Upload File

splunk overview• how first data is using splunk • getting your data in to splunk • about...

  • Home
  • Documents
  • Splunk Overview• How First Data is using Splunk • Getting your data in to Splunk • About Violin Memory Location: National Research Corp. in Lincoln, NE Date: March 25th, 2015
39
Copyright © 2014 Splunk Inc. Splunk Overview Presentation for Cornhusker Chapter of AITP

Upload: others

Post on 21-May-2020

14 views

Category:

Documents


0 download

Report

TRANSCRIPT

Page 1: Splunk Overview• How First Data is using Splunk • Getting your data in to Splunk • About Violin Memory Location: National Research Corp. in Lincoln, NE Date: March 25th, 2015

Copyright © 2014 Splunk Inc.

Splunk Overview

Presentation for Cornhusker Chapter of AITP

Page 2: Splunk Overview• How First Data is using Splunk • Getting your data in to Splunk • About Violin Memory Location: National Research Corp. in Lincoln, NE Date: March 25th, 2015

Disclaimer

Although I am employed by National Research Corporation, the materials contained in this presentation has not been sponsored or endorsed by National Research Corporation. This material should not be associated with National Research Corporation and their policies or practices. All information from this presentation, either expressed or implied, should not be associated with National Research Corporation.

I am also not an employee of Splunk. I may express opinions and give information about the company and/or the products they sell. These statements should not be considered as factual or statements from the company.

2

Page 3: Splunk Overview• How First Data is using Splunk • Getting your data in to Splunk • About Violin Memory Location: National Research Corp. in Lincoln, NE Date: March 25th, 2015

Introduction

3

Page 4: Splunk Overview• How First Data is using Splunk • Getting your data in to Splunk • About Violin Memory Location: National Research Corp. in Lincoln, NE Date: March 25th, 2015

IntroductionsTony Reinke

National Research Corporation

• Senior Systems Engineer

• Multiple Sites / Multiple Countries

• Active Director, DNS, DHCP, Certificates, Ticket Queue, Phone System, Log Management

• Represent Systems Engineering on the Security Advisory Team

4

• Worked in companies from 4 employees to 50,000 employees

• Been in IT for 18 years

• Founded local Splunk User Group

• Coach Youth Football

Other Information

Page 5: Splunk Overview• How First Data is using Splunk • Getting your data in to Splunk • About Violin Memory Location: National Research Corp. in Lincoln, NE Date: March 25th, 2015

Agenda

• What is Splunk?

• What is Machine Data?

• Splunk’s Interface

• Troubleshooting with Splunk

• Splunk for the End User

• Splunk for Management

• Splunk for the Community

5

Page 6: Splunk Overview• How First Data is using Splunk • Getting your data in to Splunk • About Violin Memory Location: National Research Corp. in Lincoln, NE Date: March 25th, 2015

Questions for the Group

6

Page 7: Splunk Overview• How First Data is using Splunk • Getting your data in to Splunk • About Violin Memory Location: National Research Corp. in Lincoln, NE Date: March 25th, 2015

What is Splunk?

7

Page 8: Splunk Overview• How First Data is using Splunk • Getting your data in to Splunk • About Violin Memory Location: National Research Corp. in Lincoln, NE Date: March 25th, 2015

Splunk Company

8

Company (NASDAQ: SPLK)

Business Model / Products

Customers 7,900+

founded2004

first software release2006

HQ San Francisco

On-premise

In the cloud

SaaS

60+

100

of the Fortune 100

Largest license:

Terabytes/day

Page 9: Splunk Overview• How First Data is using Splunk • Getting your data in to Splunk • About Violin Memory Location: National Research Corp. in Lincoln, NE Date: March 25th, 2015

What is Machine Data?

9

Page 10: Splunk Overview• How First Data is using Splunk • Getting your data in to Splunk • About Violin Memory Location: National Research Corp. in Lincoln, NE Date: March 25th, 2015

What Does Machine Data Look Like?

10

Machine Data: Any Location, Type, Volume

Online Services Web

Services

ServersSecurity GPS

Location

StorageDesktops

Networks

Packaged Applications

CustomApplicationsMessaging

TelecomsOnline

Shopping Cart

Web Clickstreams

Databases

Energy Meters

Call Detail Records

Smartphones and Devices

RFID

On-Premises

Private Cloud

Public Cloud

Platform Support (Apps / API / SDKs)

Enterprise Scalability

Universal Indexing

Answer Any Question

DeveloperPlatform

Report and analyze

Custom dashboards

Monitor and alert

Ad hoc search

Page 11: Splunk Overview• How First Data is using Splunk • Getting your data in to Splunk • About Violin Memory Location: National Research Corp. in Lincoln, NE Date: March 25th, 2015

What Does Machine Data Look Like?

11

Sources

Order Processing

Twitter

Care IVR

Middleware Error

Page 12: Splunk Overview• How First Data is using Splunk • Getting your data in to Splunk • About Violin Memory Location: National Research Corp. in Lincoln, NE Date: March 25th, 2015

What Does Machine Data Look Like?

12

Customer ID Order ID

Customer’s Tweet

Time Waiting On Hold

Twitter ID

Product ID

Company’s Twitter ID

Customer IDOrder ID

Customer ID

Sources

Order Processing

Twitter

Care IVR

Middleware Error

Page 13: Splunk Overview• How First Data is using Splunk • Getting your data in to Splunk • About Violin Memory Location: National Research Corp. in Lincoln, NE Date: March 25th, 2015

What Does Machine Data Look Like?

13

Order ID

Customer’s Tweet

Time Waiting On Hold

Product ID

Company’s Twitter ID

Order ID

Customer ID

Twitter ID

Customer ID

Customer ID

Sources

Order Processing

Twitter

Care IVR

Middleware Error

Page 14: Splunk Overview• How First Data is using Splunk • Getting your data in to Splunk • About Violin Memory Location: National Research Corp. in Lincoln, NE Date: March 25th, 2015

Splunk’s Interface

14

Page 15: Splunk Overview• How First Data is using Splunk • Getting your data in to Splunk • About Violin Memory Location: National Research Corp. in Lincoln, NE Date: March 25th, 2015

15

Raw events

Auto-detected fields and values

Page 16: Splunk Overview• How First Data is using Splunk • Getting your data in to Splunk • About Violin Memory Location: National Research Corp. in Lincoln, NE Date: March 25th, 2015

16

Page 17: Splunk Overview• How First Data is using Splunk • Getting your data in to Splunk • About Violin Memory Location: National Research Corp. in Lincoln, NE Date: March 25th, 2015

17

Page 18: Splunk Overview• How First Data is using Splunk • Getting your data in to Splunk • About Violin Memory Location: National Research Corp. in Lincoln, NE Date: March 25th, 2015

18

Page 19: Splunk Overview• How First Data is using Splunk • Getting your data in to Splunk • About Violin Memory Location: National Research Corp. in Lincoln, NE Date: March 25th, 2015

19

Page 20: Splunk Overview• How First Data is using Splunk • Getting your data in to Splunk • About Violin Memory Location: National Research Corp. in Lincoln, NE Date: March 25th, 2015

20

Page 21: Splunk Overview• How First Data is using Splunk • Getting your data in to Splunk • About Violin Memory Location: National Research Corp. in Lincoln, NE Date: March 25th, 2015

21

Page 22: Splunk Overview• How First Data is using Splunk • Getting your data in to Splunk • About Violin Memory Location: National Research Corp. in Lincoln, NE Date: March 25th, 2015

Troubleshooting with Splunk

22

Page 23: Splunk Overview• How First Data is using Splunk • Getting your data in to Splunk • About Violin Memory Location: National Research Corp. in Lincoln, NE Date: March 25th, 2015

23

Page 24: Splunk Overview• How First Data is using Splunk • Getting your data in to Splunk • About Violin Memory Location: National Research Corp. in Lincoln, NE Date: March 25th, 2015

24

Page 25: Splunk Overview• How First Data is using Splunk • Getting your data in to Splunk • About Violin Memory Location: National Research Corp. in Lincoln, NE Date: March 25th, 2015

25

Page 26: Splunk Overview• How First Data is using Splunk • Getting your data in to Splunk • About Violin Memory Location: National Research Corp. in Lincoln, NE Date: March 25th, 2015

Splunk for End Users

26

Page 27: Splunk Overview• How First Data is using Splunk • Getting your data in to Splunk • About Violin Memory Location: National Research Corp. in Lincoln, NE Date: March 25th, 2015

27

Page 28: Splunk Overview• How First Data is using Splunk • Getting your data in to Splunk • About Violin Memory Location: National Research Corp. in Lincoln, NE Date: March 25th, 2015

Splunk for Management

28

Page 29: Splunk Overview• How First Data is using Splunk • Getting your data in to Splunk • About Violin Memory Location: National Research Corp. in Lincoln, NE Date: March 25th, 2015

29

Page 30: Splunk Overview• How First Data is using Splunk • Getting your data in to Splunk • About Violin Memory Location: National Research Corp. in Lincoln, NE Date: March 25th, 2015

Copyright © 2014 Splunk Inc.

Splunk for the Community

Page 31: Splunk Overview• How First Data is using Splunk • Getting your data in to Splunk • About Violin Memory Location: National Research Corp. in Lincoln, NE Date: March 25th, 2015

31

Page 32: Splunk Overview• How First Data is using Splunk • Getting your data in to Splunk • About Violin Memory Location: National Research Corp. in Lincoln, NE Date: March 25th, 2015

32

Page 33: Splunk Overview• How First Data is using Splunk • Getting your data in to Splunk • About Violin Memory Location: National Research Corp. in Lincoln, NE Date: March 25th, 2015

33

Page 34: Splunk Overview• How First Data is using Splunk • Getting your data in to Splunk • About Violin Memory Location: National Research Corp. in Lincoln, NE Date: March 25th, 2015

34

Page 35: Splunk Overview• How First Data is using Splunk • Getting your data in to Splunk • About Violin Memory Location: National Research Corp. in Lincoln, NE Date: March 25th, 2015

35

Page 36: Splunk Overview• How First Data is using Splunk • Getting your data in to Splunk • About Violin Memory Location: National Research Corp. in Lincoln, NE Date: March 25th, 2015

Upcoming Meetings

March 2015 MeetingJanuary 2015 Meeting

Location:

First Data in Omaha, NE

Date:

January 28th, 2015 at 6pm

Topics:

• How First Data is using Splunk

• Getting your data in to Splunk

• About Violin Memory

Location:

National Research Corp. in Lincoln, NE

Date:

March 25th, 2015 at 6pm

Topics:

• TBA featured company

• TBA learning

• About Nimble Storage

36

Page 37: Splunk Overview• How First Data is using Splunk • Getting your data in to Splunk • About Violin Memory Location: National Research Corp. in Lincoln, NE Date: March 25th, 2015

Splunk IRCSplunk Answers

37

Page 38: Splunk Overview• How First Data is using Splunk • Getting your data in to Splunk • About Violin Memory Location: National Research Corp. in Lincoln, NE Date: March 25th, 2015

Resources

Splunk402Splunk

http://www.splunk.com

500mb/day free

Recorded sessions from .conf2014

Splunk Events

Weekly Demos

Events Splunk will be at

User Group Events

Twitter: @splunk

http://www.splunk402.com

[email protected]

Twitter: @splunk402

38

Tony Reinke

[email protected]

Twitter: @tjreinke

http://www.splunk.com/
(http:/conf.splunk.com/sessions/2014?r=conf_topnav_keynotessessions_2014sessions)
http://www.splunk.com/page/events
http://www.splunk402.com/
Page 39: Splunk Overview• How First Data is using Splunk • Getting your data in to Splunk • About Violin Memory Location: National Research Corp. in Lincoln, NE Date: March 25th, 2015

Thank You


Splunk - Splunk for Industrial Data and the Internet of Things

Industrial Data Internet of Things splunk (REST API, SDKs) splunk . TESCO splunk 500 Y—Jt1-3— 41328 . SHANON 1/5 splunk . htt . (500MB/B) s lunk splunk . Created Date:

Operational Intelligence and Machine Data with Splunk

Splunk Data Models - Aplura€¦ · •Splunk has a few different acceleration techniques •Data models can be useful for exploring data, even when not accelerated •Data models

Data Mining with Splunk

Splunk Integration Guide - ObserveIT Integration Guide.pdf · Splunk Cloud can be used to store and search for ObserveIT data. To forward the data to Splunk Cloud, ObserveIT TA is

Onboard*Datainto*Splunk,*Correctly* · Agenda! Data Splunk*Components* Index*Data Proper*Parsing* DeployinginProducon DeploymentApps*and*Naming*ConvenJons* Challenging*Data 4

Copyright © 2011, Splunk Inc.Listen to your data. Date Name Title Getting Started with Splunk

DOXLON November 2016 - Data Democratization Using Splunk

Splunk Cloud - University of Washington · 3 Agenda I. What is machine data? II. Splunk overview III. Industry use case IV. Key elements of Splunk Cloud V. Splunk Cloud industry use

© 2013 Splunk Inc. Hunk Introducing Hunk ™ Splunk Analytics for Hadoop Brett Sheppard Director, Big Data Product Marketing [email protected]

SPLUNK® FOR INDUSTRIAL DATA AND THE IoT - RanTekrantek.dk/wp-content/uploads/2017/01/splunk-for... · Splunk software enables powerful machine data analytics for the Internet of

DataOnDBoarding* - .conf2017 | The 8th Annual Splunk ... · Agenda! Data! Splunk*Components*! Index*Data! Proper*Parsing*! Challenging*Data! Advanced*Inputs** * 4

Copyright © 2011, Splunk Inc.Listen to your data. Get Started with Splunk Reports & Dashboards

Splunk*MintSDK* · splunk*Mintitbecame!* 5 September*16,*2013*the*day*Splunk*acquired*BugSense* • Team*moved*to*splunk’s*HQ* • New*productline* • Combined BugSense’s*data

Industrial Data Forwarder for Splunk · 2018. 11. 14. · Industrial Data Forwarder for Splunk Author: Kepware Technologies Subject: Industrial Data Forwarder for Splunk Keywords:

データ分析プラットフォーム「Splunk」eww.gp-club.panasonic.co.jp/data/splunk/splunk.pdfTitle データ分析プラットフォーム「Splunk」 Author パナソニック

Splunk Enterprise Overview - zc.proact.lvzc.proact.lv/wp-content/uploads/2017/03/Splunk Enterprise Overview.… · Splunk Enterprise Overview. 2 Make machine data accessible, usable

Using Splunk for CDM and CMaaS · USING SPLUNK® FOR CDM AND CMAAS The Platform for Machine Data Splunk Enterprise is the platform for machine data. Splunk software enables the …

Splunk for Industrial Data and the IoT Solution Guidelanding.centracomm.net › hubfs › _Downloadable_Assets › Splunk › ... · 2017-10-07 · SPLUNK® FOR INDUSTRIAL DATA AND

Splunk - tutorialspoint.com · Splunk ii About the Tutorial Splunk is a software used to search and analyze machine data. This machine data can come from web applications, sensors,

Splunk Data Security Predictions 2022

ReversingLabs Explainable Threat Intelligence Enriches ... Data Sheets/RL-Splunk...sent to Splunk. • In Splunk, the TitaniumScale report is correlated with other available Splunk

arista traffic visualization integrated splunk · Splunk ingests machine-generated data from data center infrastructure platforms including server, networking, and storage devices

Splunk conf2014 - Splunk for Data Science

Splunk conf2014 - Onboarding Data Into Splunk

Splunk Overview · Internet of Things and Industrial Data. Structured RDBMS SQL Search Schema at Write Schema at Read Traditional Splunk Splunk Approach to Machine Data ... Splunk

Qualys Data + Splunk Security Analytics = Finding Hidden ... · © 2018 splunk inc. © 2017 splunk inc. confidential information. do not distribute

Big Data Analysis Using Splunk

Cisco UCS Director Express for Big Data with Splunk Enterprise...Cisco UCS Director Express for Big Data with Splunk Enterprise Deploying Splunk Cluster with Archival Node and NFS

Splunk for Data Science

HigH-Performance Data analytics · Splunk Data-to-Everything Platform. HigH-Performance Data analytics ... operational, business, and security intelligence. The power of Splunk lies

Analyzing LustreFile System Performance With Splunk · 4 Monitoring LustreWith Splunk Splunk–Indexing & Searching The Data •Splunkis an enterprise data-mining package •Can ingest,

VAST DATA COLD.FLASH ARCHITECTURE FOR SPLUNK · VASTDATA.COM Vast Data COLD.FLASH Architecture For Splunk 1 VAST DATA COLD.FLASH ARCHITECTURE FOR SPLUNK VAST UNIVERSAL STORAGE DELIVERS

Program Overview - Splunk...mission-critical services. None. Splunk Enterprise System Administration Splunk Enterprise Data Administration Splunk Cloud Administration Implementing