This session will cover how to overcome any missing insights in services and processes in Splunk Cloud. You'll learn how to develop alerts and dashboards to show performance and infrastructure health, and an API framework to retrieve data from the cloud infrastructure. We also will show you how to automate retrieval of all entry points to the Splunk on-premises infrastructure, and monitor connections to the intermediate forwarders, deployment servers, HEC and DBX servers, and syslog. In addition, we will address the lack of standardization principles for your on-premises Splunk Infrastructure, how to create gold standard alerts and dashboards, and how to create scripted inputs to gather system information. Finally, we will show you how to address the lack of a centralized view for managing your Splunk deployment server infrastructure, and how to automate the retrieval of deployment clients, server classes, and TA’s from deployment servers and feed the output to Splunk Cloud.
Speaker(s)
Ray Mateo, Solutions Engineer, Liberty Mutual
Michael Anderson, Senior Software Engineer, Liberty IT
Slides PDF link - https://conf.splunk.com/files/2019/slides/FN1995.pdf?podcast=1577146230