Design, Build and Map IT and Business Services in Splunk

38
How To Design, Build And Map IT And Business Services In Splunk Tom Harrop, Splunk IT Operations Specialists

Transcript of Design, Build and Map IT and Business Services in Splunk

HowToDesign,BuildAndMapITAndBusinessServicesInSplunk

TomHarrop,SplunkITOperationsSpecialists

SetupQuestions

HowmanyofyouareusingSplunktosolveITusecases?Security?BusinessAnalytics?

WhatisyourlevelofexperiencewithSplunk?None– stilltryingtofigureitoutBeginner– downloaded,maybetooksomeofthetutorials,gettingthehangofitIntermediate– beginningtobuilddashboardsAdvanced— usingSplunkregularly,buildingapps,spreadingthewordtootherteamsSplunkNinja– couldn’tlivewithoutit!

HowmanyofyouareattendingSplunkLive forthefirsttime?2yearsinarow,3yearsinarow?

Whatisyourjobprofile?CXO/VP/DirectorITArchitect/OperationsDeveloper/EngineerSecurityBusinessAnalyst/DataScientistOther

Setup Questions

YearsofSplunkLive Attendance?YearsUsageofSplunkEnterprise/Cloud?Usecases– IT/Security/BusinessAnalytics?Attendancerole– Manager/Exec/Architecct/ServiceOwner/Engineering/Administration?

Takeaways

HowToDerive‘ServiceIntelligence’forYourOrganization

MethodologyforGettingStartedwithServiceIntelligence

Introductionto

5 5

Makemachinedataaccessible,usableandvaluabletoeveryone.

WhatDoesMachineDataLookLike?

6

MachineDataContainsCriticalInsightsOrderID

Customer’sTweet

TimeWaitingOnHold

ProductID

Company’sTwitterID

OrderID

CustomerID

TwitterID

CustomerID

CustomerID

Sources

OrderProcessing

Twitter

MiddlewareError

CareIVR

7

8

TurningMachineDataIntoBusinessValue

8

GainInsightsfromAnySource,Type,andVolumeforAnyUseCase

AskAnyQuestion

ApplicationDelivery

Security,ComplianceandFraud

ITOperations

BusinessAnalytics

IndustrialDataandtheInternetofThings

Servers

RFID

Networks

GPSLocation

PackagedApplications

Messaging

Desktops

OnlineShopping

Cart

Storage

SmartphonesandDevices

EnergyMeters

WebClickstreams

Telecom

Databases

CallDetailRecords

WebServices

OnlineServices

Security

CustomApplications ApplicationDelivery

Security,ComplianceandFraud

ITOperations

BusinessAnalytics

IndustrialDataandtheInternetofThings

On-Premises

PrivateCloud

PublicCloud

9

TurningMachineDataIntoBusinessValue

9

ApplicationDelivery

Security,ComplianceandFraud

ITOperations

BusinessAnalytics

IndustrialDataandtheInternetofThings

Servers

RFID

Networks

GPSLocation

PackagedApplications

Messaging

Desktops

OnlineShopping

Cart

Storage

SmartphonesandDevices

EnergyMeters

WebClickstreams

Telecom

Databases

CallDetailRecords

WebServices

OnlineServicesOn-

Premises

PrivateCloud

PublicCloud

Security

CustomApplications

DifferentPeople,UsingMultipleLenses,OntheSAME Data

Splunk>becomesthe

EnterpriseMachineDataFabric

DefiningServiceIntelligence

Enablingabusiness-awareITMeasuringandreportingonindicatorsthatmatter

UnlockingoperationalefficienciesCollaboratingacrosssilostoimproveserviceoperations

Data-baseddecisionmakingSolvingproblemsandanticipatingpitfallswithsophisticatedanalyticsandpowerfulinsights

Theartofthepossible…

ConnectingBusinessandTechnology

WhyOldWaysDisappoint

InfrastructureLayerPower/Cooling/FacilitiesServer–Networking–Storage

ServiceLayer BusinessService

ApplicationLayerMiddleware–ApplicationServer-DatabaseCustomApps

BusinessLayerMailTransport-OrderProcessingE-Commerce-Financials

Disparatetools,dataandsilosfailtodeliverserviceinsights

TheProblemScenario

Manufactureroftoysandgames

Desiretoimprovesupplychainefficiencyandcustomersatisfaction

Newonlinestorehasissuesthatimpactcustomerexperienceandrevenue

TheBusinessProblemforButtercupGames

StreamlineOperations

MeasureEfficiency

ERP Systems

Business Impact

$48,000/wkinrevenue

loss

Warrooms32hrs/wk

Failed Interactions

Online Store

CustomerSatisfaction

Supply Chain

BringSubjectExpertsTogether

DesignBeforeConfiguring

BestPracticesForServiceIntelligence

StartwithaProblemWorth

Solving

StartWithAProblemWorthSolving

Reviewyourorganization’scriticalservices

Identifyaservicethathasimpactfulandmeasurablechallenges

UncoveringtheProblemWorthSolving

• Whatarethetopbusinessservicesinyourenterprise?

• Howdoyoumeasurethecustomerexperiencewiththeseservices?

• Whatisthecustomerexperiencewiththeseservices?

• Howoftendocustomersexperienceissueswiththeservice?

• Whenissuesarise,whogetsinvolvedinresolvingthem?

• Howdoteamsworktogethertoresolveissues?

• What’stheaveragetimetoissueresolution?

• What’stheimpactwhencustomershaveabadexperiencewithyourservices?

CriticalServices IssueFrequency Impact

BringSubjectExpertsTogether

Identifystakeholdersandsupportpersonnelfortheselectedservice

Createawarenessandinvitetheircollaborationtosolvethebusinesschallenge

20

YourServiceIntelligenceCollaboratorsServiceOwners

• Businessfunctions

• Performanceindicators

• Commonbusinessissues

• Frequencyofissues

• Businessimpactofissues

OperationsandSupport

• Commonissues• Performanceindicators

• Resolutionprocesses

• Toolsusedforresolvingissues

• Frequencyofissues

• ITimpactofissues

EnterpriseArchitecture

• Businessprocesses

• Keyinputsandoutputs

• Technologyarchitecture

• Dataarchitecture

• Commonissues

Administrators

• Currenttoolsandusage,andadoptionlevels

• Splunkexpertise• Environmentexpertise

• Personalpain

DesignBeforeConfiguring

Identifypains,performanceindicatorsandmeasurementgoalsfortheservice

Identifycomponentsanddataneededtodriveserviceinsights

Consolidatethemappingsintoanenterpriseprocess/ITservicesmap

ServiceDecomposition

Infrastructure Layer

Application Layer

Business Layer

Service Layer

OrderEntry Manufacturing Shipping Fulfillment

SupplyChain

OnlineStore EDI

WebTier Middleware

PuttingItAllTogether

Infrastructure Layer

Application Layer

Business Layer

Service Layer

OrderEntry Manufacturing Shipping Fulfillment

SupplyChain

OnlineStore EDI

WebTier Middleware

• TotalOrders• TotalRevenue• ServiceHealth

• UnitCount• UnitFailures

• ServiceLevel • DeliveryTime

• OnlineOrders• OnlineRevenue• ResponseTime

• ServiceHealth• Incidents/Changes• CustomerSatisfaction

• HTTPHits

• CPULoad•MemoryUsed• DiskUsed• IOLatency

• CPULoad•MemoryUsed• DiskUsed• IOLatency

• ServiceHealth • ServiceHealth

PoweredbySplunk Search

Infrastructure Layer

Application Layer

Business Layer

Service Layer

OrderEntry Manufacturing Shipping Fulfillment

SupplyChain

OnlineStore EDI

WebTier Middleware

• TotalOrders• TotalRevenue• ServiceHealth

• UnitCount• UnitFailures

• ServiceLevel • DeliveryTime

• OnlineOrders• OnlineRevenue• ResponseTime

• ServiceHealth• Incidents/Changes• CustomerSatisfaction

• HTTPHits

• CPULoad•MemoryUsed• DiskUsed• IOLatency

• CPULoad•MemoryUsed• DiskUsed• IOLatency

• ServiceHealth • ServiceHealth

TypicalDataSources

Infrastructure Layer

Application Layer

Business Layer

Service Layer

OrderEntry Manufacturing Shipping Fulfillment

SupplyChain

OnlineStore EDI

WebTier Middleware

• ApplicationLogs• CorporateDatabases• ServiceManagement

• ApplicationLogs•WebserverLogs• DatabaseLogs•Wiredata

• PerformanceCounters• AccessLogs• NetworkLogs

ITServiceIntelligenceValueStack§ AdaptiveThreshold§ BehaviorAnomaly§ CorrelatesDataintoKnowledge

§ Visualizesentirestack§ ViewtheentireEcosystem§ 3clickstogettheanswerversus10

§ TimeSeriesIndex§ SchemaonRead§ DataModel

ServiceModel

ML

§ Accelerators§ Trendaggregation§ MultiKPIAlerts

ITSI

EARLYWARNINGONDEVIATIONS

AT-A-GLANCEPROBLEMANALYSIS

SPLUNKITSERVICEINTELLIGENCE

PlatformforMachineData

TimeSeriesIndex Schema-on-the-Fly DataModel CommonInformationModel

LIMITLESSINSIGHTS

DYNAMICSERVICEMODELS

SEAMLESSWORKFLOW

INTEGRATIONS

SplunkITServiceIntelligenceData-drivenservicemonitoringandanalytics

ITServiceIntelligenceforButtercupGames

SplunkITServiceIntelligence

WhatCanYouDoNext?

GetYourHandsDirty

SignUpToday- We’reHereToHelp!Harnessthecreativityanddomainknowledgeofyourorganizationtounlockthevalueofdataandsolveanimportantserviceproblemthroughajoint

serviceintelligenceworkshopwithkeystakeholders

Definemethodsfor:

• Proactiveservicemonitoring

• Reducedriskandfailures

• Fasterissueresolution

• Increasedbusiness

performance

Whatisit?

• 1DayOnsiteWorkshop

• Tightlylinkedwithvalue

• Collaborativeapproach

• BuildyourownSplunkITSI

prototype

GetStartedONLINESANDBOX TRIAL

7 daysofaccesstoafree,personalenvironmentintheCloud,withpre-

populateddata

Engageinaproof-of-concepttoindexyourdataandexperience

thepowerofSplunkITSIhttps://splunk.box.com/ITSI-Sandbox-Guidebook ContactyourSplunkrepresentative

ThankYou

Copyright©2016SplunkInc.

• 5,000+ITandBusinessProfessionals• 175+Sessions• 80+CustomerSpeakers

PLUSSplunk University• Threedays:Sept23-25,2017• GetSplunk CertifiedforFREE!• GetCPEcreditsforCISSP,CAP,SSCP

SEPT25-28,2017WalterE.WashingtonConventionCenterWashington,D.C.CONF.SPLUNK.COM

The8th AnnualSplunkWorldwideUsers’Conference