This document discusses how organizations can align their daily Splunk activities to key business services to increase value and visibility. It recommends that organizations start with identifying a critical problem related to an important business service. It then suggests conducting a workshop with subject matter experts to collaboratively design a Splunk dashboard to monitor the key performance indicators for that service before configuring the dashboard. The document provides an example of how this approach helped a company called Buttercup Games address issues with their supply chain visibility.
Report
Share
Report
Share
1 of 36
More Related Content
How to Align Your Daily Splunk Activities Breakout Session
1. How to Align Your Daily Splunk Activities to
Key Business Services for Increased
Value and Visibility
Tom Harrop, Michael Zuber
IT Operations Field Specialization
Splunk>
March 16, 2016
4. What we hear from our customers…
“Service Intelligence is new to us. How do we get started?”
“Do you have best practices to help us with Service Intelligence?”
5. Splunk IT Service Intelligence
SPLUNK IT SERVICE INTELLIGENCE
Time-series Index
Platform for Machine Data
Dynamic
Service Models
Schema-on-read Data Model
Common
Information Model
At-a-Glance
Problem Analysis
Early Warning
on Deviations
Simplify Incident
Workflows
7. We’re here to help!
Harness the creativity and domain knowledge of your organization
to unlock the value of data and solve an important Business
Service problem through a joint service intelligence workshop
with key stakeholders
Define methods for:
› Proactive service monitoring
› Reduced risk and failures
› Faster issue resolution
› Increased business performance
What is it?
› 1 Day Onsite Workshop
› Tightly linked with value
› Collaborative approach
› Build your own Glass Table
19. Collaboration is Key
Escalation Manager
Enterprise Architect
Administrators
Business functions
Performance indicators
Common business
issues
Frequency of issues
Business impact of
issues
Service Owners
Common issues
Performance indicators
Resolution processes
Tools used for resolving
issues
Frequency of issues
IT impact of issues
Current tools and
usage, and adoption
levels
Splunk expertise
Environment expertise
Business processes
Key inputs and outputs
Technology architecture
Data architecture
Common issues
20. Design Methodology: Service Decomposition
Start With
Business Function
& Flow
Define
Scope &
Depth
Link
Supporting
Technology
Start with
Business
Function & Flow
Measure health and impact 73%
-36%
24. The Problem For Buttercup Games
Critical Services Impacted
• Supply Chain Visibility
• New Online Store Customer Satisfaction Issues
25. The Problem For Buttercup Games
Occurs Frequently
• Twice Weekly
• 4-8 Subject Matter Experts required to resolve issues
26. The Problem For Buttercup Games
Impact
Customer Outage Lasts up to1 hour
$48,000 In Lost Revenue Per Week
32 Man Hours Spent Resolving Issues each time
33. Aflying start to Service Intelligence
Start With A problem worth solving
Collaborate with Subject Matter Experts
Design Before Configuring
34. Sign Up Now – We’re here to help!
Harness the creativity and domain knowledge of your organization
to unlock the value of data and solve an important Business
Service problem through a joint service intelligence workshop
with key stakeholders
Define methods for:
› Proactive service monitoring
› Reduced risk and failures
› Faster issue resolution
› Increased business performance
What is it?
› 1 Day Onsite Workshop
› Tightly linked with value
› Collaborative approach
› Build your own Glass Table
35. 35
Northern Cal Tech Talks!
Monthly WebEx Sessions
• Ted Talk style presentation
• Q&A Chat forum
So what’s next on the agenda?
• March 23rd @ 10AM PST - Building &
Deploying Apps.
• April 20th @ 10AM PST - Top 5 most useful
search commands.
See more at:
http://live.splunk.com/NorCalTechTalks
36. 36
SEPT 26-29, 2016
WALT DISNEY WORLD, ORLANDO
SWAN AND DOLPHIN RESORTS
• 5000+ IT & Business Professionals
• 3 days of technical content
• 165+ sessions
• 80+ Customer Speakers
• 35+ Apps in Splunk Apps Showcase
• 75+ Technology Partners
• 1:1 networking: Ask The Experts and Security
Experts, Birds of a Feather and Chalk Talks
• NEW hands-on labs!
• Expanded show floor, Dashboards Control
Room & Clinic, and MORE!
The 7th Annual Splunk Worldwide Users’ Conference
PLUS Splunk University
• Three days: Sept 24-26, 2016
• Get Splunk Certified for FREE!
• Get CPE credits for CISSP, CAP, SSCP
• Save thousands on Splunk education!
Editor's Notes
With Splunk ITSI, customers get the higher level benefits based on the underlying platform. So, from deep-in-the-weeds solving IT operational use cases with Splunk enterprise, we’re up-leveling the use cases and making IT more relevant to the business.
The can visualize meaningful and contextual data and inter-relationships with dynamic service models, organize and correlate performance indicators for at-a-glance problem analysis, get proactive with early warnings on anomalies, deviations and pre-configured correlated alerts, and simplify workflows.
Bring up live system
So how do you drive Service Intelligence in your own organization?
Providing service-level intelligence requires overcoming the difficulties that legacy methods have imposed upon the industry for years including: handling data sources of variable formats, working with poorly integrated controllers, scalability, bottom up discovery and alignment and lengthy complex deployments . Customers have told us we need a new approach. One that provides out-of-the-box visibility into operational health, scalability and management ease, top/down and in depth real-time visibility; correlation and anomaly detection, adaptive thresholding and new visualizations with quick time-to-deploy and additive value.
ITSI reinvents traditional monitoring and analytics with a data-driven approach to provide service-level intelligence to your services. The solution gives you a centralized, connected view of dynamic IT services.
What are Services? A service is a way of providing value to customers, both internal and external. This can span a broad range of definitions, including: • An application or group of applications • An infrastructure tier • A business service, such as an online marketplace, that could include multiple infrastructure components or entities (such as web servers, databases and load balancers)
What are Entities? Entities are the components that make up your services. An entity could be a server, a switch port, a user or anything else that meets your needs. Services can be bound to specific entities, and will have metrics defined to help people across your organization easily understand the status of key business services.
What are KPIs? Key performance indicators (KPIs) are metrics that are used to evaluate the overall status of a service. KPIs are configured using Splunk searches, so you have the ability to define any KPI that best meets your needs.
What service in the organization is impactful and requires oversight. Think about a service in your organization that supports the business, may maintain any number of SLA’s and can be measured to understand how a service has been performing, how it is performing currently, and how it is projected to perform in the future
Who owns and supports the the service; think the domain experts, the server, network and database admins, the enterprise architects, the business process owners, the executives
Think about the metrics that are important in calculating overall health of a service and their supporting entities.
What components do we need to include in the service; db, middleware
What data is needed to drive the metrics; response time, CPU load, revenue generated, social media posts?
What are the top business services in your enterprise?
How do you measure the customer experience with these services?
Are customers happy with their experience?
How often do customers experience issues with the service?
When issues arise, who gets involved in resolving them?
How do teams work together to resolve issues?
How long is the customer experience affected each time there is an issue?
What are the financial impacts when customers have a bad experience with your services?
What’s the effort required to fully eliminate issues?
Service decomposition is an industry best practice designed to increase the granularity of a service subsequent to it implementation. By separating a solution environment we are able to gain increasing visibility into the constituent parts associated with a service without loosing focus on the composite importance of it’s constituent parts.
Bring up live system
Bring up live system. Discuss how different objects in our design translate to ITSI.
We’re headed to the East Coast!
2 inspired Keynotes – General Session and Security Keynote + Super Sessions with Splunk Leadership in Cloud, IT Ops, Security and Business Analytics!
165+ Breakout sessions addressing all areas and levels of Operational Intelligence – IT, Business Analytics, Mobile, Cloud, IoT, Security…and MORE!
30+ hours of invaluable networking time with industry thought leaders, technologists, and other Splunk Ninjas and Champions waiting to share their business wins with you!
Join the 50%+ of Fortune 100 companies who attended .conf2015 to get hands on with Splunk. You’ll be surrounded by thousands of other like-minded individuals who are ready to share exciting and cutting edge use cases and best practices. You can also deep dive on all things Splunk products together with your favorite Splunkers.
Head back to your company with both practical and inspired new uses for Splunk, ready to unlock the unimaginable power of your data! Arrive in Orlando a Splunk user, leave Orlando a Splunk Ninja!
REGISTRATION OPENS IN MARCH 2016 – STAY TUNED FOR NEWS ON OUR BEST REGISTRATION RATES – COMING SOON!