How do you control a race car with unlimited horsepower and make sure it doesn’t go off the track? With over 25 unique business affiliates within our enterprise and hundreds of application, engineering, and business teams driving rapid adoption, Cox Automotive’s Splunk Cloud deployment is our very own race car. Come sit in the passenger seat as we recap our ride, which is filled with explosive data ingest rates, unpredictable search slowdowns, out of control data drifts, and rapidly increasing end user requirements. Let our experiences and in-house solutions help you navigate the potholes you will encounter when dealing with the seemingly unstoppable growth rate of an enterprise-level Splunk distributed deployment.

Speaker(s)
John Lim, Systems Engineer, Cox Automotive
Jason Spears, Lead Systems Engineer, Cox Automotive

Slides PDF link - https://conf.splunk.com/files/2019/slides/FN1922.pdf?podcast=1576909575

ITSI provides a platform to turn your never-ending stream of app and infrastructure data into manageable KPIs that you can act on, but how do you manage the number of events ITSI detects? What if you need to extend ITSI with additional capabilities in order to merge your alerts with your support team's response processes? We will turn ITSI up to 11 by adding the concept of "platforms" as a collection of related services, support reoccurring maintenance windows, and generate rich alerts that include information such as which entities are impacted and what the KPI values are. These concepts are combined so that all the problems in your platform generate a single alert with alert text rich enough that that your support teams can respond without opening ITSI, and we will do it all with just SPL.

Speaker(s)
Peter Thomas, Manager, Application Monitoring, Fiserv

Slides PDF link - https://conf.splunk.com/files/2019/slides/IT2184.pdf?podcast=1576909575

Do you remember the time when you had to attend lectures in person? Monash University has extended teaching hours and stopped repeating lectures. To provide flexibility to students and release pressure on finite campus facilities, lectures are now live streamed and are guaranteed to cover 100% of the classroom content. We are using Splunk and IT Service Intelligence (ITSI) to help monitor live streaming of lectures. It is impossible to manually monitor hundreds of teaching spaces in real-time and keep track of lecture schedules, the status of AV devices, microphones, and audio signals. Come and see how we at Monash University use Splunk ITSI glass tables to rule them all! Using ITSI we get real-time insights into service health and entity-level alerting based on ITSI thresholds.

Speaker(s)
Paul Brasier, Service Improvement Manager -Technical Services, Monash University
Ed Messina, IT Security and Risk Manager, Monash University
Rashmi Pokharel, Systems Engineer, Monash University

Slides PDF link - https://conf.splunk.com/files/2019/slides/IT1589.pdf?podcast=1576909575

Splunk/VictorOps allows your data to talk to people, and your people to talk to data, all while improving MTTR/MTTI. You’re already using Splunk today to get cool dashboards, ask questions of your data with search, and trigger important alerts based on data that’s of interest to you. But, just because alerts are important doesn’t mean they are for everyone. And for those who should respond to the alert, it’s important to get the alert into their hands immediately. Transitioning to a modern NOC, or “New Operations Center,” Splunk and VictorOps enable teams to collaboratively solve issues by providing on-call users with actionable alerts that allow for smarter investigation, faster mobilization, and lower mean time to resolution. In this session we’ll take a look under the hood at different Splunk and VictorOps integrations.

Speaker(s)
Kirk Kirk, ITOA Architect , Splunk
Dylan Klausing, Sales Engineer Manager, Splunk

Slides PDF link - https://conf.splunk.com/files/2019/slides/IT1697.pdf?podcast=1576909575

Analytics Workspaces, Application Insights, Azure Monitor, O365 Admin Centers, just a few of the many Microsoft tools required to monitor and interrogate information from Azure & Office 365. Getting the valuable intel and insights from your Azure and Office 365 environments should be easy, and effortless. Throw on your Splunk hoodie and join Ryan as we Splunk our way through all things IT in Azure, Office365 as part of the Microsoft-as-a-Service world! Infrastructure management, real-time billing, SLA monitoring, capacity planning, all quick, all easy, all powerful with Splunk!

Speaker(s)
Ry Lait, Senior Sales Engineer, Splunk

Slides PDF link - https://conf.splunk.com/files/2019/slides/IT1433.pdf?podcast=1576909575

Are you addressing the challenges of gaining visibility into a distributed microservices environment? Is your organization considering using distributed tracing to augment your APM capabilities? Have you heard of OpenTracing and want to learn what capabilities it gives you and how to get started? Come learn about the OpenTracing project and how you can use it with Splunk to get a complete picture of your application environment using logs, metrics, and traces. We'll go from the basics of what the project is to how to get started integrating with Splunk. We'll also review an example of a large telco customer to see how they got started with OpenTracing and how they rolled it out in their application environments.

Speaker(s)
Gary Burgett, Staff Sales Engineer, Splunk
Dave Cornette, Enterprise Monitoring Architect, T-Mobile

Slides PDF link - https://conf.splunk.com/files/2019/slides/IT2095.pdf?podcast=1576909575

Have you ever been positive you had found evil, only to realize it was normal after hours of triage and work? We have all heard and love “KNOW NORMAL FIND EVIL,” but how hard is it to actually know normal? The MITRE ATT&CK Framework gives defenders a better map to “find evil,” but how can this framework be used to “know normal”?Rick will discuss how knowing normal in a world of abnormal is harder than one thinks, and how addressing the actual root cause of evil can improve the technology industry as a whole.

Speaker(s)
Rick McElroy, Principal Security Strategist , Carbon Black

Slides PDF link - https://conf.splunk.com/files/2019/slides/SECS2917.pdf?podcast=1576909575

Splunk and ITSI are already loved by IT Operations and Application Support teams - but can you help your Business Operations teams love them too?Splunk’s unique approach to AIOps and monitoring empowers every organization in your enterprise – from IT to Apps to Business – to utilise the same data for multiple use cases and user communities.  Through this session, you’ll learn how to implement a logging framework that delivers across multiple channels.  Key concepts will include ingesting AWS data, ITSI KPI base searches, entity filtering, and APM techniques.  Join this session to learn how to extend your Splunk usage with business KPIs and perform sales journey analytics to grow your list of stakeholders.

Speaker(s)
Stuart Robertson, Consulting Director, iDelta

Slides PDF link - https://conf.splunk.com/files/2019/slides/BA1868.pdf?podcast=1576909575

Can Splunk help eliminate environmental risks and save the company money at the same time? The Alabama Department of Environmental Management (ADEM) sets standards defining the amount of Volatile Organic Compounds (VOCs) that can be safely released. Honda Manufacturing of Alabama (HMA) must adhere to those standards and track our compliance within the parameters set forth by the ADEM. Failure to comply with these standards will result in potentially damaging the environment and large fines. HMA uses a Regenerative Thermal Oven (RTO) to burn off pollutants from our paint department, which is controlled by an Allen Bradley Programmable Logic Controller (PLC). Using this PLC and the sensors built into the RTO, we collect individual chamber temperatures, fan speeds, exhaust temperatures, motor winding temperatures, motor vibrations, and fan vibrations. Using these readings and the Splunk Machine Learning Toolkit we try to predict if the temperature will be within the set range.

Speaker(s)
Charlie Studdard, Machine Data Analytics, Honda Manufacturing of Alabama

Slides PDF link - https://conf.splunk.com/files/2019/slides/IOT1629.pdf?podcast=1576909575

Do you have complex or obscure data? Do users, without the necessary domain knowledge, struggle to work with this data? Perhaps a Data Model can help bridge the knowledge gap. This session will use valuable (but complex…and even scary) mainframe metrics as a working example of how to get users up and running fast by leveraging the power of a data model. But, these principles are not just for mainframe. They can equally apply to other data types and scenarios. Not all users are well-versed in complex data structures and fields, but some are…so combine Subject Matter Expert (SME) knowledge with this great Splunk facility to make everyone’s life simpler. Deliver real results in a very short time with little overhead or burden on users.

Speaker(s)
Ian Hartley, Technology Architect, Syncsort

Slides PDF link - https://conf.splunk.com/files/2019/slides/IT2579.pdf?podcast=1576909575