See Data Fabric Search (DFS) in action! We will walk through real-world customer stories and demonstrate how DFS was used to make effective business decisions. With DFS, organizations can quickly weave together insights across the enterprise to get a deeper and more comprehensive view of customer behavior, organizational threats, or business opportunities. Data Fabric Search excels in speed and scale with use cases primarily falling into two categories: 1) High performance and high cardinality searches processing large volumes of data, and 2) Queries that run operations across multiple deployments. For each customer story, we will demonstrate how DFS is able to run these queries successfully and show how they created powerful business results.

Speaker(s)
Srini Bobba, Principal Product Manager, Splunk
Balaji Rao, Principal Engineer , Splunk
Becky Burwell, Senior Production Engineer, Verizon Media

Slides PDF link - https://conf.splunk.com/files/2019/slides/FN2276.pdf?podcast=1577146201

Product: Splunk Enterprise

Track: Foundations/Platform

Level: Intermediate

How do I get data into Splunk? What is a sourcetype? Does Splunk already know how to handle my data? What app do I use? What if all my data is syslog? If you are asking these questions, then this session is for you. After all, data quality is the foundation of becoming a data-driven organization. This session will walk through onboarding fundamentals. We will discuss the importance of a timestamp and what to do if your data may not have one. We will explain when to use an existing or create a new sourcetype. We will review the process of examining an app from Splunkbase and determining what sourcetype the app expects. By the end of this session you will no longer use syslog as a sourcetype, but as a means of collecting data.

Speaker(s)
Luke Netto, Staff Professional Services Consultant, Splunk

Slides PDF link - https://conf.splunk.com/files/2019/slides/FN1561.pdf?podcast=1577146201

Product: Splunk Enterprise, Splunk Cloud, Splunk Enterprise Security

Track: Foundations/Platform

Level: Good for all skill levels

Have you ever been asked to create a resilient petabyte scale data collection and distribution architecture? Do you need to transform data before it is indexed to remove unnecessary or sensitive data or even enrich the data with a lookup before writing the data to your index? Do you need to detect specific patterns to identify the event line break, event timestamp, or assign the appropriate sourcetype? Do you need to control where to send the data including the specific Splunk Index(es) or even a non-Splunk Sink?If so, we will show you how Splunk’s Data Stream Processor (DSP) can be used to address these requirements to meet both current and future demands. We will walk through the scenarios that customers are dealing with today for these requirements. Finally we will talk about how Universal Forwarder, Heavy Weight Forwarder, and HTTP Event Collector fit into this new data ingestion architecture.

Speaker(s)
Blaine Wastell, Product Management Director, Splunk
Thor Taylor, Director of Product Management, Splunk

Slides PDF link - https://conf.splunk.com/files/2019/slides/FN2062.pdf?podcast=1577146201

Product: Splunk Data Fabric Search and Data Stream Processor

Track: Foundations/Platform

Level: Good for all skill levels

Have you ever thought to yourself, "Man, I love manually inputting new connections and inputs in DB Connect. It makes my life so much more fulfilling!" Yeah, neither have we. We will show you some simple ways to automate this process by utilizing cron schedules and bash scripts. We will focus on the technical side of automating DB Connect using real world examples to show you how we were able to overcome this hurdle, and how you can become the next Ninja Warrior of DB Connect.

Speaker(s)
Ryan Moss, Principal Security Engineer, Verizon

Slides PDF link - https://conf.splunk.com/files/2019/slides/FN1325.pdf?podcast=1577146201

Product: Splunk Enterprise, Splunk Cloud, Splunk Enterprise Security

Track: Foundations/Platform

Level: Intermediate

Wouldn’t it be a great if we had Splunk’s version of Moneyball; an application where everyone comes out ahead by leveraging data to drive effective Splunk enablement and adoption? Splunk’s internal logs have a wealth of information about how Splunk is being used within your organization. Let’s take drinking the “Splunk Champagne” to the next level by applying statistics and machine learning to Splunk’s internal logs! This session will cover segmenting users based on their search profiles - number of searches run, average response times, and recency of searches executed, among other criteria. We’ll use techniques such as clustering to classify users from novice to experts, and use TF-IDF and text analytics techniques to understand commands used in search strings. Enriching this data with completed and planned Splunk Education courses, lunch & learn sessions, and other training activities will enable your users to achieve the Splunk Ninja status they’re looking for!

Speaker(s)
Anand Ladda, Staff Solutions Engineer, Splunk

Slides PDF link - https://conf.splunk.com/files/2019/slides/FN1373.pdf?podcast=1577146201

Product: Splunk Enterprise, Splunk Cloud, Splunk Machine Learning Toolkit, AI/ML

Track: Foundations/Platform

Level: Intermediate

So, you have Splunk in your enterprise but people aren't using it. What do you do? After working with many organizations in financial services, we have heard the response "yes, we use Splunk." However, there is a large gap between the organizations that have a Splunk license and those that are truly using Splunk. What is the key to successful adoption of Splunk as an enterprise tool? In this session hear how FIS has driven an uptake\in Splunk adoption across multiple business lines and external clients. Using Splunk, FIS have supported off-prescription solutions including system parameter inquiry, operator fraud, financial invoicing, client conference data analytics, staff resource allocations, and status reporting.

Speaker(s)
Chris Liddy, Director of Application Development, FIS
Matt Collicoat, Head of Global Payments Innovation and Strategy, FIS

Slides PDF link - https://conf.splunk.com/files/2019/slides/FN1298.pdf?podcast=1577146201

Product: Splunk Enterprise, Splunk Cloud

Track: Foundations/Platform

Level: Good for all skill levels

This session will present a side-by-side, high-level comparison of the features, assumptions, and architectures of a Splunk and ELK deployment.

Speaker(s)
Kate Lawrence-Gupta, Platform Architect, Splunk

Slides PDF link - https://conf.splunk.com/files/2019/slides/FN1455.pdf?podcast=1577146201

Product: Splunk Enterprise

Track: Foundations/Platform

Level: Advanced

For those of us who work in the technology sector and adjacent disciplines, our technical skills are largely seen as our most valuable; the programming languages we know, what we’ve accomplished with those languages and so on. While our technical skills are usually our ticket in, they have little or no impact on how happy we are at work. For example, the correlation between your proficiency in Splunk and your commitment to your team is negligible. As life at work evolves, we see the rising need for an alternative data point: empathy. With the help of sentiment analysis, our talk will highlight how the presence or absence of empathy impacts our working lives. And, better yet, how we can change the course of a team, project, and our own perception by leveraging empathy in a conscious way.

Speaker(s)
Pablo Guillen, Sales Engineer, Splunk
Chantalle Palomo, Project Manager - Industries & Specialization, Splunk

Slides PDF link - https://conf.splunk.com/files/2019/slides/FND1956.pdf?podcast=1577146201

Product: Splunk Enterprise

Track: Foundations/Platform

Level: Good for all skill levels

Is confidence in your ability to disassociate real alerts from noise at an all-time low? Are alerts becoming ineffective because they’re excessive? Many organizations across many industries wrestle with these questions daily. Even so, the prevalence of alert noise persists. Join us to understand how T-Mobile is using Splunk Enterprise with the Splunk Machine Learning Toolkit to identify and narrow the point of origin of service-impacting events across our suite of enterprise applications. Using the DensityFunction algorithm to highlight anomalous behavior, we’re able to focus an investigation on a small subset of the applications which in turn leads to faster resolution of the issues we’re confronted with. 

Speaker(s)
Iman Makaremi, Principal Product Manager – Machine Learning and AI, Splunk
Scott Garcia, MTS - Member Technical Staff, T-Mobile

Slides PDF link - https://conf.splunk.com/files/2019/slides/FN1366.pdf?podcast=1577146201

Product: Splunk Enterprise, Splunk Machine Learning Toolkit, AI/ML

Track: Foundations/Platform

Level: Intermediate

Splunk’s support and promotion of diversity and inclusion led to the establishment of their most recent Employee Resource Group (ERG) for black employees called BEAMS. Black Employees and Mentors, BEAMS, officially launched February 2019, and has provided a platform for underrepresented employees to make an impact within the Splunk community and beyond. Join members of BEAMS for this discussion about changing the narrative for Black employees in the tech industry, and learn how you can thoughtfully provoke the same within your organization. Come learn from the experiences of BEAMS and their open and bold mindset, how BEAMS navigates challenges associated with creating change, promoting equality within a large organization, and going beyond the office walls, and how they support partnerships with youth education organizations. Be prepared to leave with thoughtful anecdotes and an action item list for your organization.

Speaker(s)
Marvin Green, Principal Product Manager, Mobile, Splunk
Antoinette Raines Raines, LMS/CMS Administrator, Splunk

Slides PDF link - https://conf.splunk.com/files/2019/slides/FND2072.pdf?podcast=1577146201

Product: Splunk Enterprise

Track: Foundations/Platform

Level: Good for all skill levels