As a service that has many different integration points, Splunkbase needs to ensure as much uptime as possible. This means that when an incident occurs the root cause needs to be identified, resolved, reviewed and communicated to all relevant parties in a timely manner. Fortunately, Splunk>Investigate has served us very well in achieving these objectives. In this session, we’ll demonstrate how the use of the Splunk>Investigate app on Splunk Cloud Platform (SCP) enables teams to access the same data pool with appropriate authorization to collaborate using shared workbooks. This workflow enables teams to quickly reach a solution when an incident occurs.
Slides PDF link - https://conf.splunk.com/files/2019/slides/DEV1440.pdf?podcast=1577146224