Wie erkenne ich die Auswirkungen von IT Ausfallen auf meine Produktion?

1. © 2020 SPLUNK INC.
Wie erkenne ich die
Auswirkungen von IT
Ausfällen auf meine
Produktion?
Ralf Walkenhorst – EMEA, IT Operations Analytics Specialist, Splunk

2. During the course of this presentation, we may make forward‐looking statements regarding
future events or plans of the company. We caution you that such statements reflect our
current expectations and estimates based on factors currently known to us and that actual
events or results may differ materially. The forward-looking statements made in the this
presentation are being made as of the time and date of its live presentation. If reviewed after
its live presentation, it may not contain current or accurate information. We do not assume
any obligation to update any forward‐looking statements made herein.
In addition, any information about our roadmap outlines our general product direction and is
subject to change at any time without notice. It is for informational purposes only, and shall
not be incorporated into any contract or other commitment. Splunk undertakes no obligation
either to develop the features or functionalities described or to include any such feature or
functionality in a future release.
Splunk, Splunk>, Turn Data Into Doing, The Engine for Machine Data, Splunk Cloud, Splunk
Light and SPL are trademarks and registered trademarks of Splunk Inc. in the United States
and other countries. All other brand names, product names, or trademarks belong to their
respective owners. © 2019 Splunk Inc. All rights reserved.
Forward-
Looking
Statements
© 2 0 1 9 S P L U N K I N C .

3. © 2 0 1 9 S P L U N K I N C .
Time for
AIOps also in
production
lines?

4. © 2 0 1 9 S P L U N K I N C .
Online
Services
Networks
Security
Call Detail
Records
Web
Services
Telecoms
Web
Clickstreams
Online
Shopping Cart
Smartphones
and Devices
Custom
Applications
Energy
Meters
Storage
Servers
GPS
Location
RFID
Databases
Messaging
Firewall
APM
Tracing
Social
Media
Containers
TURN DATA INTO DOING
TO EVERYONE
Drive new revenue
Launch new
products
Improve Business
process
Meet SLAs
Reduce app Time to
Market
Secure my
organization
Move to predictive /
proactive IT
Get full-stack
Observability
Service Manager
Product Owner
CISO
DevOps
Process Engineer
Operations Manager
NOC
COOWHAT WE DO:
Manufacturing

5. © 2 0 1 9 S P L U N K I N C .
HOW WE DO IT?
INFRASTRUCTURE
APP
Cloud
Networks
Security
API
WEB Smartphones
and Devices
Custom
Applications
Storage
Servers
DB
APM
Containers
APP logs
Syslogs
TraditionalITOps
Monitoring
BIZ
Call center
Revenue
NPS
Customer
retention
Funnel
Exec
MBO’s
Business-value
Monitoring
Joining Data from
all ‘Altitudes’in
real-time

6. © 2 0 1 9 S P L U N K I N C .
Traditional
approach
FORCES
STRUCTURE
Inflexible | Not Real Time | Slow To Value | Hard to Scale
Databases & Document
Stores

7. © 2 0 1 9 S P L U N K I N C .
Traditional
approach
NO STREAMINGInflexible | Not Real Time | Slow To Value | Hard to Scale
Databases & Document
Stores

8. © 2 0 1 9 S P L U N K I N C .
Machine
Learning
toolkit
• Codeless, step-by-step ML
• Integrates with open source algorithms
• Launch inside any Splunk search / query pipeline
Extend
Predictions
• Predict service health score, churn, maintenance
• Capacity planning, trend forecasting
• Detecting influencing entities
Prevent Service degradation entirely + return time to the business
Anomaly
detection
Adaptive
thresholds
Real-time
event
clustering
• Deviation from past behavior
• Deviation from peers
• Unusual change in features
• Move form “on/off” thresholds to “normal/abnormal”
• Baseline normal ops & adapt thresholds dynamically
• Identify peer groups
• Event correlation
• Reduce alert noise
• Behavioral analytics
Reduce Noise and Remove False Positives
Online
Services
Networks
Security
Call Detail
Records
Web
Services
Telecoms
Web
Clickstream
s
Online
Shopping
Cart
Smartphones
and Devices
Custom
Applications
Energy
Meters
Storag
e
Server
s
GPS
Location
RFI
D
Databases
Messagin
g
Firewall
APM
Tracing
Social
Media
Container
s
Machine Learning

9. © 2 0 1 9 S P L U N K I N C .
AIOps with
Splunk IT Service Intelligence

10. © 2 0 1 9 S P L U N K I N C .
KeyAIOps Use Cases…with Splunk
Performance analysis
Anomaly detection
Event correlation &
analysis
IT service management
Automation

11. © 2 0 1 9 S P L U N K I N C .
Predictive Analytics
Performance analysis
Anomaly detection
Event correlation &
analysis
IT service management
Automation

12. © 2 0 1 9 S P L U N K I N C .
Adaptive Thresholding
Performance analysis
Anomaly detection
Event correlation &
analysis
IT service management
Automation

13. © 2 0 1 9 S P L U N K I N C .
Anomaly Detection
Performance analysis
Anomaly detection
Event correlation &
analysis
IT service management
Automation

14. © 2 0 1 9 S P L U N K I N C .
Event Analytics
Performance analysis
Anomaly detection
Event correlation &
analysis
IT service management
Automation

15. © 2 0 1 9 S P L U N K I N C .
Service Analyzer
Performance analysis
Anomaly detection
Event correlation &
analysis
IT service management
Automation

16. © 2 0 1 9 S P L U N K I N C .
Service Analyzer
Performance analysis
Anomaly detection
Event correlation &
analysis
IT service management
Automation

17. © 2 0 1 9 S P L U N K I N C .
Automation with Phantom
Performance analysis
Anomaly detection
Event correlation &
analysis
IT service management
Automation

18. © 2 0 1 9 S P L U N K I N C .
Automation with VictorOps
Performance analysis
Anomaly detection
Event correlation &
analysis
IT service management
Automation

19. © 2 0 1 9 S P L U N K I N C .
Automation with SignalFx
Performance analysis
Anomaly detection
Event correlation &
analysis
IT service management
Automation

20. © 2 0 1 9 S P L U N K I N C .
Fully customizable glass tables

21. © 2 0 1 9 S P L U N K I N C .

22. © 2 0 1 9 S P L U N K I N C .

23. © 2 0 1 9 S P L U N K I N C .

24. © 2018 SPLUNK INC.
How to find a needle in multiple haystacks?
(chooseyourtool)
Network?
Database?
Middleware?
Hardware?
Wrong
command?
Connection?
Apache?
VM?
Mainframe?
Load
balancer?Code?
Collect ALL data
• Collect from all silos
• Data in original raw format
• Add open sources apps to
ingest data on the fly
• Schema on the fly
• Dynamic thresholding
• Realtime correlation
Clustering & aggregation
• Real time event
clustering/correlation
• Reduce alert noise
• Behavioural analytics
• Deduplication
Add context
• Measure / report on
indicators that matters
• Add service / business
context
• Add actionable
information to detection
Salessso
Claims
Anomaly detection
• Catch issues that thresholds
cannot
• Reduce event clutter
• Deviation from past
behaviour
• Deviation from peers
• Unusual change in features
Assisted deep dive
investigation
• Root cause analysis
• Powerful & easy to use
search & investigate
language
?
Predictive
Analytics
• Predict service health
• Predict events
• Trend forecasting
• Detect influencing
entities
• Early warning of
failure
70% to 90%
Reduction in investigation time
15% to 45%
Reduction in high priority incidents
67% to 82%
Reduction in business
impact

25. © 2 0 1 9 S P L U N K I N C .
Digital Transformation
with Splunk
Customer Examples

26. © 2 0 1 9 S P L U N K I N C .
“Porsche’s goal is
to deliver a
premium digital
experience centred
around its
customers.”
From Factory (shop floor) to the
New Taycan…
https://www.youtube.com/watch?v=1KkP2Iicjhk

27. © 2 0 1 9 S P L U N K I N C .
Porsche Connect
Event logs & customer
journey analysis
Digital journey predictive
analytics
Charging stations
management
Next charging station
location prediction
Porsche: From 1 to 60+ projects in 2 years
Shop floor analytics
(factory – industry 4.0)

28. © 2 0 1 9 S P L U N K I N C .
…to augmented reality possibilities.

29. © 2 0 1 9 S P L U N K I N C .
Operationalizing ML Single PlatformData “as it is”Any data,
Any scale,
Any location
WHY SPLUNK FOR DIGITAL TRANSFORMATION ANDAIOPS?
Start
small
1 high
value app
/service
Measure
success
Repeat

30. Thank You
© 2020 SPLUNK INC.