervision

14. © 2021 SPLUNK INC.
Development and Migration
● SAP cloud migration and SAP upgrades with pre and
post analysis in side-by-side views
● Automate 100% of daily health checks and visualise
and alert on results
● Analize batch job execution, IDoc & change documents
processing, PI/PO message – payload, logs and BI
Process Chains
● Provide insights into status of critical business
processes
● Provides insights into business process context via
IDoc content, e.g. sales data or PO without PR
Expectation…..
….. Reality

15. © 2021 SPLUNK INC.
Business
Operations
IT
Security
Migration
Holistic
SAP & non-SAP
Supervision

16. © 2021 SPLUNK INC.
SAP® Business
Service Insights
Map SAP landscape to OOTB
Dashboards

17. © 2021 SPLUNK INC.
Business Service Insights
● CXO Top-level Business KPIs
● Business and Service Owner KPI visualisation and
alerting
● AIOps for detecting ‘not-normal’ performance to predict
and prevent outages
● Rapid root cause analysis using both metrics and
events
● Event Analytics to reduce event/alarm noise by
clustering events for better management
● Reduce MTTI, MTTD & MTTR

18. © 2021 SPLUNK INC.
Unique Value Points
● Reduce RCA and MTTR - 80-90% less unplanned downtime
● Scale - From GB to PT Data ingestion per day and customizable data retention
● Real-Time - Perform Actions on Data in Real Time
● End-to-End - Correlate SAP and non-SAP Data in one Platform to get Business Process
End-to-End Visibility
● Full Stack - Root Cause Analysis into the full technology and cloud stack
● Schema-less - Ingest any kind of structured and unstructured Data
● Advanced Search Language - Flexible Correlate, Enrich, Manipulate, Structure,
Visualize, apply Machine Learning and more during Search Time to Data
● Fast Time to Value - Value in Weeks instead of Months

19. © 2021 SPLUNK INC.
Splunk Service Intelligence for SAP®
solutions provides end-to-end views
into the health and performance of
business services — accelerating the
time it takes to detect and respond to
costly outages by 80-90%.

20. © 2021 SPLUNK INC.
Splunk use cases for SAP®
IT Operations
Processes
SAP cloud migration and SAP
upgrades with pre and post
analysis in side-by-side views
Automate 100% of daily health
checks and visualise and alert
on results
Analize batch job execution,
IDoc & change documents
processing, PI/PO message –
payload, logs and BI Process
Chains
Provide insights into status of
critical business processes
Provides insights into business
process context via IDoc
content, e.g. sales data or PO
without PR
Infrastructure,
Performance and
Availability Monitoring
SAP performance and
transaction dashboards and
alerts
Work process utilisation
SAP server and database
availability.
JVM load and memory
Real-time and historic view of
load and response by user,
transaction code or any field in
the dataset
Availability monitoring of SAP
solution components
Business Service
Insights
CXO Top-level Business KPIs
Business and Service Owner
KPI visualisation and alerting
AIOps for detecting ‘not-
normal’ performance to predict
and prevent outages
Rapid root cause analysis
using both metrics and events
Event Analytics to reduce
event/alarm noise by clustering
events for better management
Reduce MTTI, MTTD & MTTR
Security and
Compliance
Automate compliance efforts with
real time SAP audit reports
Track user authentication activity
with location
User Behavior Analytics
Analyse and mitigate risks
Suspicious login activity
Data theft
Execution of sensitive
transactions
Anomalies in system log, e.g.
increased message frequency
Non-compliance System
configuration alerts

21. © 2021 SPLUNK INC.
Reduced MTTR by 70%
● Required a modern solution to prevent costly
$100k/hour outages
● Transformed SAP operations by ingesting SAP
data into Splunk through PowerConnect
○ Service Intelligence for SAP gave correlated views into
application, infrastructure and business process layers
○ Phantom for automating critical notifications and
resolutions
● Tracked business process for outbound delivery -
each step generated a health score
● Reduced unplanned downtime and war room
activity by 64%
Service Monitoring
Incident Management
Splunk helped understand complex SAP data and create
alerts that matter
Manufacturing

22. © 2021 SPLUNK INC.
Discussion / Q&A

23. © 2021 SPLUNK INC.
PowerConnect: Decrypting the Black Box
Voluminous, mission-critical information
No access to logs from outside SAP
Restricted access (BASIS) from inside SAP
Limited visualization capabilities
Too technical for executives
Limited alerting and predictive analytics
SAP Certified Solution

24. © 2021 SPLUNK INC.
PowerConnect: Decrypting the Black Box

25. © 2021 SPLUNK INC.
Deployment Architecture
• What needs to be on the SH?
– Powerconnect
– IT Service Intelligence
– Service Intelligence for SAP
• What needs to be on the Indexers?
– IT Service Intelligence
(SA-IndexCreation,Splunk_TA_Infra)
– ITSI Doc Reference

26. © 2021 SPLUNK INC.
Links
Service Insights for SAP - KPI List
Customer Example 3M - Video - Slides
All Presentations regarding SAP

27. © 2021 SPLUNK INC.
Thank You