Adventures in Monitoring and Troubleshooting

1. © 2019 SPLUNK INC.© 2019 SPLUNK INC.
Adventures in IT Monitoring
and Troubleshooting

2. © 2019 SPLUNK INC.
During the course of this presentation, we may make forward-looking statements regarding future events or
the expected performance of the company. We caution you that such statements reflect our current
expectations and estimates based on factors currently known to us and that actual events or results could
differ materially. For important factors that may cause actual results to differ from those contained in our
forward-looking statements, please review our filings with the SEC.
The forward-looking statements made in this presentation are being made as of the time and date of its live
presentation. If reviewed after its live presentation, this presentation may not contain current or accurate
information. We do not assume any obligation to update any forward-looking statements we may make. In
addition, any information about our roadmap outlines our general product direction and is subject to change
at any time without notice. It is for informational purposes only and shall not be incorporated into any contract
or other commitment. Splunk undertakes no obligation either to develop the features or functionality
described or to include any such feature or functionality in a future release.
Splunk, Splunk>, Listen to Your Data, The Engine for Machine Data, Splunk Cloud, Splunk Light and SPL are trademarks and registered trademarks of Splunk Inc.
in the United States and other countries. All other brand names, product names, or trademarks belong to their respective owners. © 2019 Splunk Inc. All rights
reserved.
Forward-Looking Statements

3. © 2019 SPLUNK INC.
1. Finding a Better Way to Monitor and
Troubleshoot
2. Demo
What will we be
covering today?
Agenda

4. © 2019 SPLUNK INC.
Meet Sam Margarethe
Gertrud is a new IT Director at ABC
Enterprises and manages manages
several IT Service Operations teams.
Gertrud struggles with the history of
reactive (rather than proactive) way of
dealing with outages and IT issues and
getting blamed for issues in the war
room.
Gertrud wants to find the best
solution to monitor and solve
issues at scale, but today...

5. © 2019 SPLUNK INC.
Gertrud Faces More Complexity, New Requirements
VIRTUALIZATION
STORAGE
PACKAGED
APPLICATIONS
CUSTOM
APPLICATIONS
HR
Email
Finance
App Svr
DB
Web Svr
INFRASTRUCTURE
APPLICATIONS
VPN
IP Phone
Identify
SERVERS NETWORKING
SaaS/PaaS
IaaS
Containers
Containers

6. © 2019 SPLUNK INC.
Meet Ryan Johann
Johann runs e-Commerce Services, in charge of online
and mobile sales for ABC Enterprises.
Johann struggles with adapting to constantly changing
needs of users, not getting all metrics required to
monitor customer experience from current tools, and
working with IT to resolve issues and make updates.
Johann wants to improve customer experience, increase
engagement, conversion rate, and revenue through ABC’s
eCommerce site.

7. © 2019 SPLUNK INC.
Increasing Customer Demands Worry Johann
And Produce Mountains of Business Data to Analyze
On-demand services and
insights, powered by
cloud-based applications
24-hour access to customer service
Ways to discover, share, or voice
opinion on brands and products

8. © 2019 SPLUNK INC.
Disaster Struck the Day Hansi Met Gretl
IT and the Business Operated in Silos
Social Media Alerted
Customer Issue
Unhappy customer couldn’t
complete transaction, Care didn’t
respond
IT Investigated for 2
Hours
Multiple tools and teams led to
lack of timely coordination, loss
of productivity
Hansi Contacted
IT to Resolve
Issue
Root Cause
Found, Customer
Lost
Too Late to Avoid
Revenue Loss
Multiple teams mobilized
to address the issue

9. © 2019 SPLUNK INC.
Gerti Analyzed Root Cause Using FOUR Tools
No central way to view all data in one place
Infrastructure Layer
(Logs/Metrics for Middleware, OS/VM,
Network, Database, Cloud)
Application
(Logs, Traces, Performance Metrics)
Business Activity
(Customer and Transaction Data)
Tool 1
for webstore metrics,
website analytics
Tool 2
for application events and metrics
Tool 4
for network events
Tool 3
for server and middleware events

10. © 2019 SPLUNK INC.
Sam and Ryan Needed a Better Solution
Specific Criteria Spanned IT and Business Needs
I need to maintain an
excellent customer
experience - meaning
keeping our website and
apps working.
I need to find root
cause faster and the
ability to collaborate
across teams to
troubleshoot issues.
We both need a better way to derive
insights across all our IT and
business services data in real-time.
It would also be
great to see real
time reporting or
dashboards on
key business
metrics.
I would love to
get ahead of
incidents to
take a more
proactive
approach.

11. © 2019 SPLUNK INC.
Application
(Logs, Traces, Performance Metrics)
Infrastructure Layer
(Logs/Metrics for Middleware, OS/VM,
Network, Database, Cloud)
Business Activity
(Customer and Transaction Data)
Tool 1 Tool 2
…& Capture and Analyze Data from Other Monitoring Tools

12. © 2019 SPLUNK INC.
Splunk Takes a Different Approach
Data Driven Approach to Observability
Infrastructure
Measures Logs
Data Collection
Errors
Diagnostics
Metrics Traces
Customers ApplicationServices
ARTIFICIAL
INTELLIGENCE
PATTERN DETECTION CLUSTERING ANOMALY DETECTION PREDICTION

13. © 2019 SPLUNK INC.
Service tree and deep dives in ITSI

14. © 2019 SPLUNK INC.
Where Does Data Come From?
Machine Data
Synthetic APM
Application Code
Code
Deployment
Network
Change Records
Server Changes
Byte Code
Instrumentation
ML Adaptive
Thresholding
Server
Storage
Service Intelligence
Metrics
Events
IP Creation
Events
ApplicationLayerInfrastructureLayer
Human Data
Metrics
Events

15. © 2019 SPLUNK INC.
Telegraf, nmon and friends

16. © 2019 SPLUNK INC.
► Splunk Enterprise 7
• Ingest metrics at scale,
natively
• Index metrics efficiently
• Search for metrics using SPL
• Gain platform capabilities (RBAC,
clustering, administration and
more)
Splunk App for Infrastructure
► Splunk App for Infrastructure
• Fast time-to-value:
Simple setup and collectd
deployment
• Guided investigation insight
to quicklyidentify trends and
root cause
• Detailed and flexible analysis
spanning metrics and logs
Infrastructure Monitoring for Current Splunk Customers
Available now on Splunkbase

17. © 2019 SPLUNK INC.
Closing the user experience gap: UberAgent
Desktop monitoring Augment ITOA with 3rd party add-on uberAgent data
uberAgent is a Splunk agent for Windows end-user
computing.
It does not just collect data – it gives you the information
that matters.

18. © 2019 SPLUNK INC.
VDI Monitoring
Active Directory
Hypervisor
VDI Monitoring
AD Authentication
Login Script Processing
Citrix
NetScaler
User Profile Loading
Storefront
Delivery
Controller
Database
VDA
End-to-End Service Intelligence

19. © 2019 SPLUNK INC.
VDI MonitoringOffice 365 Monitoring
Latency
End-to-End Service Intelligence
Firewall
Active Directory#Retransmits
Load
Balancer
#Retconnects

20. © 2019 SPLUNK INC.
Demo

21. © 2019 SPLUNK INC.
1. Topdown: Troubleshooting in ITSI
2. ITSI Modules
3. Splunk App for Infrastructure and Friends
4. UberAgent
What will we be
covering today?
Demo

22. © 2019 SPLUNK INC.

23. © 2019 SPLUNK INC.

24. © 2019 SPLUNK INC.

25. © 2019 SPLUNK INC.
Splunk App for
Infrastructure
https://splunkbase.splunk.com/app/3975/

26. © 2019 SPLUNK INC.

27. © 2019 SPLUNK INC.

28. © 2019 SPLUNK INC.

29. © 2019 SPLUNK INC.
Operating System
monitoring with
Telegraf / NMON
https://splunkbase.splunk.com/app/4271/
https://splunkbase.splunk.com/app/1753/

30. © 2019 SPLUNK INC.

31. © 2019 SPLUNK INC.

32. © 2019 SPLUNK INC.
uberAgent
https://uberagent.com/

33. © 2019 SPLUNK INC.

34. © 2019 SPLUNK INC.

35. © 2019 SPLUNK INC.
Splunk
▶ Collect, index and
analyze any data from
any data source
▶ Build dashboards
searches alerts
From Monitoring to Collaborative Incident Response
Splunk Enterprise and VictorOps offer complementary value
Splunk
▶ Reduce Mean Time
to Resolution (MTTR)
▶ Ad-hoc searches to
investigate problems
▶ On-Call scheduling made simple
▶ Centralized visibility to alerts
▶ Customizable Rules and Logic
to automate alerting
▶ Post-Incident Reviews and
Reporting
▶ Actionable Mobile Application
TROUBLESHOOTING
MEANINGFUL
ALERTS

36. © 2019 SPLUNK INC.
Download Splunk Enterprise or try Splunk Cloud for free:
www.splunk.com/download to try Splunk Essentials for
Infrastructure Troubleshooting and Monitoring and
Splunk App for Infrastructure on Splunkbase
Download Splunk Insights for Infrastructure for free
https://www.splunk.com/en_us/download/splunk-
insights-for-infrastructure.html

37. © 2019 SPLUNK INC.
Request a Demo
► Bring your coworkers and ask questions
► Gain insights into key features and how
VictorOps works
Start a 14 Day Trial
► No Credit Card Needed
► Full-Stack (our most complete) offering
► Support included!
Next Steps
http://try.victorops.com

38. © 2019 SPLUNK INC.© 2019 SPLUNK INC.
Thank You.