Nutanix implemented Splunk to improve operations and security. Attend this session to learn how we started small and grew our Splunk footprint, going from 80 GB/day to 700GB-1.8TB/day, to satisfy key IT and business needs. You will also learn how we leveraged Splunk and our own Nutanix infrastructure for a successful data center migration that involved over 2000 clients and 80+TB of data. We’ll share best practices and insights into running virtualized Splunk Enterprise on hyperconverged infrastructure (HCI). You’ll also learn about an app for Phantom, which we’ll demo, we built to provide security operations teams the ability to quickly contain a VM by stopping or suspending it, then safely starting it, plus the other workloads, like firewall, Docker (incl. Splunk Docker), ETL, etc., we run alongside Splunk on the same infrastructure stack. Whether you’re a Splunk user or own the infrastructure that supports your Splunk team, you’ll get details to help you in your job.
Slides PDF link - https://conf.splunk.com/files/2019/slides/FNS2584.pdf?podcast=1577146201