"Did we just lose ALL our knowledge objects? Do you know how much time and energy that was?" After a destructive resync, Paychex lost two months of its knowledge object creations/modifications. We learned to be prepared if it were to ever happen again. How? It's easier than you might think, and you don't have to be an admin. You’ll learn how to proactively save your work (dashboards, reports, data models, MLTK experiments, ITSI glass tables, macros, views, etc.) and audit changes when they occur. You will leave the session knowing how to manage the ever-increasing amount of things you create. You'll also have solutions that can save you time and effort from having to recreate lost/modified objects, including how to restore service faster. You also will come away with peace of mind knowing that you can take control of safeguarding and protecting your work, thereby covering your assets when a disaster happens.

Speaker(s)
Dustin Marling, Splunk App Developer, Paychex
Eric Favreau, Service Health Operations Analyst, Paychex

Slides PDF link - https://conf.splunk.com/files/2019/slides/FN1315.pdf?podcast=1577146228

Do you need to support thousands of people every day logging into your organization’s web applications? Customer service is important to Penn State University (PSU), and Splunk ITSI offered the perfect solution for health monitoring and data sharing between executive management and subject matter experts within the WebAccess team. At PSU, WebAccess is the Single Sign-On (SSO) solution supporting over 140,000 students, facility, and staff. ITSI’s Service Analyzer showcases the relationships among various SSO components: Active Directory, CoSign, Duo Two-Factor Authentication (2FA), Lightweight Directory Access Protocol (LDAP), Kerberos, and Shibboleth. Join us and learn how ITSI pioneered the recipe for PSU to isolate root cause slicing deep dives and allowed management to analyze performance on a glass table. Splunk’s ITSI continues to deliver valuable insights from back end systems to front end user interfaces, improving customer service.

Speaker(s)
Christina Miceli, Splunk System Design Engineer, Penn State University
Sandy Leon, Sales Engineer, Splunk

Slides PDF link - https://conf.splunk.com/files/2019/slides/IT1670.pdf?podcast=1577146228

Do you have complex or obscure data? Do users, without the necessary domain knowledge, struggle to work with this data? Perhaps a Data Model can help bridge the knowledge gap. This session will use valuable (but complex…and even scary) mainframe metrics as a working example of how to get users up and running fast by leveraging the power of a data model. But, these principles are not just for mainframe. They can equally apply to other data types and scenarios. Not all users are well-versed in complex data structures and fields, but some are…so combine Subject Matter Expert (SME) knowledge with this great Splunk facility to make everyone’s life simpler. Deliver real results in a very short time with little overhead or burden on users.

Speaker(s)
Ian Hartley, Technology Architect, Syncsort

Slides PDF link - https://conf.splunk.com/files/2019/slides/IT2579.pdf?podcast=1577146228

How do I get data into Splunk? What is a sourcetype? Does Splunk already know how to handle my data? What app do I use? What if all my data is syslog? If you are asking these questions, then this session is for you. After all, data quality is the foundation of becoming a data-driven organization. This session will walk through onboarding fundamentals. We will discuss the importance of a timestamp and what to do if your data may not have one. We will explain when to use an existing or create a new sourcetype. We will review the process of examining an app from Splunkbase and determining what sourcetype the app expects. By the end of this session you will no longer use syslog as a sourcetype, but as a means of collecting data.

Speaker(s)
Luke Netto, Staff Professional Services Consultant, Splunk

Slides PDF link - https://conf.splunk.com/files/2019/slides/FN1561.pdf?podcast=1577146228

Have you ever thought to yourself, "Man, I love manually inputting new connections and inputs in DB Connect. It makes my life so much more fulfilling!" Yeah, neither have we. We will show you some simple ways to automate this process by utilizing cron schedules and bash scripts. We will focus on the technical side of automating DB Connect using real world examples to show you how we were able to overcome this hurdle, and how you can become the next Ninja Warrior of DB Connect.

Speaker(s)
Ryan Moss, Principal Security Engineer, Verizon

Slides PDF link - https://conf.splunk.com/files/2019/slides/FN1325.pdf?podcast=1577146228

Can Splunk help eliminate environmental risks and save the company money at the same time? The Alabama Department of Environmental Management (ADEM) sets standards defining the amount of Volatile Organic Compounds (VOCs) that can be safely released. Honda Manufacturing of Alabama (HMA) must adhere to those standards and track our compliance within the parameters set forth by the ADEM. Failure to comply with these standards will result in potentially damaging the environment and large fines. HMA uses a Regenerative Thermal Oven (RTO) to burn off pollutants from our paint department, which is controlled by an Allen Bradley Programmable Logic Controller (PLC). Using this PLC and the sensors built into the RTO, we collect individual chamber temperatures, fan speeds, exhaust temperatures, motor winding temperatures, motor vibrations, and fan vibrations. Using these readings and the Splunk Machine Learning Toolkit we try to predict if the temperature will be within the set range.

Speaker(s)
Charlie Studdard, Machine Data Analytics, Honda Manufacturing of Alabama

Slides PDF link - https://conf.splunk.com/files/2019/slides/IOT1629.pdf?podcast=1577146228

This session provides detailed guidance on how to use the new dashboard framework into Splunk apps. It first goes over the basic get started tutorial, which helps developers to build a dashboard in just a few minutes. Then it dives deep into the overall architecture, technology stacks, and individual components that can be customized, including layouts, visualizations, data sources, inputs, event handlers. By attending this session, Splunk app developers will be able to integrate dashboards into the apps flexibly and reliably. This session will also walk through the best practices that can help developers to build the optimal dashboards. This session is targeted to both new Splunk app developers and existing Splunk app developers. For people who already know about the existing Splunk technology stack such as Backbone, SimpleXML, SplunkJS, this session will also go through how to migrate to the new framework. As a bonus, this session will also talk about how to export dashboards as beautiful images and PDFs that 100% matches the original ones!

Speaker(s)
Yuxiang Kou, Senior Software Engineer, Splunk
Michael Luo, Principal Software Engineer, Splunk

Slides PDF link - https://conf.splunk.com/files/2019/slides/DEV2165.pdf?podcast=1577146228

Malware infection, lateral movement, data exfiltration, oh my! If you’ve spent any time around the wizarding world of security, you know how much effort goes into preventing dark magic from happening. What if you could use machine learning to stay one step ahead of the adversary? Fasten your seatbelts, because in this talk we will show you how Splunk can utilize machine learning models to take your security detections to the next level. We’ll demonstrate how Splunk's Machine Learning Toolkit can be used to train, validate, and then deploy models to identify anomalies and discover clusters of bad behavior via user-friendly guided workflows—all this while training your models with more data then you’ve ever been able to before. Prepare to leave Las Vegas equipped to incorporate machine learning in your organization’s security detections and jump from reactive to proactive. Mischief managed!

Speaker(s)
Melisa Napoles, Sales Engineer, Splunk
Erika Strano, Sales Engineer, Splunk

Slides PDF link - https://conf.splunk.com/files/2019/slides/SEC2129.pdf?podcast=1577146228

Splunk and ITSI are already loved by IT Operations and Application Support teams - but can you help your Business Operations teams love them too?Splunk’s unique approach to AIOps and monitoring empowers every organization in your enterprise – from IT to Apps to Business – to utilise the same data for multiple use cases and user communities.  Through this session, you’ll learn how to implement a logging framework that delivers across multiple channels.  Key concepts will include ingesting AWS data, ITSI KPI base searches, entity filtering, and APM techniques.  Join this session to learn how to extend your Splunk usage with business KPIs and perform sales journey analytics to grow your list of stakeholders.

Speaker(s)
Stuart Robertson, Consulting Director, iDelta

Slides PDF link - https://conf.splunk.com/files/2019/slides/BA1868.pdf?podcast=1577146228

As organizations look to extend Splunk to new datasets for business process insights, it is crucial to have the right data to work with. However Splunk teams can get stuck demonstrating the value of new solutions without having data available. Some very intelligent approaches to data sampling, data preparation, and query optimization can dramatically accelerate your ability to create value from more data.  In this session, you will learn some of these techniques so you can quickly make a business case and demonstrate the value for Splunk Business Flow in your organization.

Speaker(s)
Martin Senebald, COCUS AG
Dirk Beerbohm, Senior Sales Engineer, Splunk

Slides PDF link - https://conf.splunk.com/files/2019/slides/BA1130.pdf?podcast=1577146228