Location via proxy:   [ UP ]  
[Report a bug]   [Manage cookies]                
SlideShare a Scribd company logo
How to Align Your Daily Splunk Activities to
Key Business Services for Increased
Value and Visibility
Tom Harrop, Michael Zuber
IT Operations Field Specialization
Splunk>
March 16, 2016
This is my ___ splunk > live!
What’s My Role?
AdministratorManager Programmer
Service Owner
Architect
Executive
What we hear from our customers…
“Service Intelligence is new to us. How do we get started?”
“Do you have best practices to help us with Service Intelligence?”
Splunk IT Service Intelligence
SPLUNK IT SERVICE INTELLIGENCE
Time-series Index
Platform for Machine Data
Dynamic
Service Models
Schema-on-read Data Model
Common
Information Model
At-a-Glance
Problem Analysis
Early Warning
on Deviations
Simplify Incident
Workflows
Afternoon Hands On Session
We’re here to help!
Harness the creativity and domain knowledge of your organization
to unlock the value of data and solve an important Business
Service problem through a joint service intelligence workshop
with key stakeholders
Define methods for:
› Proactive service monitoring
› Reduced risk and failures
› Faster issue resolution
› Increased business performance
What is it?
› 1 Day Onsite Workshop
› Tightly linked with value
› Collaborative approach
› Build your own Glass Table
Driving Service Intelligence
Bring Subject
Experts
Together
Design Before
Configuring
Driving Service Intelligence
Start with a
Problem worth
solving
Start with a
Problem worth
solving
Impactful
Valuable
Measureable
Driving Service Intelligence
Owners
Supporters
AdministratorsBring Subject
Experts
Together
Driving Service Intelligence
Design Before
Configuring
Metrics
Components
Supporting Data
Driving Service Intelligence
Identifying the Problem
• What Are The Critical Services?
• Customer Experience
• Customer Satisfaction
• Customer Value
Identifying the Problem
• What Are The Critical Services?
• Issue Frequency
• How Often
• Resolution
• Co-Operation
• Critical Business Services
• Issue Frequency
• Impact
• Customer Experience
• Financial Impact
• Resolution Effort
Identifying the Problem
• Critical Business Services
• Issue Frequency
• Impact
• Customer Experience
• Financial Impact
• Resolution Effort
Identifying the Problem
• Critical Business Services
• Issue Frequency
• Impact
• Customer Experience
• Financial Impact
• Resolution Effort
Identifying the Problem
Harness the Power of the SME
Collaboration is Key
Escalation Manager
Enterprise Architect
Administrators
Business functions
Performance indicators
Common business
issues
Frequency of issues
Business impact of
issues
Service Owners
Common issues
Performance indicators
Resolution processes
Tools used for resolving
issues
Frequency of issues
IT impact of issues
Current tools and
usage, and adoption
levels
Splunk expertise
Environment expertise
Business processes
Key inputs and outputs
Technology architecture
Data architecture
Common issues
Design Methodology: Service Decomposition
Start With
Business Function
& Flow
Define
Scope &
Depth
Link
Supporting
Technology
Start with
Business
Function & Flow
Measure health and impact 73%
-36%
Service Layers
Infrastructure Layer
Power/Cooling/Facilities
Server–Networking–Storage
Service Layer BusinessService
Application Layer
Middleware–ApplicationServer-Database
CustomApps
Business Layer
MailTransport-OrderProcessing
E-Commerce-Financials
The Problem For Buttercup Games
How to Align Your Daily Splunk Activities Breakout Session
The Problem For Buttercup Games
Critical Services Impacted
• Supply Chain Visibility
• New Online Store Customer Satisfaction Issues
The Problem For Buttercup Games
Occurs Frequently
• Twice Weekly
• 4-8 Subject Matter Experts required to resolve issues
The Problem For Buttercup Games
Impact
Customer Outage Lasts up to1 hour
$48,000 In Lost Revenue Per Week
32 Man Hours Spent Resolving Issues each time
Gaining Service Intelligence
Service Layer SupplyChain
Infrastructure Layer
Server©Server
Business Layer OrderEntry ShippingManufacturing Fulfillment
Application Layer
EDI
Middleware Database
OnlineStore
WebTier
Bringing it all together - KPIs
Service Layer SupplyChain
Infrastructure Layer
Server©Server
Application Layer
OnlineStore EDI
WebTier Middleware Database
Business Layer OrderEntry ShippingManufacturing Fulfillment
ServiceHealth
Unit Count
Unit Failures
Service Level Delivery Time
Online Orders
Online Revenue
Service Health
CPU Load
Memory Used
Disk Used
IO Latency
CPU Load
Memory Used
Disk Used
IO Latency
Service Health Service Health
Total Orders
Total Revenue
Service Health
Buttercup Games Supply Chain
Would you like to see Buttercup Games in
Splunk IT Service Intelligence?
Glass Table Example
Glass Table Example
Aflying start to Service Intelligence
Start With A problem worth solving
Collaborate with Subject Matter Experts
Design Before Configuring
Sign Up Now – We’re here to help!
Harness the creativity and domain knowledge of your organization
to unlock the value of data and solve an important Business
Service problem through a joint service intelligence workshop
with key stakeholders
Define methods for:
› Proactive service monitoring
› Reduced risk and failures
› Faster issue resolution
› Increased business performance
What is it?
› 1 Day Onsite Workshop
› Tightly linked with value
› Collaborative approach
› Build your own Glass Table
35
Northern Cal Tech Talks!
Monthly WebEx Sessions
• Ted Talk style presentation
• Q&A Chat forum
So what’s next on the agenda?
• March 23rd @ 10AM PST - Building &
Deploying Apps.
• April 20th @ 10AM PST - Top 5 most useful
search commands.
See more at:
http://live.splunk.com/NorCalTechTalks
36
SEPT 26-29, 2016
WALT DISNEY WORLD, ORLANDO
SWAN AND DOLPHIN RESORTS
• 5000+ IT & Business Professionals
• 3 days of technical content
• 165+ sessions
• 80+ Customer Speakers
• 35+ Apps in Splunk Apps Showcase
• 75+ Technology Partners
• 1:1 networking: Ask The Experts and Security
Experts, Birds of a Feather and Chalk Talks
• NEW hands-on labs!
• Expanded show floor, Dashboards Control
Room & Clinic, and MORE!
The 7th Annual Splunk Worldwide Users’ Conference
PLUS Splunk University
• Three days: Sept 24-26, 2016
• Get Splunk Certified for FREE!
• Get CPE credits for CISSP, CAP, SSCP
• Save thousands on Splunk education!

More Related Content

How to Align Your Daily Splunk Activities Breakout Session

  • 1. How to Align Your Daily Splunk Activities to Key Business Services for Increased Value and Visibility Tom Harrop, Michael Zuber IT Operations Field Specialization Splunk> March 16, 2016
  • 2. This is my ___ splunk > live!
  • 3. What’s My Role? AdministratorManager Programmer Service Owner Architect Executive
  • 4. What we hear from our customers… “Service Intelligence is new to us. How do we get started?” “Do you have best practices to help us with Service Intelligence?”
  • 5. Splunk IT Service Intelligence SPLUNK IT SERVICE INTELLIGENCE Time-series Index Platform for Machine Data Dynamic Service Models Schema-on-read Data Model Common Information Model At-a-Glance Problem Analysis Early Warning on Deviations Simplify Incident Workflows
  • 7. We’re here to help! Harness the creativity and domain knowledge of your organization to unlock the value of data and solve an important Business Service problem through a joint service intelligence workshop with key stakeholders Define methods for: › Proactive service monitoring › Reduced risk and failures › Faster issue resolution › Increased business performance What is it? › 1 Day Onsite Workshop › Tightly linked with value › Collaborative approach › Build your own Glass Table
  • 9. Bring Subject Experts Together Design Before Configuring Driving Service Intelligence Start with a Problem worth solving
  • 10. Start with a Problem worth solving Impactful Valuable Measureable Driving Service Intelligence
  • 13. Identifying the Problem • What Are The Critical Services? • Customer Experience • Customer Satisfaction • Customer Value
  • 14. Identifying the Problem • What Are The Critical Services? • Issue Frequency • How Often • Resolution • Co-Operation
  • 15. • Critical Business Services • Issue Frequency • Impact • Customer Experience • Financial Impact • Resolution Effort Identifying the Problem
  • 16. • Critical Business Services • Issue Frequency • Impact • Customer Experience • Financial Impact • Resolution Effort Identifying the Problem
  • 17. • Critical Business Services • Issue Frequency • Impact • Customer Experience • Financial Impact • Resolution Effort Identifying the Problem
  • 18. Harness the Power of the SME
  • 19. Collaboration is Key Escalation Manager Enterprise Architect Administrators Business functions Performance indicators Common business issues Frequency of issues Business impact of issues Service Owners Common issues Performance indicators Resolution processes Tools used for resolving issues Frequency of issues IT impact of issues Current tools and usage, and adoption levels Splunk expertise Environment expertise Business processes Key inputs and outputs Technology architecture Data architecture Common issues
  • 20. Design Methodology: Service Decomposition Start With Business Function & Flow Define Scope & Depth Link Supporting Technology Start with Business Function & Flow Measure health and impact 73% -36%
  • 21. Service Layers Infrastructure Layer Power/Cooling/Facilities Server–Networking–Storage Service Layer BusinessService Application Layer Middleware–ApplicationServer-Database CustomApps Business Layer MailTransport-OrderProcessing E-Commerce-Financials
  • 22. The Problem For Buttercup Games
  • 24. The Problem For Buttercup Games Critical Services Impacted • Supply Chain Visibility • New Online Store Customer Satisfaction Issues
  • 25. The Problem For Buttercup Games Occurs Frequently • Twice Weekly • 4-8 Subject Matter Experts required to resolve issues
  • 26. The Problem For Buttercup Games Impact Customer Outage Lasts up to1 hour $48,000 In Lost Revenue Per Week 32 Man Hours Spent Resolving Issues each time
  • 27. Gaining Service Intelligence Service Layer SupplyChain Infrastructure Layer Server©Server Business Layer OrderEntry ShippingManufacturing Fulfillment Application Layer EDI Middleware Database OnlineStore WebTier
  • 28. Bringing it all together - KPIs Service Layer SupplyChain Infrastructure Layer Server©Server Application Layer OnlineStore EDI WebTier Middleware Database Business Layer OrderEntry ShippingManufacturing Fulfillment ServiceHealth Unit Count Unit Failures Service Level Delivery Time Online Orders Online Revenue Service Health CPU Load Memory Used Disk Used IO Latency CPU Load Memory Used Disk Used IO Latency Service Health Service Health Total Orders Total Revenue Service Health
  • 30. Would you like to see Buttercup Games in Splunk IT Service Intelligence?
  • 33. Aflying start to Service Intelligence Start With A problem worth solving Collaborate with Subject Matter Experts Design Before Configuring
  • 34. Sign Up Now – We’re here to help! Harness the creativity and domain knowledge of your organization to unlock the value of data and solve an important Business Service problem through a joint service intelligence workshop with key stakeholders Define methods for: › Proactive service monitoring › Reduced risk and failures › Faster issue resolution › Increased business performance What is it? › 1 Day Onsite Workshop › Tightly linked with value › Collaborative approach › Build your own Glass Table
  • 35. 35 Northern Cal Tech Talks! Monthly WebEx Sessions • Ted Talk style presentation • Q&A Chat forum So what’s next on the agenda? • March 23rd @ 10AM PST - Building & Deploying Apps. • April 20th @ 10AM PST - Top 5 most useful search commands. See more at: http://live.splunk.com/NorCalTechTalks
  • 36. 36 SEPT 26-29, 2016 WALT DISNEY WORLD, ORLANDO SWAN AND DOLPHIN RESORTS • 5000+ IT & Business Professionals • 3 days of technical content • 165+ sessions • 80+ Customer Speakers • 35+ Apps in Splunk Apps Showcase • 75+ Technology Partners • 1:1 networking: Ask The Experts and Security Experts, Birds of a Feather and Chalk Talks • NEW hands-on labs! • Expanded show floor, Dashboards Control Room & Clinic, and MORE! The 7th Annual Splunk Worldwide Users’ Conference PLUS Splunk University • Three days: Sept 24-26, 2016 • Get Splunk Certified for FREE! • Get CPE credits for CISSP, CAP, SSCP • Save thousands on Splunk education!

Editor's Notes

  1. With Splunk ITSI, customers get the higher level benefits based on the underlying platform. So, from deep-in-the-weeds solving IT operational use cases with Splunk enterprise, we’re up-leveling the use cases and making IT more relevant to the business. The can visualize meaningful and contextual data and inter-relationships with dynamic service models, organize and correlate performance indicators for at-a-glance problem analysis, get proactive with early warnings on anomalies, deviations and pre-configured correlated alerts, and simplify workflows.
  2. Bring up live system
  3. So how do you drive Service Intelligence in your own organization? Providing service-level intelligence requires overcoming the difficulties that legacy methods have imposed upon the industry for years including: handling data sources of variable formats, working with poorly integrated controllers, scalability, bottom up discovery and alignment and lengthy complex deployments . Customers have told us we need a new approach. One that provides out-of-the-box visibility into operational health, scalability and management ease, top/down and in depth real-time visibility; correlation and anomaly detection, adaptive thresholding and new visualizations with quick time-to-deploy and additive value. ITSI reinvents traditional monitoring and analytics with a data-driven approach to provide service-level intelligence to your services. The solution gives you a centralized, connected view of dynamic IT services. What are Services? A service is a way of providing value to customers, both internal and external. This can span a broad range of definitions, including: • An application or group of applications • An infrastructure tier • A business service, such as an online marketplace, that could include multiple infrastructure components or entities (such as web servers, databases and load balancers) What are Entities? Entities are the components that make up your services. An entity could be a server, a switch port, a user or anything else that meets your needs. Services can be bound to specific entities, and will have metrics defined to help people across your organization easily understand the status of key business services. What are KPIs? Key performance indicators (KPIs) are metrics that are used to evaluate the overall status of a service. KPIs are configured using Splunk searches, so you have the ability to define any KPI that best meets your needs.
  4. What service in the organization is impactful and requires oversight. Think about a service in your organization that supports the business, may maintain any number of SLA’s and can be measured to understand how a service has been performing, how it is performing currently, and how it is projected to perform in the future
  5. Who owns and supports the the service; think the domain experts, the server, network and database admins, the enterprise architects, the business process owners, the executives
  6. Think about the metrics that are important in calculating overall health of a service and their supporting entities. What components do we need to include in the service; db, middleware What data is needed to drive the metrics; response time, CPU load, revenue generated, social media posts?
  7. What are the top business services in your enterprise? How do you measure the customer experience with these services? Are customers happy with their experience?
  8. How often do customers experience issues with the service? When issues arise, who gets involved in resolving them? How do teams work together to resolve issues?
  9. How long is the customer experience affected each time there is an issue? What are the financial impacts when customers have a bad experience with your services? What’s the effort required to fully eliminate issues?
  10. Service decomposition is an industry best practice designed to increase the granularity of a service subsequent to it implementation. By separating a solution environment we are able to gain increasing visibility into the constituent parts associated with a service without loosing focus on the composite importance of it’s constituent parts.
  11. Bring up live system
  12. Bring up live system. Discuss how different objects in our design translate to ITSI.
  13. We’re headed to the East Coast! 2 inspired Keynotes – General Session and Security Keynote + Super Sessions with Splunk Leadership in Cloud, IT Ops, Security and Business Analytics! 165+ Breakout sessions addressing all areas and levels of Operational Intelligence – IT, Business Analytics, Mobile, Cloud, IoT, Security…and MORE! 30+ hours of invaluable networking time with industry thought leaders, technologists, and other Splunk Ninjas and Champions waiting to share their business wins with you! Join the 50%+ of Fortune 100 companies who attended .conf2015 to get hands on with Splunk. You’ll be surrounded by thousands of other like-minded individuals who are ready to share exciting and cutting edge use cases and best practices. You can also deep dive on all things Splunk products together with your favorite Splunkers. Head back to your company with both practical and inspired new uses for Splunk, ready to unlock the unimaginable power of your data! Arrive in Orlando a Splunk user, leave Orlando a Splunk Ninja! REGISTRATION OPENS IN MARCH 2016 – STAY TUNED FOR NEWS ON OUR BEST REGISTRATION RATES – COMING SOON!