Splunk company overview april. 2015
•Télécharger en tant que PPTX, PDF•
1 j'aime•1,631 vues
Презентация платформы для анализа машинных данных Splunk
Recommandé
Recommandé
Contenu connexe
Tendances
Tendances (20)
En vedette
En vedette (16)
Similaire à Splunk company overview april. 2015
Similaire à Splunk company overview april. 2015 (20)
Plus de Timur Bagirov
Plus de Timur Bagirov (16)
Dernier
Dernier (20)
Splunk company overview april. 2015
- 1. Copyright © 2015 Splunk Inc. Splunk Company Overview Багиров Тимур Менеджер по продукту, RRC
- 2. Splunk Company Overview 2 Company • Global HQs: San Francisco London Hong Kong • 1,300 employees globally • Annual Revenue: $302.6M (YoY +52%) • NASDAQ: SPLK Products • Free trial to massive scale • Splunk products: Splunk Enterprise Splunk Cloud Hunk Splunk MINT Premium Apps Customers • 8,400+ customers • Across 100 countries • Small to large organizations • 75+ of the Fortune 100 • Largest license: 400+ Terabytes/day
- 3. Большие данные требуют сбора, хранения, анализа и управления Volume | Velocity | Variety | Variability GPS, RFID, Hypervisor, Web Servers, Email, Messaging, Clickstreams, Mobile, Telephony, IVR, Databases, Sensors, Telematics, Storage, Servers, Security Devices, Desktops 3
- 4. Continuously develop and deploy apps Embrace cloud and mobile Move to software defined infrastructure Execute on new business initiatives Ensure 100% uptime for critical apps Manage services, not silos Identify & mitigate advanced threats Prevent fraud Знание создает конкурентное преимущество 4 KEY PRIORITIES
- 5. 5 Сделает ценные данные доступными и полезными для всех 5
- 6. COLLECT DATA FROM ANYWHERE SEARCH AND ANALYZE EVERYTHING GAIN REAL-TIME OPERATIONAL INTELLIGENCE Сила Splunk 6
- 7. Доказанное ценность для заказчиков в решении множества задач во всех отраслях Increased revenues from higher uptime Savings from fraud prevention Revenues from faster product launch Optimizing fuel use with sensor data Reduction in SLA payouts Value from preventing APTs $11.0 M $25.0 M $10.0 M $200+ M $1.8 M $1.0 + B $11.0 M $25.0 M $10.0 M $200+ M $1.8 M $1.0 + B Oil & Gas Services Telecom Provider TransportationFinancial Services High Tech Manufacturing Online Services 7
- 8. Education Healthcare Technology Energy and Utilities Manufacturing Telecommunications Cloud and Online Services Government Retail Financial Services and Insurance Media Travel and Leisure 8 Proven at 8,400+ Customers in 100 Countries Over 3/4 the Fortune 100
- 9. 9 Почему Splunk? FAST TIME-TO-VALUE ONE PLATFORM, MULTIPLE USE CASES VISIBILITY ACROSS STACK, NOT JUST SILOS ASK ANY QUESTION OF DATA ANY DATA, ANY SOURCE OR DEPLOYMENT MODEL
- 10. Structured RDBMS SQL Search Schema at Write Schema at Read Traditional Splunk Современный подход к сбору, хранению и аналитике данных Copyright © 2014 Splunk Inc. 10 ETL Universal Indexing Volume Velocity Variety Unstructured
- 11. 11 Превращает данные в преимущество Index Untapped Data: Any Source, Type, Volume Online Services Web Services Servers Security GPS Location Storage Desktops Networks Packaged Applications Custom ApplicationsMessaging Telecoms Online Shopping Cart Web Clickstreams Databases Energy Meters Call Detail Records Smartphones and Devices RFID On- Premises Private Cloud Public Cloud Ask Any Question Application Delivery Security, Compliance and Fraud IT Operations Business Analytics Industrial Data and the Internet of Things
- 12. CIO End User Computing Infrastructure & Operations Security Analytics / BI / EDW Architecture Application Development Mobile Apps Web Ops / Ecommerce Cloud Computing Fraud Compliance Services and Customer Support Business & SaaS App Management Server, Storage, Network Sales & Marketing Product and Engineering Finance, HR, Legal Line of Business 12 Перечень основных задач
- 13. Полностью интегрируемая платформа HA / DR Admin Data Security Apps SDKs/APIScale Collect Data Index Data Enrich Data Search & Explore Analyze & Predict Report & Visualize Alert & Action 13
- 14. Управление IT Операционна я аналитика Developer Platform (REST API, SDKs) Business Analytics Industrial Data and Internet of Things 14 Основные направления использования Бизнес аналитика Индустриальн ые данные Безопасность
- 15. Управление IT Операционна я аналитика Developer Platform (REST API, SDKs) Business Analytics Industrial Data and Internet of Things 15 IT менеджмент Security, Compliance and Fraud
- 16. 16 Платформа для лог-менеджмента, операционной аналитики, поддержки приложений, наблюдения за IT- инфраструктурой ROOT CAUSE AND ISSUE RESOLUTION PROACTIVE MONITORING AND REAL-TIME ALERTING DELIVER BETTER QUALITY CODE FASTER CLOUD APP AND INFRASTRUCTURE MONITORING MOBILE APP TROUBLESHOOTING USER & USAGE ANALYTICS
- 17. 17 Более 300 готовых решений для сбора и аналитики Splunk Apps for VMware and Exchange 300+ IT Ops and App Delivery Apps *ni x Cloud Service for Mobile Developers
- 18. 18 Сбор, хранение, анализ, двухсторонняя интеграция API SDKs UI Server, Storage, Network Server Virtualization Operating Systems Custom Applications Business Applications Cloud Services App Performance MonitoringTicketing/Other Web Intelligence Mobile Applications Stream
- 19. IT Operations Operational Intelligence Developer Platform (REST API, SDKs) Business Analytics Industrial Data and Internet of Things 19 Информационная безопасность Безопасность
- 20. 20 Единая платформа для умной безопасности SECURITY & COMPLIANCE REPORTING REAL-TIME MONITORING OF KNOWN THREATS DETECT UNKNOWN THREATS INCIDENT INVESTIGATIONS & FORENSICS FRAUD DETECTION INSIDER THREAT Splunk взаимодействует, заменяет и развивает существующие SIEM решения
- 21. 21 Быстрое лидерство в Gartner SIEM Magic Quadrant 2012 2013 2014
- 22. Prevent security breaches and protect patient privacy Operational analytics for connected medical devices Comply with HIPAA regulatory requirements How HCA uses Splunk for Security and Medical Informatics 22
- 23. 23 How FINRA Uses Splunk Cloud for Security “Splunk Cloud gives you applications which let you get huge amounts of value from your data.” • Real-time security insights across cloud and on-premises environments • Leveraging the Splunk App for AWS — Sr. Director of Information Security
- 24. 24 Более 130 приложений для безопасности, помимо SIEM-приложения Splunk App for Enterprise Security 130+ Security Apps Additional Splunk Apps Sourcefire Cisco Security Suite ISE Palo Alto Networks FireEye Symantec DShield DNS OSSEC VENDOR COMMUNITY CISCO SPECIFIC
- 25. API SDKs UI Network Traffic Analysis Identity & Access Control Perimeter Defense EmailPayload Analysis Endpoint Behavior Analysis Endpoint Change Tracking DLP Security Analytics Threat Intelligence Cloud Security Полностью интегрируемое решение 25
- 26. IT Operations Operational Intelligence Developer Platform (REST API, SDKs) Бизнес аналитика Industrial Data and Internet of Things 26 Бизнес аналитика Security, Compliance and Fraud
- 27. 27 Вся информация важна для Бизнес-аналитики Splunk расширяет возможности существующего BI CUSTOMER EXPERIENCE PRODUCT ANALYTICS BUSINESS PROCESS ANALYTICS DIGITAL MARKETING
- 28. Why Domino’s uses Splunk for Application Management and Business Analytics Understand device and app usage trends for orders Real-time revenue insights from store data Visibility into online and mobile coupon redemption Refine campaigns for higher conversion 28
- 29. 29 Приложения и возможности Apps, Features & Partners • DB Connect • Stream • ODBC Driver • Data Models • Pivot
- 30. IT Operations Security, Compliance and Fraud Operational Intelligence Developer Platform (REST API, SDKs) Business Analytics Индустриальн ые данные, Internet of Things 30 Индустриальные данные
- 31. 31 Splunk for Industrial Data & the Internet of Things REMOTE TROUBLESHOOTING & PREVENTIVE MAINTENANCE SECURITY & COMPLIANCE DEVICE USAGE & CUSTOMER ANALYTICS OPERATIONAL EFFICIENCY
- 32. Building Smarter Transportation Improving Safety Reducing Fuel Costs Improving On-Time Operations Over $1 Billion in Potential Savings 32
- 33. Данные с индустриальных устройств & Internet of Things • DBConnect • REST API and SNMP Modular Inputs • Universal Forwarder for Raspberry Pi Apps, Features & Partners REST 33
- 34. Mainframe Data VMware Platform for Machine Data Splunk легко адаптировать Exchange PCISecurity DB Connect MobileForwarders Syslog / TCP / Other Sensors & Control Systems Rich Ecosystem of Apps Across Data Sources, Use Cases & Consumption Models Stream 34
- 35. Dev.splunk.com40,000+ questions and answers 500+ apps Local User Groups and SplunkLive! events 35 Сильное Community
- 36. FREE ONLINE SANDBOX FREE DOWNLOAD FREE AMAZON MACHINE IMAGES (AMI) 36 Легко использовать & Легко начать 1 32
- 38. Splunk in Financial Services 38 Trade Processing Customer Support Settlement Systems FIX Order Management Payment Processing Core Banking Processes Infrastructure Management Branch / ATM Management Operational Intelligence Across Diverse Business Processes and Services Security Compliance (SOX/Basel) Online Banking Trading Credit Cards Loans Representative Business Processes Product & Services Insurance Business Services
- 39. Splunk in Financial Services 39 Trade Processing Customer Support Settlement Systems FIX Order Management Payment Processing Core Banking Processes Infrastructure Management Branch / ATM Management Operational Intelligence Across Diverse Business Processes and Services Security Compliance (SOX/Basel) Online Banking Trading Credit Cards Loans Representative Business Processes Product & Services Insurance Business Services
- 40. Enabling High Performance Global Trade Infrastructure 40 Trading infrastructures processes thousands of transactions across 25+ applications Indexes data across all applications and tiers including mission critical middle-tier trade service Splunk provides in-depth visibility across tiers: – Improves system uptime with timely alerts – Understand user trends and improve user experience – Accelerates trade processing times – Troubleshoot difficult issues within seconds Leading European Financial Services Firm “Today, we run threshold-based alerts to address issues before they cause downtime” - Team Lead for Trading Infrastructure
- 41. Splunk in Financial Services 41 Trade Processing Customer Support Settlement Systems FIX Order Management Payment Processing Core Banking Processes Infrastructure Management Branch / ATM Management Operational Intelligence Across Diverse Business Processes and Services Security Compliance (SOX/Basel) Online Banking Trading Credit Cards Loans Representative Business Processes Product & Services Insurance Business Services
- 42. Gaining Visibility Across Order Routing Systems 42 Challenging to gain insight across financial industry exchange (FIX) logs to address customer requests Indexes data across trading applications – includes FIX logs, syslog from hosts and applications Splunk provides in-depth visibility across tiers: – Automated transaction record monitoring – Significantly reduced customer request response times – Reduced broker response times – Increased productivity of existing resources Improves Customer Service and Streamlines Operations “Splunk helps us improve customer service. We are closing queries as fast as we open them” - Matt Easley, Customer Support Manager
- 43. Splunk in Financial Services 43 Trade Processing Customer Support Settlement Systems FIX Order Management Payment Processing Core Banking Software Infrastructure Management Branch / ATM Management Operational Intelligence Across Diverse Business Processes and Services Security Compliance (SOX/Basel) Online Banking Trading Credit Cards Loans Representative Business Processes Product & Services Insurance Business Services
- 44. End to End Visibility Delivers $6 MM in Annual ROI 44 Indexes millions of events/day. Machine data across: – Custom & 3rd party software, servers – Java code, databases, Operating systems Splunk provides insights to improve service: – Decreased downtime through proactive monitoring – Reduced MTTR with faster troubleshooting – Better coordination across Development & Operations – Improved team efficiency and better resource utilization Financial Service Firm Improves Service and Customer Satisfaction “We paid for Splunk in the first month…..now, we are actually proactively solving problems”
- 45. Splunk in Financial Services 45 Trade Processing Customer Support Settlement Systems FIX Order Management Payment Processing Core Banking Software Infrastructure Management Branch / ATM Management Operational Intelligence Across Diverse Business Processes and Services Security Compliance (SOX/Basel) Online Banking Trading Credit Cards Loans Representative Business Processes Product & Services Insurance Business Services
- 46. Enabling Timely Transaction Settlement Processing 46 Peak trading volume exceeds 20 MM transactions per day – settlement process is critical Indexes data across all applications and engines Splunk provides insights to improve performance: – Alerting supports pro-active customer engagement – Engine dashboards highlight KPI to monitor performance – Developers see impact of changes in real-time – Rapidly perform forensic investigations to troubleshoot Leading Global Equities and Commodities Exchange “Tried months and several homegrown solutions to surface real time insight – with Splunk it was working in 1 week”
- 47. Splunk in Financial Services 47 Trade Processing Customer Support Settlement Systems FIX Order Management Payment Processing Core Banking Software Infrastructure Management Branch / ATM Management Operational Intelligence Across Diverse Business Processes and Services Security Compliance (SOX/Basel) Online Banking Trading Credit Cards Loans Representative Business Processes Product & Services Insurance Business Services
- 48. MultiScaleUnit Risk Metrics Group 48 Our high performance cloud computing offering has Splunk integrated from the ground up. It is the go-to solution for every type of question – it helps in decision making at every level right from dev/test/ops to account management, product management and pricing. “ ” Vincent Bumgarner Principal Systems Engineer RunningCompute Instances AvgCPUUtilization CPUPercentile Splunk integrated into Risk Metrics’ high performance cloud computing effort from the ground up Used throughout the organization for delivering deep insights to vendor pricing, CFO, account management and sales, in addition to dev/test and support
- 49. Splunk in Financial Services 49 Trade Processing Customer Communication Settlement Systems FIX Order Management Payment Processing Core Banking Software Infrastructure Management Branch / ATM Management Operational Intelligence Across Diverse Business Processes and Services Security Compliance (SOX/Basel) Online Banking Trading Credit Cards Loans Representative Business Processes Product & Services Insurance Business Services
- 50. In-Depth Forensics to Mitigate Security Risks 50 Indexing data across multiple operating systems and over 55 global locations Splunk provides insights to reduce security risks: – Real-time forensics investigation of security issues – Searches across logs to identify source of problem – Ongoing monitoring for bad actors – Uses REST interface to gain visibility across systems Splunk enables log monitoring requirements of regulations – FFIEC, GLBA, SOX, PCI and SAS70 Leading Provider of Banking Technology Solutions Leading provider of core financial institution processing. Has processing and technology relationships with 31 of the top 50 global banks, including nine of the top 10.
- 51. Splunk in Financial Services 51 Trade Processing Customer Support Settlement Systems FIX Order Management Payment Processing Core Banking Software Infrastructure Management Branch / ATM Management Operational Intelligence Across Diverse Business Processes and Services Security Compliance (SOX/Basel) Online Banking Trading Credit Cards Loans Representative Business Processes Product & Services Insurance Business Services
- 52. Legg Mason 52 “We were able to move from a 9 person compliance monitoring team to just 3 people. Every day they thank me for Splunk.” Shawn Grimes Splunk delivers visibility across applications and servers to support compliance requirements Key Benefits delivered to Legg Mason – Flexibility - can use one solution to centralize logs in an easy to use way – Role based access controls - effectively guard access to data – Secure audit trail - quickly access data to support auditor requests – In-depth reports - generate reports for compliance while fulfilling log consolidation and retention requirements CISO has complete insight into security and compliance status through executive level dashboards
- 53. Splunk in Financial Services 53 Trade Processing Customer Communication Settlement Systems FIX Order Management Payment Processing Core Banking Software Infrastructure Management Branch / ATM Management Operational Intelligence Across Diverse Business Processes and Services Security Compliance (SOX/Basel) Online Banking Trading Credit Cards Loans Representative Business Processes Product & Services Insurance Business Services
- 54. New Insights for Electronic Trading • Splunk provides insight into the execution of individual trades and provides business intelligence to drive trading revenues Corporate and investment banking arm of leading bank, ranked among top 11 investment banks globally. With over 6,300 employees in 15 countries. Analytics across trade lifecycle – Gain insight across applications, auto-negotiation engine and third party trading platforms – Real-time visibility into key performance metrics – trades by client, client-tier, products and spreads – Executive dashboards for business managers from Fixed Income / Sales & Trading / Rates & Credits Groups Business Value – Effectively manage spreads based on data in real-time – Adjust spreads to drive profitable trading volume and increase revenues 54 Leading Investment Bank
- 55. Thank you
Notes de l'éditeur
- Splunk has more than 1,300 employees worldwide, with our global headquarters in San Francisco. Our 8,400 customers in 100 countries are using Splunk software and cloud services to improve service levels, reduce operations costs, mitigate security risks, enable compliance, enhance DevOps collaboration and create new product and service offerings. Our products are designed to fit your needs and are built to be as frictionless to deploy as possible. Simple download Splunk software, or sign up for the online sandbox, point it at your data, and you’ll up and running in minutes. Please always refer to latest company data found here: http://www.splunk.com/company.
- Проблема заказчиков – биг дата Рост объема – скорости – разновидности – сути What is this machine data, and why is it a big deal? Well, it’s one of the fastest growing, most complex and most valuable segments of data. All the webservers, applications, network devices, mobile devices, sensors – all of the technology infrastructure running your enterprise – generates massive streams of data, in an array of unpredictable formats that are difficult to process and analyze by traditional methods or in a timely manner. Why is this “machine data” valuable? Because it contains a trace - a categorical record - of user behavior, cyber-security risks, application behavior, service levels, fraudulent activity and customer experience. Characteristics of machine data – the four V’s - the last two are the most interesting / challenging.
- Основные задачи которые решают CIO – решают с помощью данных Machine data insights deliver value across a range of CIO’s strategic priorities for IT and the business. CIOs need to increasingly balance the need for innovation, helping drive business growth with ongoing maintenance, improving security posture among other things. With better visibility from machine data, CIO effectively address broad range of needs – helping them create a meaningful competitive advantage for the business.
- Миссия Спланка ведет вашу компанию к успеху At Splunk, our mission is to make machine data accessible, usable and valuable to everyone. And this overarching mission is what drives our company and product priorities.
- Собираем, ищем и анализируем, получаем знание в реальном времени. At it’s core, the Splunk platform enables you to: Collect data from anywhere – with universal forwarding and indexing technology. Search and analyze across all your data – with powerful search and schema-on-the-fly technology. Rapidly deliver real-time insights from machine data to IT and business people – through a powerful UI and dashboards. This is what we call Operational Intelligence.
- Множество целей использования для любой компании Splunk customers are realizing tremendous value across multiple industries and use cases. From Fortune 100 to small shops, enterprises, service providers and government agencies are improving service levels, reduce IT operations costs, mitigate security risks and drive new levels of operational visibility. As they gain new visibility into their real-time and historical machine data, Splunk’s customers are finding answers and solving the most challenging issues facing IT and the business.
- More than 8,400 customers in 100 countries have purchased the enterprise license of Splunk. This includes a majority of the Fortune 100. Enterprises, service providers and government agencies in 100 countries use Splunk to improve service levels, reduce IT operations costs, mitigate security risks and drive new levels of operational visibility. As they gain new visibility into their real-time and historical machine data, Splunk’s customers are finding answers and solving the most challenging issues facing IT and the business.
- Очень легко и быстро! What would you do if you could install software, point it at your data, then ask any questions you have? That’s the power of Splunk software and cloud services. Our software was designed to be downloaded and installed in minutes. The same software that’s a free download scales to hundreds of terabytes of data per day, and enables you to ask questions across your entire infrastructure—even across data silos. As you add more data, you receive more insights. All data is relevant to how you run your business and to support strategic priorities. Splunk Enterprise can be deployed on-premises or in the cloud, and can be deployed as either software or SaaS.
- Современные неструктурированные данные. The rise of big data has forced IT organizations to transition from a focus on structured, relational data, to accommodate unstructured data, driven by the volume, velocity and variety of today’s applications and systems. As the data has changed from structured data to unstructured data, the technology approach needs to change as well. When you don’t know what data types you’ll need to analyze tomorrow or what questions you need to ask in a week, flexibility becomes a key component of your technology decisions. The ability to index any data type, search across silos and avoid being locked into a rigid schema opens a new world of analytics and business insights to your organization. Schema at Read – Enables you ask any question of the deal Search – Enables rapid, iterative exploration of the data along with advanced analytics Universal Indexing – Enables you to ingest any type of machine data Horizontal scaling over commodity hardware enables big data analytics
- Множество типов и кол-во источников. Splunk products are being used for data volumes ranging from gigabytes to hundreds of terabytes per day. Splunk software and cloud services reliably collects and indexes machine data, from a single source to tens of thousands of sources. All in real time. Once data is in Splunk Enterprise, you can search, analyze, report on and share insights form your data. The Splunk Enterprise platform is optimized for real-time, low-latency and interactivity, making it easy to explore, analyze and visualize your data. This is described as Operational Intelligence. The insights gained from machine data support a number of use cases and can drive value across your organization. [In North America] Splunk Cloud is available in North America and offers Splunk Enterprise as a cloud-based service – essentially empowering you with Operational Intelligence without any operational effort.
- От одной задачи к множеству Because Splunk products can address a variety of use cases, you can start from virtually any line of business or department and grow the implementation to fit your needs. Customers that experience the most compelling ROI are the ones that realize that analyzing machine data provides insights for every part of the organization. For example, simply pulling in web data allows your: IT Operations & Applications teams to receive real-time information on how web infrastructure updates are working in production and resolve issues before they impact the customer Marketing team to gain insight into usage trends on your website, allowing them to deliver the most impactful campaigns Security team to identify the fingerprints of fraud and stop fraudulent activity before it impacts your company and customers Business Analysts to identify and understand issues such as shopping cart abandonment And that’s only using a single data source.
- Полный цикл обработки данных. Splunk provides an open, fully integrated platform. That means you can collect, index, analyze, report and predict on machine-generated data from a single product. It’s enterprise-ready with high availability and disaster recovery features, role-based access control and scales to index hundreds of terabytes per day. It’s an open platform with over 500 Splunk Apps available and allows for custom development.
- И для бизнес и для IT Both IT and business professionals can analyze machine data to get real-time visibility and operational intelligence. With our platform for machine data, organizations can meaningfully improve their performance in a wide range of areas e.g. meet service levels, reduce costs, mitigate security risks, maintain compliance and gain insights.
- Анализ кода приложений, мониторинг работы инфраструктуры и приложений With Splunk software and cloud services, you can quickly identify and pinpoint code-level issues at any stage of the development and release process. You can find and fix bugs quickly so you can ship product faster, gain insights into application usage and user behavior and get real time, mission-critical visibility into every step, system and process involved in building, testing and shipping new products to your customers. Splunk’s universal machine data platform empowers you to consolidate all information within a unified console to find the root-cause of issues, proactively manage events and incidents and reduce resolution times. You can quickly create alerts to proactively monitor your distributed infrastructure and complex applications/services. With Splunk MINT, our Mobile Intelligence solution, we’re now extending Operational Intelligence to Mobile Applications. With Splunk MINT, you are enabled to deliver reliable, better performing mobile apps with end-to-end visibility across mobile applications and their supporting application infrastructure. You can combine and correlate mobile app data with data from other channels such as web or desktop to gain cross-channel user and usage analytics with the Splunk platform. We have many apps that monitor cloud applications. The Splunk App for Stream enables the capture of real-time streaming wire data, across distributed infrastructures including private, public and hybrid Clouds. This enables visibility into application, business and user activity without the need for instrumentation, enhancing various operational use cases across IT, security and the business.
- We have over 300 Apps dedicated to application and infrastructure management areas, including: Application Performance Management Server, Storage and Network Server Virtualization Operating Systems Custom and Business Applications Ticketing/Help Desk Mobile Applications We also deliver the following Splunk Premium Apps: Exchange App for Exchange Admin: Service Health, Performance & Message tracking VMware App for VMware/Win/Linux Admin: Infrastructure Health in virtual environments, Performance & Anomalies/Outliers NetApp App for OnTap for Storage Admin: Infrastructure Health for NetApp environments, Performance & Anomalies/Outliers
- A range of plugins, templates and full-fledged apps are available to help you collect, analyze and harness data from every layer of your technology stack. Even if you’re using a product that’s not listed here, Splunk still doesn’t limit you – you can still index data from that technology. One of the key benefits of using Splunk software and cloud services is the ability to correlate machine data across silos, providing visibility across the entire Application Delivery and IT Ops landscape.
- Splunk is a Security Intelligence Platform and we can address a number of security use cases. We’re more flexible than a SIEM and can be used for non-security use cases. Splunk software can complement or replace existing SIEM deployments, while also addressing more complex security use cases, such as supporting fraud detection and finding insider threats.
- Our rapid ascent reflects the customer traction we have and value we deliver to customers – with thousands of security customers and 40% year-over-year growth, we are the fastest growing SIEM vendor in the market.
- HCA is taking data off of 4200+ connected device collecting patient vitals. Benefits from using Splunk software: Understanding device operations. Avoid millions of dollars in incremental operational costs. Nurses are very used to certain ways of doing things. Creating clinitian dashboards drove widespread adoption. Changed behavior from manual to connected. All data is electronically recorded, helps insure compliance with new healthcare act requirements. Addresses need for complete electronic health care record.
- FINRA is the largest independent regulator of security firms in the United States, monitoring over 6 billion transactions per day. FINRA is using Splunk Cloud for a security use case. FINRA is using Splunk Cloud together with the Splunk App for AWS, and gains huge value in using Splunk apps together with Splunk Cloud.
- The Spunk Security Intelligence Platforms consists of multiple components. Foundational to the platform is Splunk Enterprise, our core product. Every Splunk deployment includes this for indexing and storage. Using this alone, customers can perform searches and easily build reports/dashboards from their data. A variety of applications can be installed on top of the Splunk Enterprise, ranging from 3rd party vendor apps, community developed apps and Splunk Apps. You can build apps on top for your use or to share within your company. Apps are a collection of reports, dashboards, and searches purpose-built for a specific use. Our premium security app is the Splunk App for Enterprise Security. It provides out-of-the–box security workflow, dashboards, reports, correlation rules that bring together security and infrastructure technologies across your company. Any of the apps can be mixed-and-matched to achieve the desired level of functionality.
- To provide a complete, end-to-end view into the environment and to defend against sophisticated threats, including malware and APTs, security solutions must provide broad and deep coverage with the security and infrastructure elements. Organizations need a platform that provides out-of-box support and allows any technology/security/infrastructure device to be supported—this helps unify what has traditionally been silo efforts. Splunk Enterprise is a platform for machine data and provides visibility across these silos. The Splunk platform also provides role–based access control, which allows different people across the organization, including the security team, to access the data they need as part of their jobs, yet allows them to collaborate and see things across the environment. This is critical when orgs need to determine if an issue is a security, IT operations or an application issue.
- Splunk products analyze and visualize machine-generated data—a data type fundamentally different from the structured data analyzed by BI tools. Real-time insights from this new class of data provides critical insights in a timely fashion. Splunk software and cloud services can provide access to machine data and also enrich machine data with structured data from relational databases. For data at rest, Hunk provides an easy way to access the data without the need of specialized skills and MapReduce code. There are 4 key areas where Splunk helps accelerate business analytics: Digital Marketing – Real-time insights into marketing campaigns, user engagement and shopping cart conversion across multiple channels. Digital marketers, web/digital analyst looking to complement free tools and moving beyond single source of data (clickstream) benefit from using Splunk software. Customer Experience Analytics – Measure and analyze customer behavior and identifying opportunities to increase customer engagement, conversion. Web/Digital Analyst or WebOps teams responsible for providing a better user experience on the site require going deeper into the data and combining/correlating data across various sources. Product Analytics – Analyze product feature adoption, usage and effectiveness resulting in better conversion or user engagement. Product managers/analysts that monitor and optimize the website or mobile apps also benefit from Splunk, as they get usage/adoption of the features in real-time and can pinpoint areas of opportunities for improvement. Business Process Analytics - Business process analytics provides end-to-end real-time insights across the complete business process. Taking data from middleware and from various applications or touch points within websites or services help business owners, customer service organizations, business analyst monitor and optimize business processes.
- Domino’s Pizza is the world’s largest pizza delivery chain, serving over 1 million customers per day. Domino’s is consistently in the top 5 for online transactions, behind Amazon and Apple. As a result, web and app sales are a huge component of their business – 40% of US sales come through digital channels and need to be routed to the nearest Domino’s (source: http://www.dominosbiz.com/Biz-Public EN/Site+Content/Secondary/About+Dominos/Fun+Facts/). Splunk software is being used by the Domino’s Site Reliability team, which is responsible for ensuring online customers have the best experience possible. Before Splunk: Downtime impacts customer experience and sales, ability to resolve issues quickly is critical Addressing downtime was often reactive – they would see a dip in sales, and then manually search the log files to determine what happened It would take 2 – 3 hours to search and tie the logs back to the customers impacted When the executive team requested reports on promotion performance, it would involve someone late at night pulling the data and crunching the numbers daily. After Splunk: Proactive alerts: Domino’s created alerts to proactively notify the team before a dip in sales occurred, and enabled them to easily search and resolve issues within 5–15 minutes. Business Analytics: Domino’s uses Splunk to track sales, orders per minute, and coupons – down to the county level. Real-time promotion tracking & Exec Reports: Dashboard to track promotions in real-time for the marketing department – for instance, for 50% off online coupon promotions. Splunk software is now being used to generate automated reports that are emailed to the executive team.
- In addition to introducing features like data models and pivot, which allows business users access to machine data without using the search language, Splunk has built apps to enrich the data from relational databases (DB Connect) and use industry standard visualization using ODBC. The Splunk App for Stream taps into wire data and provides new insights that were not available for business users. We have also built an ecosystem of app and partnerships with various technology providers to meet business analytics needs. More apps are available on apps.splunk.com.
- Splunk’s use cases for Industrial Data and the Internet of Things include: Operational Efficiency: Using the data produced by devices and processes to generate insights into operations, availability and capacity. For example in a manufacturing environment, you can better understand short and long term trends in equipment behavior and production and use that understanding to continuously tune processes resulting in more efficient production and less unscheduled downtime. Remote Troubleshooting and Preventative Maintenance: When equipment goes down, you can use a combination of alarm, event and sensor data to quickly and efficiently troubleshoot the device and process. With a better understanding of the underlying issue, maintenance personnel will resolve issues faster, and in fewer trips. In addition, you can find patterns and correlations in your data to better predict needed maintenance and even mitigate failures. Security and Compliance: Connected sensors, machines and critical applications demand a serious security solution. Splunk software monitors all of your data, and can help you monitor for, and prevent, both outside and insider threats. In addition, Splunk reporting can be used to generate compliance reports from utilization and security perspectives. Device Utilization and Customer Analytics: gain insight into how end users are using the devices and systems you manage – in real world use cases. Monitoring for user error or patterns in end user demographics can provide insight valuable when revising device manuals and user interfaces, or even from a marketing perspective when marketing consumables or new products.
- NYAB is a supplier of innovative train control systems for the railroad industry. New York Air Brake’s Train Dynamic Systems Division is using Splunk to manage inter-train forces, the “slinky factor” inherent in large freight trains with 6 inches of flex between cars. With Splunk, they are able to: Produce insight and reports allowing the owners of the locomotives they manage to better train the engineers, and better manage the acceleration and braking of the trains throughout thousand mile journeys Managing this data with Splunk, they can produce 1% fuel savings for customers For their largest customers this can mean a billion dollars in savings a year
- Splunk has several applications and partnerships that make us especially relevant for the Internet of Things: Community apps such as modular inputs for REST Endpoints, Kinesis, Kafka, and JMS Messaging Services allow easy connection to and ingestion of the high velocity and volume data available from the web services and from web based messaging queues that are becoming so common in IoT data delivery. Splunk’s DB Connect allows connection to data stored in relational databases, as well as to traditional structured metadata sources which can be used for Splunk lookups. And for the makers in the house, a community supported Splunk Universal Forwarder for ARM architectures runs on platforms like Raspberry Pi for easy access to the data and applications running on those IoT devices. Strong partnerships with companies well established in the internet of things, including Kepware, CQCloud and DataFlare for industrial data collection, analytics and visualization, and ThingWorx and MachineShop for IoT platforms integration in the Enterprise.
- The Splunk platform consists of multiple products and deployment models to fit your needs. Splunk Enterprise – for on-premise deployment Splunk Cloud – Fully managed service with 100% SLA and all the capabilities of Splunk Enterprise…in the Cloud Hunk – for analytics on data in Hadoop Splunk Mint – to get insights into data from Mobile devices The products can pull in data from virtually any source to support multiple use cases. Splunk Apps extend and simplify deployments by providing pre-packaged content designed for specific use cases and data types.
- Splunk has an active community: There is also an emerging ecosystem of new companies building apps on top of the Splunk Enterprise platform. These companies are taking advantage of open APIs and new platform capabilities to create an entirely new generation of applications. How many of you have used Splunk Answers? Our technical support is consistently rated as industry leading and Splunk Answers has answers to thousands of questions. It’s the go to place for your questions – and answers. You can participate in meet-ups and User Groups or you can contribute to our forums. You can also local SplunkLive events to hear how your peers are using machine data.
- Splunk software and cloud services are simple to deploy, scale from a single server deployment to global large-scale operations and delivers fast payback. Whether you’re using Hadoop, deploying in the cloud, or searching for an on-premises solution, getting started with Splunk software was designed from the ground up to be as frictionless possible. We have multiple options for getting started, designed to suit your needs: Try out Hunk, Splunk Cloud and Splunk Enterprise with our free online sandboxes. Want try it out on premises? Free downloads of Hunk and Splunk Enterprise are available. The product you download is the same product that scales to ingest petabytes of data per day. 3. Already running with Amazon Cloud deployments? AMIs for Splunk Enterprise and Hunk make it easy to get up and running.
- Splunk delivers operational intelligence across the IT infrastructure that supports both business processes and products & services delivered to end customers. Let’s take at look at some of the different use cases where Splunk is delivering value in Financial Services.
- About – This European Financial Services firm is one of the world-leading financial services company, advising clients in all aspects of finance, around the world, around the clock. It’s core businesses include investment banking, asset management, and private banking. Use Case – The company uses Splunk to gain visibility across their trading infrastructure – which includes over 25 applications. Any application or service downtime in this infrastructure means lost revenues and poor customer experience. Splunk indexes data across all these applications and the mission critical java middle-tier trade service. The service processes thousands of transactions on a daily basis. Benefits - By using Splunk, the firm significantly improved the system uptime and accelerated trade processing times. They can now rapidly pinpoint problems and resolve them much faster than before. The company is now using threshold based alerts to pro-actively identify problems – before they happen and avoid system downtime. As the firm moves forward, it is incorporating Splunk as part of its core application development strategy. When new custom applications are developed, the company is including new metrics and data in the logs – by getting visibility into these logs from Splunk, the firm can gain even more insights into their applications.
- About - Nexa develops and hosts browser-based trading solutions, direct access trading platforms, trade management and order routing systems as well as back-office and account management applications. Before Splunk, the brokerage support team relied solely on two very busy system administrators to access the activity logs containing official records of exchange settlements (FIX) and other trading events. Even for these experts, finding a trade confirmation executed at the right price and confirming if the trader had enough buy power was a cumbersome process that was extremely time consuming and difficult to support. Use Case - Rather than having system administrators run the homegrown script on their production systems, the Nexa support team now uses Splunk. The support team now securely accesses transaction records directly—saving valuable time. When a broker wants to verify that a trade took place, the Nexa support person adds a specific order ID to a canned Splunk search to find the FIX settlement event. While brokers remain on the phone the support person can confirm whether or not it actually happened. If customers need details about their orders, support can search using Splunk by order ID and send the results via email. Brokers also contact the support team with questions about their buy power, which Nexa calculates during the course of a day based on the broker’s account activity. If a broker did not have enough buy power when an order was placed, the support person uses Splunk’s View Source to find the three buy power calculations associated with the order ID in question. With this information, the support person can explain to the broker exactly what happened. Benefits - Splunk has helped Nexa streamline operations and improve their customer experience. Today they are using Splunk for common broker requests which significantly reduces the load on system administrators. Nexa estimates they have streamlined operations with 50% less labor time for 80% of the validation requests.
- About - This leading, privately held financial services company is based in the US with more than 50,000 worldwide customers. Hundreds of millions of users across the globe rely on the company's international services and information resources. Use Case - The company leverages a large number of distributed applications that generate millions of events per day. The task of wading through all this data to troubleshoot problems was a manual process that was both time-consuming and very costly. In a business where downtime costs tens of thousands of dollars per minute, the company needed a better way to sift through huge amounts of information to fix a problem. This global organization deployed Splunk to gain better visibility across its large infrastructure and to analyze and troubleshoot problems more quickly. With Splunk installed, the company is now able to collect a wide range of machine data including custom and third-party software, servers, c language code, Java code, operating systems, databases, and more. Splunk streamlined the company's ability to search, find, analyze and resolve issues quickly. Splunk allows the organization to get ahead of the break-fix model and proactively find issues before they become downtime-causing problems. Benefits - Splunk enabled the financial services company to decreased monthly outage time from 70 minutes to 10-15 minutes. They reduced mean time to repair from 50-60 minutes to about 20 minutes. The company also now is able to conduct periodic service level reviews for continuous service improvement. The annual savings from the reduced downtime alone saves the company $6M annually. In addition to experiencing better customer satisfaction with less downtime, the company also realized the following benefits using Splunk: Continuous service improvement - The idea of periodic service level reviews, accompanied by reviews of potential areas of service improvement, is a focus area in ITIL v3. There aren't a lot of tools to support this yet; however, the capabilities provided by Splunk are a good starting point. Improved efficiency - The team has become more efficient in narrowing down and solving the problem quickly. Better coordination between Development and Operations (DevOps) - Developers are using the product as well. They create searches as they develop code. Searches can be used to debug during development, and can also be used to troubleshoot once applications go into production.
- About - This leading exchange offers the widest range of benchmark futures and options products that cover all major asset classes. These include interest rates, equities, FX, commodities and alternative investments. Its customers include brokerage firms, banks, hedge funds and pension funds. Use Case - The exchange is using Splunk to monitor all their applications including the applications that support the transaction settlement process. The exchange has a peak trading volume of 20 MM transactions per day - ensuring transactions are settled accurately and efficiently is critical to the business both from a customer satisfaction standpoint and the ability to scale the business to support future growth. The exchange indexes data using Splunk across all settlement processing applications. Benefits - By getting insights from Splunk, the exchange has visibility into issues that may be causing latency in processing trades. It can accurately pinpoint problems and rapidly fix problems. Alerts from Splunk help identify issues before they happen and Splunk dashboards monitor KPIs across systems. The exchange’s application developers are now using Splunk to see the impact of changes in real-time. Such insights help them fine turn features to ensure they performing as intended and are not causing any problems.
- About - RiskMetrics (part of MSCI) provides multi-asset, position-based risk and wealth management products and services that enable clients to measure and quantify portfolio risk across security types, geographies and markets. RiskMetrics is well known for its Value at Risk methodologies, as well as being a leading provider of credit and counterparty risk systems. Use Case - The company offered a cloud based high volume analytics computation offering and is based in the Windows Azure cloud. RiskMetrics had Splunk integrated from the ground up as part of this offering – developers/testers used it for performance tuning, finding and fixing errors before rolling out new releases to production. Support used it to find and resolve issues for customers. And quickly, sales and account management used Splunk as a reference to get account history – which customer has had how many support calls, how much are they using Splunk. Even vendor management and the CFO office used Splunk generated reports and dashboards, to monitor asset usage, determine client and vendor pricing. Thus fully leveraging the value of their own IT data using Splunk. Benefits – Splunk is a decision support solution for RiskMetrics – helping decision making at every level from development, testing, operations all the way to account management, products and pricing. Splunk enables RiskMetrics to effectively manage the cloud offering – driving higher revenues for the business and delivering a superior customer experience.
- Background: FIS is a leading provider of core financial institution processing. FIS has processing and technology relationships with 31 of the top 50 global banks, including nine of the top 10. More than 50 percent of all U.S. residential mortgages are processed using FIS software. Headquartered in Jacksonville, Fla., FIS maintains a strong global presence, serving over 7,800 financial institutions. Use Case: FIS is using Splunk to support their Compliance and Security needs. The previous solutions that it used were cumbersome and not very useful. FIS uses Splunk to index data across multiple operating systems and over 55 global locations. With Splunk, it can rapidly perform real-time forensics investigation of security issues by searching across logs to identify source of problem. The company uses dashboards to perform ongoing monitoring of security incidents. FIS is also using Splunk to meet the requirements of various regulations that it is subject to – these regulations include FFIEC, GLBA, SOX, PCI and SAS70. The requirements relate to audit trail and log review, data retention and change monitoring. Business Value: With Splunk, FIS is able to mitigate security risks and significantly improve its security posture. It is able to comply with the requirements of various regulations using one solution rather than using purpose built solutions for each regulation.
- About - Legg Mason is a diversified global asset management firm. It is one of the largest asset managers in the world, with assets under management of $645 billion. The company has approximately 3,550 employees with 34 offices around the world and is one of the ten largest institutional asset managers in the world. Use Case - Legg Mason uses Splunk to get visibility across applications and servers to support its compliance requirements. The previous solutions that Legg Mason used were extremely inflexible and required significant resource investment to ensure compliance. With Splunk’s flexibility, Legg Mason can use one solution to centralize logs in an easy to use way. With role based access controls, the company can effectively guard access to data. Legg Mason also uses Splunk to generate reports for compliance while fulfilling log consolidation and retention requirements. With secure audit trail of logs, the company can quickly access data to support auditor requests – something that was very time consuming. Finally, CISO has complete insight into security and compliance status through executive level dashboards. For example, CISO can easily view 9 billion global events and know they can extract relevant logs quickly at any time for compliance support. Benefits – With Splunk, Legg Mason was able to address its compliance requirements more effectively with fewer resources and at a lower cost. Flexibility, ease-of-use, and rapid time to value means Legg Mason can support their compliance needs as new regulatory requirements come up and business grows.
- Company Overview: This leading bank provides a range of services to customers around products related to fixed income, foreign exchange, emerging markets, money markets and electronic trading. Ranked in the Top 20 investment banks by Bloomberg. Group Using Splunk: eCommerce group that manages the trade negotiation across multi-dealer trading platforms. Use Case Background: The bank’s full inventory of products is available on different multi-dealer systems such as Bloomberg and Trade Web. When a customer requests a quote through any of these multi-dealer platforms, the quote data is sent to the bank so it can make an offer by taking into account variety of factors including client tier, trading patterns, target spread and trading history. Most of the requests are processed by an “auto-negotiation” engine that provides response to the quote. Each of these systems – multi-dealer platforms, auto negotiation engine – generates log data that includes critical information about the trade (client, time, tier, product, volume, pricing, spread, acceptance etc). Such information provides important insight to help refine the spread and deliver the best offer that increases the probability of acceptance while driving higher profits. Why Splunk: The bank tried to use manual processes to sift through and correlate the “business” log data across systems to provide executives important insights. However, it was extremely difficult and time consuming to do so. The team came across Splunk and decide to use it. What data is Splunked: As part of the current use case, the team is Splunking all business log data generated by the third party trading platforms and the auto-negotiation engine. Essentially, Splunk is used to monitor the entire conversation across systems – each step in the conversation generates logs. Dashboards: The team has created in-depth dashboards to provide executives visibility into the end-to-end negotiation processes. The dashboards include information on trades by client, client tiers, products, and spread. Key Users: The key users of the data are primarily business users – includes business managers from Fixed Income / Sales & Trading / Rates and Credit groups. Business Value: The key business value from Splunk dashboards is that the business managers can rapidly manage their spreads based on insights from the data. They can easily monitor their offer acceptance rates based on the different parameters. By adjusting their rates in near real-time, they can increase the win rates while improving profits and processing higher trade volumes. What’s Next: Over time, the plan is to leverage Splunk for more traditional use cases around application monitoring – including monitoring various engines such as auto negotiation engine, trade capture engine, position engine, and pricing engine.