Splunk [Enterprise] 2019 .conf Videos w/ Slides

Red Hat and Splunk are partners in providing solutions to manage and monitor Kubernetes deployments. This joint RedHat and Splunk session will cover the benefits of Red Hat OpenShift to run your Kubernetes deployments and how Splunk can provide the monitoring capabilities and insights you need to get the most out of your Kubernetes deployment. 

Speaker(s)
Matt Modestino, ITOA Practitioner, Splunk
Mattia Mascia, Senior Consultant, Red Hat

Slides PDF link - https://conf.splunk.com/files/2019/slides/IT2240.pdf?podcast=1577146230

A large volume of known production incidents and end-user issues are still being resolved manually. This becomes worse when it happens in unusual hours and no one is there to fix it. Every minute of downtime is detrimental to business and waking up an engineer at the middle of the night to fix simple known issues is not worthwhile. Our self-healing (Event-Driven Remediation) solution fixes simple and known incidents automatically. For complex alerts, it gets relevant diagnostics and context from the logs. This could massively improve customers' and employees' experience in any organization.

Speaker(s)
Karthick Muruganantham, JPMorgan Chase

Slides PDF link - https://conf.splunk.com/files/2019/slides/IT1186.pdf?podcast=1577146230

Many government agencies and for-profit companies require that you run Splunk on a network disconnected from the outside Internet. This presents many challenges, including how to cross air gaps and one-way transfers, how to operate indexers in an air-gapped environment, and how to automate backwards. This session will cover lessons learned from a variety of air-gapped deployments.

Speaker(s)
Steve Schohn, Staff Sales Engineer, Splunk

Slides PDF link - https://conf.splunk.com/files/2019/slides/FN1190.pdf?podcast=1577146230

Copper River ES, a strategic partner for Splunk public sector, is working with a large federal agency that has restructured their NOC and SOC organizations into a single unified entity as part of operational optimization.  The agency is responsible for protecting IP and other assets totaling $4.3 trillion as part of safeguarding the nation’s food supply chain.   The goal was to enhance the ability to handle problem escalations quickly and improve communications between teams. They are currently ingesting more than 3TB daily across 65 data sources where Splunk is leveraged as an integrated data platform and framework service to act as a nerve center for the combined NOC and SOC teams. Implementation has resulted in dramatically reducing MTTD to an average of less than 30 min compared to previous times of up to 12 hours, MTTR times from 16 hours to often less than 1 with overall outage times having now been reduced by about 68%. From a security perspective, it is used to identify data exfiltration and insider threats, as well as for security operations and compliance.  Increasing visibility into all aspects of system operations and troubleshooting efforts is now supported through a series of custom Splunk App’s, glass tables, reports and alerts with operational guides and training to best leverage the capabilities Splunk has generated.

Speaker(s)
Sandy Voellinger, Copper River Enterprise Services

Slides PDF link - https://conf.splunk.com/files/2019/slides/FN1921.pdf?podcast=1577146230

As the types of devices and applications used in IT organizations increase exponentially, scaling the analytics-driven SOC becomes even more imperative. In this session Splunk Professional Services will help you learn from its past experiences architecting Splunk Enterprise Security environments for scale into the terabytes per day. We will share technical details on improvements to search technology and Data Model Acceleration in Splunk Enterprise that will help you increase performance and decrease total cost of ownership. We will also take a deep dive under-the-hood into Splunk Enterprise Security Frameworks in which you should make special considerations for high volume.  Finally, we'll share important metrics on how to monitor the ongoing health of your Enterprise Security deployment, ensuring you stay on track over time, even in periods of rapid growth.

Speaker(s)
Marquis Montgomery, Principal Security Architect, Splunk

Slides PDF link - https://conf.splunk.com/files/2019/slides/SEC2120.pdf?podcast=1577146230

Your network is speaking to you! Listen to what your applications are saying. Monitoring the metrics already present in your wire data can provide the key to understanding and characterizing their performance. Using tools like Splunk Stream, you can collect dozens of metrics at the IP, TCP, and Application layers. This session will show you how to characterize the performance of your applications and the network, and how to tell which is the source of trouble. We'll also explore how to perform service and asset discovery with wire data as a basis of fact, correlating it with your database "of record" to ensure its accuracy.

Speaker(s)
David Cavuto, Staff Sales Engineer, Splunk

Slides PDF link - https://conf.splunk.com/files/2019/slides/IT1761.pdf?podcast=1577146230

Women are underrepresented across all levels of the technology industry. Find out how these four female leaders advanced their careers to lead the industry. Join us for an in-depth discussion about female diversity and the importance of including women in leadership from those who've made it to the top.

Speaker(s)
Suzanne McGovern, Chief Diversity Officer & Head of Talent, Splunk
Jane Hite-Syed, NGS CIO, National Government Services
Patty Morrison, Splunk Board Member, Splunk
Monika Panpaliya, Senior Director, Digital Common Services, Boeing
Carol Jones, CIO, Sandia National Laboratories

Slides PDF link - https://conf.splunk.com/files/2019/slides/FND1268.pdf?podcast=1577146230

Let's face it, sometimes you don't know what you don't know. With vast amounts of cloud data coming in at cloud-speed, it can be difficult to see through the noise and know what to look for. Are malicious adversaries attempting to comprise the environment? Is my environment under- or over-provisioned? Do I have an insider possibly exfiltrating company data? Are employees actually using the services? What is all of this costing per service, department, business unit? Don't worry, we will help you figure all this out in a prescriptive manner by showcasing these and other use cases. Then, we will show you the "how" by exposing the searches, the data needed, and showing you how to onboard that data. You will walk away with use cases that can be implemented immediately in your own environment.

Speaker(s)
Jason Conger, Solution Architect, Splunk
Ry Lait, Senior Sales Engineer, Splunk

Slides PDF link - https://conf.splunk.com/files/2019/slides/FN1328.pdf?podcast=1577146230

Data is growing exponentially; however IT budgets are not.  Growth in internal use cases and additional data sources can put organizations under intense pressure to manage spiraling costs. The good news is that help is on the way. We will show how to size and configure Splunk SmartStore to yield significant cost savings, for both current and future data growth. In addition, learn how to configure the Splunk deployment for optimal search performance. Spare a few minutes of your time at .conf19 and see it yield big returns for your organization.

Speaker(s)
Bharath Aleti, Director, Product Management, Splunk
Jon Rust, Splunk Architect, ADP
Jane Jokl, Offering Manager, IBM

Slides PDF link - https://conf.splunk.com/files/2019/slides/FN1435.pdf?podcast=1577146230

Dive into the inner workings of SmartStore. In this talk we'll go over how SmartStore works internally with ties to Indexer Clustering, and what decisions the CacheManager makes, e.g., when do we upload/download from the remote storage, etc. We'll also go over the performance numbers that we've seen!

Speaker(s)
Da Xu, Senior Engineering Manager, Splunk
Bill Ern, Splunk Product Owner, Lockheed Martin

Slides PDF link - https://conf.splunk.com/files/2019/slides/FN2168.pdf?podcast=1577146230