Webinar: Improve Splunk Analytics and Automate Processes with SnapLogic

Preview:

DESCRIPTION

Last week SnapLogic sponsored partner event Splunk Worldwide Users' Conference in Las Vegas. The theme of the conference was "Your Data, No Limits." In keeping with this theme, SnapLogic helps Splunk customers access more comprehensive analytics by integrating as much data as possible from as many sources as possible, and by streamlining the business process of loading data in Splunk, detecting problems, and facilitating actions that result in a prompt resolution. To learn more, visit: http://www.snaplogic.com/.

Citation preview

Copyright © 2013 Splunk Inc.

Craig Stewart, Field Technical Services, SnapLogicRich Dill, Technical Architect, SnapLogic

Higher-order Benefits from Splunk with Data and Process Automation

2

Agenda

• Introducing SnapLogicThe Hybrid Data WorldSnapLogic – Solving the Log Data Mystery with Data IntegrationDemonstrationCustomer case studyQ&A

IT Transformation

BYOD SaaS CloudInfrastructure

Traditional desktop support

Packaged application support

Infrastructure support

State of Integration Today | New Requirements

• Hybrid Reality− Data/apps on-premise and in cloud− Must connect and scale securely

• More Fragmentation− 100s of apps & distributed endpoints− Versioning headaches

• Varied Data Type− Structured, Unstructured, Semi..− Big Data, Social/mobile

Connecting Internet of Things

5

SnapLogic Elastic Integration Hybrid Architecture• Execute integration

pipelines (workflows) in cloud, or on-premise or both

Secure Operations• Securely orchestrate

business processes that traverse cloud & ground assets

6

The SnapLogic Value PropositionConnect to anything to anything - anywhere: On-premise, cloud; batch to low-latency

Extensible: Open SDK and REST API

Ease of deployment & management: 3X-5X faster than hand-coding and legacy integration

Agile - Time to value: Enable “citizen developer”: 3X-6X less development time

ROI: Subscription licensing, less time to value 2X-6X improvement ROI

8

Higher order benefits for Splunk customers

The value of individual items of data is limited, the value comes when it can be related and intelligence derived

E.g. an intrusion detected on an IP address is inconvenient (but interesting), the value of that is significantly higher if it can be supplemented with user, device and location

9

Supplementing Machine Dataaka: Solving the Log Data Mystery

Machine data clues need context to deliver Insight!

10

Integrated Knowledge Flow

Machine Data

Data Context

Knowledge

System Logs Device Logs Monitoring Logs

UsersExternal Internal

11

Integrated Insights Solving the Log Data Mystery

• Machine Data provides clues to possible problems

• Hi-Level decisions need machine data correlated with reference and master data

• Today these sources live in cloud and on-prem systems

• Insight and knowledge come as a result of integration

12

SnapLogic Demonstration

Customer Case Study | Fortune 10 Company

IT Risk globally manages security information for assets (computers, mobile devices etc.)

Business Problems• IT Risk manages 400,000 PC’s and 1,000’s of edge devices around the

globe• Equipment status log files updated as often as every minute• Risk management processes evolve rapidly• Needed to rapidly integrate multiple data sources into a multi-process risk assessment and management process• Endpoints included

• Splunk for log file ingestion and alert creation• ServiceNow for incident creation/management/CMDB• Airwatch for mobile asset management

Alternative Approaches• Custom coding by IT personnel• Individual scripts/custom code from each vendor

Case Study Architecture

Splunk Indexers

Splunk Cloud

Secure Searching

Splunk ForwardersSearch Head

Data Integration

Log Files

TroubleTicketing/CMDB andEnrichment

CommercialCloud

Splunk Forwarders

Customer Case Study| Business OutcomesEstimated SnapLogic at 4x more productive than custom coding

• SnapLogic used for near real-time batch and bi-directional updates• Agile delivery to accelerate time-to-value• Standardized architecture for master data connectivity• Reduced operational maintenance and increased reliability and security through

central management of integrations• Elastic scaling for future volume and velocityFuture:• Customer is looking to extend integration processes into separate cloud and on-

prem for increased agility, manageability• Target applications include Qualys, Veracode, Mozy, ScanSafe, Zscaler and SkyHigh

16

Q & A

Craig Stewart, Technical Services

Rich Dill, Technical Architect

www.snaplogic.com

THANK YOU

Recommended