SplunkLive! Warsaw 2016 - ING Bank

•

1 like•867 views

This document discusses ING Bank Śląski's use of Splunk for IT monitoring and business insights. It provides an overview of ING Bank Śląski, how the bank started using Splunk to monitor various IT systems and applications, and how Splunk has provided value through use cases across IT and business functions. The document also outlines the bank's Splunk infrastructure and future plans to expand Splunk usage through new apps and integrations with Hadoop and machine learning.

Technology

1
We splunk as we bank.
In our own way.
ING Bank Śląski S.A.
Joanna Tworzydło - Dziadkiewicz

2
Agenda
About ING Bank Śląski S.A. and me 
How it all started
Why Splunk won us over
How do we use it
Future plans

3
About ING Bank Śląski S.A.
OUR GOAL
Clearandeasy Anytime, anywhere Empower Keepgetting better
Empowerourcustomersto stayastep aheadinlifeand inbusiness

5
ING Bank Śląski
Lider Informatyki XX-lecia

6
My Background and Role
Senior IT Architect – ex developer and ex Splunk administrator
Resposible - among others - for Splunk in ING Bank Śląski
My favorite Splunk tee-shirt: „Take the sh out of IT”
I splunk not only at work but also at home 

14
How Splunk won us over
IT use cases
Customer
PreScoring 1

15
How Splunk won us over
IT use cases
Customer PreScoring 2

16
How Splunk won us over
IT use cases
Customer
Portfolio
Management
Categorization

17
How Splunk won us over
IT use cases
SDLC Tools
DevOps

18
How Splunk won us over
IT use cases
Fraud
Detection
System

19
How Splunk won us over
IT use cases
Card System

20
How Splunk won us over
Business use cases
Customer Journey Mapping

21
How Splunk won us over
Freedom
Independence
Comprehensiveness

22
Splunk Enterprise at ING Bank Śląski
IT Monitoring - areas of intrest
Infra Application Process Customer

23
Splunk Enterprise at ING Bank Śląski
Collected data and its value
Data Operational Intelligence
Search and
Investigation
Proactive
Monitoring
Operational
Visibility,
DevOps
Real-time
Business
Insights
Online
Services
Web
Services
Servers Security
Networks
Domain
systems
Custom
Applications
Databases
Active
Directory
Logfiles
SocialMedia

24
Splunk Enterprise at ING Bank Śląski
High level view
Data coming from thousands of servers/applications/tools/technologies using any combination of Splunk forwarders
Auto load-balanced forwarding to Splunk Indexer Cluster
Offload search load to Splunk Search Head Cluster

25
Future plans
Splunk App for Stream
Hadoop integration
Machine Learning in Splunk
IT Service Intelligence

26
Top Takeaways
You cannot argue with your data
Nothing is impossible with Splunk – like with LEGO
Dream Big!

Xerox uses Splunk to monitor its electronic payment processing systems. Some key benefits of Splunk include huge time savings over its previous Tivoli platform, increased efficiencies across the business from automated features, and improved visibility into transaction processing through Splunk dashboards. Splunk helps with IT operations monitoring, compliance activities, fraud management, and SSL certificate management. Xerox is able to track $90 billion in payments annually and monitor fraud in real-time using Splunk.

PayPal Customer Presentation

Splunk

This document discusses using Splunk to analyze logs from Akamai Cloud Monitor in real-time. Akamai Cloud Monitor delivers logs within 60 seconds, enabling real-time operational monitoring and analytics. The document outlines how logs are configured and delivered in JSON format to a Splunk receiver. It also describes building a Splunk application to gain insights into availability, performance, security and release monitoring using the enriched Akamai log data.

Using Splunk at MoneyGram International

Splunk

Heidi Coleman is a data scientist at MoneyGram International whose team uses Splunk to detect and anticipate fraud attacks. Prior to using Splunk, MoneyGram had to reactively investigate fraud after it occurred, but now Splunk generates alerts when suspicious activity is detected, allowing MoneyGram to proactively contact agents. Leveraging Splunk's search capabilities and ability to join multiple log types has helped MoneyGram identify anomalous patterns and geolocate suspicious entities. This has significantly reduced MoneyGram's fraud losses since implementing Splunk.

.conf Go 2023 - Data analysis as a routine

Splunk

.conf Go 2023 - How KPN drives Customer Satisfaction on IPTV

Splunk

.conf Go 2023 - Navegando la normativa SOX (Telefónica)

Splunk

.conf Go 2023 - Raiffeisen Bank International

Splunk

This document discusses standardizing security operations procedures (SOPs) to increase efficiency and automation. It recommends storing SOPs in a code repository for versioning and referencing them in workbooks which are lists of standard tasks to follow for investigations. The goal is to have investigation playbooks in the security orchestration, automation and response (SOAR) tool perform the predefined investigation steps from the workbooks to automate incident response. This helps analysts automate faster without wasting time by having standard, vendor-agnostic procedures.

El documento describe la transición de Cellnex de un Centro de Operaciones de Seguridad (SOC) a un Equipo de Respuesta a Incidentes de Seguridad (CSIRT). La transición se debió al crecimiento de Cellnex y la necesidad de automatizar procesos y tareas para mejorar la eficiencia. Cellnex implementó Splunk SIEM y SOAR para automatizar la creación, remediación y cierre de incidentes. Esto permitió al personal concentrarse en tareas estratégicas y mejorar KPIs como tiempos de resolución y correos electrónicos anal

conf go 2023 - El camino hacia la ciberseguridad (ABANCA)

Splunk

Este documento resume el recorrido de ABANCA en su camino hacia la ciberseguridad con Splunk, desde la incorporación de perfiles dedicados en 2016 hasta convertirse en un centro de monitorización y respuesta con más de 1TB de ingesta diaria y 350 casos de uso alineados con MITRE ATT&CK. También describe errores cometidos y soluciones implementadas, como la normalización de fuentes y formación de operadores, y los pilares actuales como la automatización, visibilidad y alineación con MITRE ATT&CK. Por último, señala retos

Splunk - BMW connects business and IT with data driven operations SRE and O11y

Splunk

BMW is defining the next level of mobility - digital interactions and technology are the backbone to continued success with its customers. Discover how an IT team is tackling the journey of business transformation at scale whilst maintaining (and showing the importance of) business and IT service availability. Learn how BMW introduced frameworks to connect business and IT, using real-time data to mitigate customer impact, as Michael and Mark share their experience in building operations for a resilient future.

Splunk x Freenet - .conf Go Köln

Splunk

Splunk Security Session - .conf Go Köln

Splunk

The document is a presentation on cyber security trends and Splunk security products from Matthias Maier, Product Marketing Director for Security at Splunk. The presentation covers trends in security operations like the evolution of SOCs, new security roles, and data-centric security approaches. It also provides updates on Splunk's security portfolio including recognition as a leader in SIEM by Gartner and growth in the SIEM market. Maier highlights some breakout sessions from the conference on topics like asset defense, machine learning, and building detections.

Data foundations building success, at city scale – Imperial College London

Splunk

Universities have more in common with modern cities than traditional places of learning. This mini city needs to empower its citizens to thrive and achieve their ambitions. Operationalising data is key to building critical services; from understanding complex IT estates for smarter decision-making to robust security and a more reliable, resilient student experience. Juan will share his experience in building data foundations for a resilient future whilst enabling digital transformation at Imperial College London.

Splunk: How Vodafone established Operational Analytics in a Hybrid Environmen...

Splunk

SOC, Amore Mio! | Security Webinar

Splunk

.italo operates an Essential Service by connecting more than 100 million people annually across Italy with its super fast and secure railway. And CISO Enrico Maresca has been on a whirlwind journey of his own. Formerly a Cyber Security Engineer, Enrico started at .italo as an IT Security Manager. One year later, he was promoted to CISO and tasked with building out – and significantly increasing the maturity level – of the SOC. The result was a huge step forward for .italo. So how did he successfully achieve this ambitious ask? Join Enrico as he reveals the key insights and lessons learned in his SOC journey, including: Top challenges faced in improving security posture Key KPIs implemented in order to measure success Strategies and approaches applied in the SOC How MITRE ATT&CK and Splunk Enterprise Security were utilised Next steps in their maturity journey ahead

.conf Go 2022 - Observability Session

Splunk

This document summarizes a presentation about observability using Splunk. It includes an agenda introducing observability and why Splunk for observability. It discusses the need for modernization initiatives in companies and the thousands of changes required. It presents that Splunk provides end-to-end visibility across metrics, traces and logs to detect, troubleshoot and optimize systems. It shares a customer case study of Accenture using Splunk observability in their hybrid cloud environment. Finally, it concludes that observability with Splunk can drive results like reduced downtime and faster innovation.

.conf Go Zurich 2022 - Keynote

Splunk

This document contains slides from a Splunk presentation covering the following topics: - Updated Splunk logo and information about meetings in Zurich and sales engineering leads - Ideas for confused or concerned human figures in design concepts - Three buckets of challenges around websites slowing, apps being down, and supply chain issues - Accelerating mean time to detect, identify, respond and resolve through cyber resilience with Splunk - Unifying security, IT and DevOps teams - Splunk's technology vision focusing on customer experience, hybrid/edge, unleashing data lakes, and ubiquitous machine learning - Gaining operational resilience through correlating infrastructure, security, application and user data with business outcomes

.conf Go Zurich 2022 - Platform Session

Splunk

This document summarizes a presentation about Splunk's platform. It discusses Splunk's mission of helping customers create value faster with insights from their data. It provides statistics on Splunk's daily ingest and users. It highlights examples of how Splunk has helped customers in areas like internet messaging and convergent services. It also discusses upcoming challenges and new capabilities in Splunk like federated search, flexible indexing, ingest actions, improved data onboarding and management, and increased platform resilience and security.

.conf Go Zurich 2022 - Security Session

Splunk

The document appears to be a presentation from Splunk on security topics. It includes sections on cyber security resilience, the data-centric modern SOC, application monitoring at scale, threat modeling, security monitoring journeys, self-service Splunk infrastructure, the top 3 CISO priorities of risk based alerting, use case development, a security content repository, security PVP (posture, vision, and planning) and maturity assessment, and concludes with an overview of how Splunk can provide end-to-end visibility across an organization.

Inside SecOps at bet365

Splunk

John Eccleshare, Head of Compliance and Information Security at bet365, discusses bet365's migration of their Splunk deployment to Splunk Cloud. Some key points: - bet365 processed 3 TB of data per day in their on-prem Splunk deployment but scaling it for new use cases was challenging. - Migrating to Splunk Cloud improved performance, enhanced security capabilities, and freed up 4 FTEs by reducing maintenance and upgrade work. - Lessons learned included needing more business input on requirements and migrating sooner for increased agility. Recommendations included running parallel deployments during migration and using professional services.

Best of .conf22 Session Recommendations

Splunk

IT Sicherheitsgesetz 2.0

Splunk

Risikowahrnehmung und Cyber-Resilienz Herausforderungen in der Angriffserkennung

Splunk

Lee Barnes - Path to Becoming an Effective Test Automation Engineer.pdf

leebarnesutopia

So… you want to become a Test Automation Engineer (or hire and develop one)? While there’s quite a bit of information available about important technical and tool skills to master, there’s not enough discussion around the path to becoming an effective Test Automation Engineer that knows how to add VALUE. In my experience this had led to a proliferation of engineers who are proficient with tools and building frameworks but have skill and knowledge gaps, especially in software testing, that reduce the value they deliver with test automation. In this talk, Lee will share his lessons learned from over 30 years of working with, and mentoring, hundreds of Test Automation Engineers. Whether you’re looking to get started in test automation or just want to improve your trade, this talk will give you a solid foundation and roadmap for ensuring your test automation efforts continuously add value. This talk is equally valuable for both aspiring Test Automation Engineers and those managing them! All attendees will take away a set of key foundational knowledge and a high-level learning path for leveling up test automation skills and ensuring they add value to their organizations.

The Microsoft 365 Migration Tutorial For Beginner.pptx

operationspcvita

Recently uploaded

Lee Barnes - Path to Becoming an Effective Test Automation Engineer.pdf

leebarnesutopia

The Microsoft 365 Migration Tutorial For Beginner.pptx

operationspcvita

Biomedical Knowledge Graphs for Data Scientists and Bioinformaticians

Neo4j

From Natural Language to Structured Solr Queries using LLMs

Sease

This talk draws on experimentation to enable AI applications with Solr. One important use case is to use AI for better accessibility and discoverability of the data: while User eXperience techniques, lexical search improvements, and data harmonization can take organizations to a good level of accessibility, a structural (or “cognitive” gap) remains between the data user needs and the data producer constraints. That is where AI – and most importantly, Natural Language Processing and Large Language Model techniques – could make a difference. This natural language, conversational engine could facilitate access and usage of the data leveraging the semantics of any data source. The objective of the presentation is to propose a technical approach and a way forward to achieve this goal. The key concept is to enable users to express their search queries in natural language, which the LLM then enriches, interprets, and translates into structured queries based on the Solr index’s metadata. This approach leverages the LLM’s ability to understand the nuances of natural language and the structure of documents within Apache Solr. The LLM acts as an intermediary agent, offering a transparent experience to users automatically and potentially uncovering relevant documents that conventional search methods might overlook. The presentation will include the results of this experimental work, lessons learned, best practices, and the scope of future work that should improve the approach and make it production-ready.

"Frontline Battles with DDoS: Best practices and Lessons Learned", Igor Ivaniuk

Fwdays

At this talk we will discuss DDoS protection tools and best practices, discuss network architectures and what AWS has to offer. Also, we will look into one of the largest DDoS attacks on Ukrainian infrastructure that happened in February 2022. We'll see, what techniques helped to keep the web resources available for Ukrainians and how AWS improved DDoS protection for all customers based on Ukraine experience

"What does it really mean for your system to be available, or how to define w...

Fwdays

What is an RPA CoE? Session 2 – CoE Roles

DianaGray10

What is an RPA CoE? Session 1 – CoE Vision

DianaGray10

ScyllaDB Tablets: Rethinking Replication

ScyllaDB

ScyllaDB is making a major architecture shift. We’re moving from vNode replication to tablets – fragments of tables that are distributed independently, enabling dynamic data distribution and extreme elasticity. In this keynote, ScyllaDB co-founder and CTO Avi Kivity explains the reason for this shift, provides a look at the implementation and roadmap, and shares how this shift benefits ScyllaDB users.

QA or the Highway - Component Testing: Bridging the gap between frontend appl...

zjhamm304

Must Know Postgres Extension for DBA and Developer during Migration

Mydbops

Mydbops Opensource Database Meetup 16 Topic: Must-Know PostgreSQL Extensions for Developers and DBAs During Migration Speaker: Deepak Mahto, Founder of DataCloudGaze Consulting Date & Time: 8th June | 10 AM - 1 PM IST Venue: Bangalore International Centre, Bangalore Abstract: Discover how PostgreSQL extensions can be your secret weapon! This talk explores how key extensions enhance database capabilities and streamline the migration process for users moving from other relational databases like Oracle. Key Takeaways: * Learn about crucial extensions like oracle_fdw, pgtt, and pg_audit that ease migration complexities. * Gain valuable strategies for implementing these extensions in PostgreSQL to achieve license freedom. * Discover how these key extensions can empower both developers and DBAs during the migration process. * Don't miss this chance to gain practical knowledge from an industry expert and stay updated on the latest open-source database trends. Mydbops Managed Services specializes in taking the pain out of database management while optimizing performance. Since 2015, we have been providing top-notch support and assistance for the top three open-source databases: MySQL, MongoDB, and PostgreSQL. Our team offers a wide range of services, including assistance, support, consulting, 24/7 operations, and expertise in all relevant technologies. We help organizations improve their database's performance, scalability, efficiency, and availability. Contact us: info@mydbops.com Visit: https://www.mydbops.com/ Follow us on LinkedIn: https://in.linkedin.com/company/mydbops For more details and updates, please follow up the below links. Meetup Page : https://www.meetup.com/mydbops-databa... Twitter: https://twitter.com/mydbopsofficial Blogs: https://www.mydbops.com/blog/ Facebook(Meta): https://www.facebook.com/mydbops/

Principle of conventional tomography-Bibash Shahi ppt..pptx

BibashShahi

Containers & AI - Beauty and the Beast!?!

Tobias Schneck

As AI technology is pushing into IT I was wondering myself, as an “infrastructure container kubernetes guy”, how get this fancy AI technology get managed from an infrastructure operational view? Is it possible to apply our lovely cloud native principals as well? What benefit’s both technologies could bring to each other? Let me take this questions and provide you a short journey through existing deployment models and use cases for AI software. On practical examples, we discuss what cloud/on-premise strategy we may need for applying it to our own infrastructure to get it to work from an enterprise perspective. I want to give an overview about infrastructure requirements and technologies, what could be beneficial or limiting your AI use cases in an enterprise environment. An interactive Demo will give you some insides, what approaches I got already working for real. Keywords: AI, Containeres, Kubernetes, Cloud Native Event Link: https://meine.doag.org/events/cloudland/2024/agenda/#agendaId.4211

JavaLand 2024: Application Development Green Masterplan

Miro Wengner

Christine's Product Research Presentation.pptx

christinelarrosa

Mutation Testing for Task-Oriented Chatbots

Pablo Gómez Abajo

Conversational agents, or chatbots, are increasingly used to access all sorts of services using natural language. While open-domain chatbots - like ChatGPT - can converse on any topic, task-oriented chatbots - the focus of this paper - are designed for specific tasks, like booking a flight, obtaining customer support, or setting an appointment. Like any other software, task-oriented chatbots need to be properly tested, usually by defining and executing test scenarios (i.e., sequences of user-chatbot interactions). However, there is currently a lack of methods to quantify the completeness and strength of such test scenarios, which can lead to low-quality tests, and hence to buggy chatbots. To fill this gap, we propose adapting mutation testing (MuT) for task-oriented chatbots. To this end, we introduce a set of mutation operators that emulate faults in chatbot designs, an architecture that enables MuT on chatbots built using heterogeneous technologies, and a practical realisation as an Eclipse plugin. Moreover, we evaluate the applicability, effectiveness and efficiency of our approach on open-source chatbots, with promising results.

Y-Combinator seed pitch deck template PP

c5vrf27qcz

Day 2 - Intro to UiPath Studio Fundamentals

UiPathCommunity

In our second session, we shall learn all about the main features and fundamentals of UiPath Studio that enable us to use the building blocks for any automation project. 📕 Detailed agenda: Variables and Datatypes Workflow Layouts Arguments Control Flows and Loops Conditional Statements 💻 Extra training through UiPath Academy: Variables, Constants, and Arguments in Studio Control Flow in Studio

Demystifying Knowledge Management through Storytelling

Enterprise Knowledge

The Department of Veteran Affairs (VA) invited Taylor Paschal, Knowledge & Information Management Consultant at Enterprise Knowledge, to speak at a Knowledge Management Lunch and Learn hosted on June 12, 2024. All Office of Administration staff were invited to attend and received professional development credit for participating in the voluntary event. The objectives of the Lunch and Learn presentation were to: - Review what KM ‘is’ and ‘isn’t’ - Understand the value of KM and the benefits of engaging - Define and reflect on your “what’s in it for me?” - Share actionable ways you can participate in Knowledge - - Capture & Transfer

Poznań ACE event - 19.06.2024 Team 24 Wrapup slidedeck

FilipTomaszewski5

Recently uploaded (20)

Lee Barnes - Path to Becoming an Effective Test Automation Engineer.pdf

The Microsoft 365 Migration Tutorial For Beginner.pptx

Biomedical Knowledge Graphs for Data Scientists and Bioinformaticians

From Natural Language to Structured Solr Queries using LLMs

"Frontline Battles with DDoS: Best practices and Lessons Learned", Igor Ivaniuk

"What does it really mean for your system to be available, or how to define w...

What is an RPA CoE? Session 2 – CoE Roles

What is an RPA CoE? Session 1 – CoE Vision

ScyllaDB Tablets: Rethinking Replication

QA or the Highway - Component Testing: Bridging the gap between frontend appl...

Must Know Postgres Extension for DBA and Developer during Migration

Principle of conventional tomography-Bibash Shahi ppt..pptx

Containers & AI - Beauty and the Beast!?!

JavaLand 2024: Application Development Green Masterplan

Christine's Product Research Presentation.pptx

Mutation Testing for Task-Oriented Chatbots

Y-Combinator seed pitch deck template PP

Day 2 - Intro to UiPath Studio Fundamentals

Demystifying Knowledge Management through Storytelling

Poznań ACE event - 19.06.2024 Team 24 Wrapup slidedeck

SplunkLive! Warsaw 2016 - ING Bank

1. 1 We splunk as we bank. In our own way. ING Bank Śląski S.A. Joanna Tworzydło - Dziadkiewicz

2. 2 Agenda About ING Bank Śląski S.A. and me  How it all started Why Splunk won us over How do we use it Future plans

3. 3 About ING Bank Śląski S.A. OUR GOAL Clearandeasy Anytime, anywhere Empower Keepgetting better Empowerourcustomersto stayastep aheadinlifeand inbusiness

4. 4 ING Bank Śląski in numbers

5. 5 ING Bank Śląski Lider Informatyki XX-lecia

6. 6 My Background and Role Senior IT Architect – ex developer and ex Splunk administrator Resposible - among others - for Splunk in ING Bank Śląski My favorite Splunk tee-shirt: „Take the sh out of IT” I splunk not only at work but also at home 

7. 7 How It All Started

8. 8 How It All Started

9. 9 How It All Started

10. 10 How It All Started 32

11. 11 How It All Started

12. 12 How It All Started

13. 13 How It All Started

14. 14 How Splunk won us over IT use cases Customer PreScoring 1

15. 15 How Splunk won us over IT use cases Customer PreScoring 2

16. 16 How Splunk won us over IT use cases Customer Portfolio Management Categorization

17. 17 How Splunk won us over IT use cases SDLC Tools DevOps

18. 18 How Splunk won us over IT use cases Fraud Detection System

19. 19 How Splunk won us over IT use cases Card System

20. 20 How Splunk won us over Business use cases Customer Journey Mapping

21. 21 How Splunk won us over Freedom Independence Comprehensiveness

22. 22 Splunk Enterprise at ING Bank Śląski IT Monitoring - areas of intrest Infra Application Process Customer

23. 23 Splunk Enterprise at ING Bank Śląski Collected data and its value Data Operational Intelligence Search and Investigation Proactive Monitoring Operational Visibility, DevOps Real-time Business Insights Online Services Web Services Servers Security Networks Domain systems Custom Applications Databases Active Directory Logfiles SocialMedia

24. 24 Splunk Enterprise at ING Bank Śląski High level view Data coming from thousands of servers/applications/tools/technologies using any combination of Splunk forwarders Auto load-balanced forwarding to Splunk Indexer Cluster Offload search load to Splunk Search Head Cluster

25. 25 Future plans Splunk App for Stream Hadoop integration Machine Learning in Splunk IT Service Intelligence

26. 26 Top Takeaways You cannot argue with your data Nothing is impossible with Splunk – like with LEGO Dream Big!

27. Thank You

SplunkLive! Warsaw 2016 - ING Bank

Recommended

Recommended

More Related Content

More from Splunk

More from Splunk (20)

Recently uploaded

Recently uploaded (20)

SplunkLive! Warsaw 2016 - ING Bank