Aurelio My cellphone: 202-580-3052 Alex Mikula Event Solutions Consultant | FedEx Hospitality and Convention Operations The Marriott at Wardman Park | 2660 Woodley Rd. NW | Washington D.C. 20008 202-748-6060 Cell | alex.mikula@fedex.com Velasco, Laurie <Laurie.A.Velasco@marriott.com>

Joshua Steffen, our Project Manager on the call, Josh, Cell: 202-580-3262 Aurelio Arango Newton <aarango@PSAV.COM> ■ office: 202.600.2278 ■ fax: 866.312.5410 Jason Piasecki Event Manager l Wardman Park Marriott 2660 Woodley Rd NW, Washington, DC 20008 O: 202.328.2938 cell:202-328-2938

Wireless Information ID: Marriottt_Conference Password: splunk2015 9:00AM: Main Session in Ballroom Welcome and Agenda Overview with Pike Reynolds, Director of Sales Splunk Overview with Shay Mowlem, VP Product Marketing and Nate McKervey, Manager, Technical Marketing 10:15AM: 15 Minute Break in Delaware 10:30AM: Customer Speaker Sessions in Ballroom

Bob Nicholson, Office of Information Security, Social Security Administration

Gary Mikula, Financial Industry Regulatory Authority (FINRA)

Firoze Lafeer, Head of Tech Fellows Program and Arun Natarajan, Senior Manager, IT Capital One 12:00PM: Lunch in Salon 1 1:15PM: Getting Started with Splunk Enterprise, Andrew D’Auria in Salon 2 What is Splunk? At the end of this session you’ll have a high-level understanding of the pieces that make up the Splunk Platform, how it works, and how it fits in the landscape of Big Data. You’ll see practical examples that differentiate Splunk while demonstrating how to gain quick time to value. Splunk Ninjas: New Features, Pivot, and Search Dojo, Matt Gildenhorn in Maryland Besides seeing the newest features in Splunk Enterprise and learning the best practices for data models and pivot, we will show you how to use a handful of search commands that will solve most search needs. Learn these well and become a ninja. Intro to Splunk for Security, Enoch Long in Salon 3 Learn how the Splunk App for Enterprise Security helps you deliver faster investigations, detect threats and disrupt your attackers before they disrupt your business. Splunk for Security Experts, Ryan Kovar in Virginia Join our own Security Expert and learn how to use Splunk Enterprise in incident investigations. We'll show how to use Splunk to disrupt an adversary's Kill Chain by finding the Actions on Intent, Exploitation Methods, and Reconnaissance Tactics . Data investigated will include threat list intelligence feeds, endpoint activity logs, e-mail logs, and web access logs. This session is a must for all security experts!

2:30PM Splunk for Cloud Kam Amir and Mike Nakamura in Salon 3 If you are looking to gain all the benefits of Splunk software with all the benefits of a cloud-service, this is a must-attend session. Join our cloud expert and learn about Splunk’s cloud strategy, cloud product portfolio and new capabilities in Splunk Cloud. You will learn why Splunk Cloud is the industry-leading SaaS platform for operational intelligence, offering a 100% Uptime SLA, 5GB-5TB/day scalability, reliable performance and up to 10x data bursting flexibility. You will also learn how Splunk Cloud offers the full feature set of Splunk Enterprise, access to 500+ apps and single pane-of-glass visibility across Splunk Cloud and Splunk Enterprise deployments. Taking Splunk to the Next Level – Technical Mike Wilson in Salon 2 Are you outgrowing your initial Splunk deployment? Is Splunk becoming mission critical and you need to make sure it's Enterprise ready? Attend this session led by Splunk experts to learn about taking your Splunk deployment to the next level. Learn about Splunk high availability architectures with Splunk Search Head Clustering and Index Replication. Additionally, learn how to manage your deployment with Splunk’s operational and management controls to manage Splunk capacity and end user experience. New Splunk Management Solutions Update: Splunk MINT and Splunk App for Stream, Stela Udovicic in Virginia Join us to learn what is new in Splunk App for Stream and how it can help you utilize wire data analytics to speed up network forensics, efficiently analyze security threats in real-time and proactively combat applications and operational issues across your cloud and on-premises infrastructures. Additionally, you will learn about Splunk MINT, which allows you to gain operational intelligence on the availability, performance, and usage of your mobile apps. You’ll learn how to instrument your mobile apps for operational insight, and how you can build the dashboards, alerts, and searches you need to gain real-time insight on your mobile apps. Cisco and Splunk: Under the Hood of Cisco IT in Maryland 'Always on' is the new normal. Learn how Cisco IT uses Splunk software to gain deep operational visibility into applications, accelerate problem resolution and how the combination of Cisco UCS and Splunk software is driving better business outcomes. The session will also dig into considerations for future-proofing your infrastructure as analytics become pervasive across the organization. 3:30PM: Happy Hour in Delaware Capital One User Group in Wilson C, Second Floor

Tuesday, 4.7.15, Time? Place? SponsorBoxes , Open and Organize Signage Placement Validar Reg Set Up and Training Wednesday, 4.8.15 6:30 AM: Sponsor Meet And Greet (Based on NYC, we need at least two for this) 7:00 AM Traffic Control for Breakfasts 7:00 AM Put signage out SplunkLive! Signage for morning program 7:00 AM Put tablecloth and signage out for SplunkAnswers Table 7:15 AM Traffic Control for Registration, Sponsor Pavilion and Breakast Rooms 8:30 AM: Open General Session Doors 8:45AM: Direct customers to main stage from breakfasts, help corral people into mainstage 10:00AM: Direct attendees to break room area, open doors for break, direct traffic to break area, rest rooms, etc. 10:15AM: Corral people back to main stage 12:00 Put out signage for break out sessions

12:00pm: Lunch, Need traffic control ** T shirts???? 1:15 – 2:15: Break Out Sessions/Need People to Scan 2:30 -3:30: Break Out Sessions/Need People to Scan 3:30 – 4:30: Happy Hour Pack up and Ship, How many????? We use Macs (mostly) 16:9 Rehearsal on 4/7/15 – earliest time? Run sound and visual for .conf video SB will provide on USB Nate & Shay need to test set up (see below) Splunk show laptop has powerpoint w/ppt slides Shay’s laptop for confidence monitor that shows notes Third Laptop – Nate’s laptop, he uses at podium and podium microphone ** NEED SWITCHER*** General Session AV Set Up: .conf video plays on PSAV laptop Confidence Monitor With Notes Displaying Hi res projectors (1080p) Direct HDMI connections. NO VGA, not even a conversion Confidence monitors with notes from slides Advancer Splunk Laptop and Shay’s laptop sit at AV Table? *Jason we need 6 bottles of water in podium* Break Out Sessions Wireless lavaliers for speakers Advancers Projectors Screens Hard Wired Internet (NOT WIRELESS) Do we need a password? Confidence montiors - no Wilson A and B Event Flow 4/8/15 Wilson A – Security Breakfast Wilson B – Taking Splunk to the Next Level – Management\ 2 full private breakfast roundtables at SplunkLive DC. 7:45-8:45 am/Attendees need to pick up badge first from Splunk Reg A+ B need full breakfasts. Projector and Screen no mic Start time is 745 set up by 730 End at 900 am, clean and just put fresh linens and water please. WE might use these for Ad Hoc Meetings. What is max capacity for theater, crescents, rounds?

General Session Event Flow 4/8/15 6:45 AM: General Session is set up and ready to go/Lock Doors til 845 AM 7:30AM: Stephanie meets w/customers, reviews their slides 8:30AM: Mic up Pike and Shay 9:00AM: General Session Begins, SB queues AV to play video RECORD Agenda Review with Pike Reynolds, Splunk - 5 slides Splunk Overview with Shay Mowlem, Splunk - Splunk Demos (3) with Nate McKervey, Splunk (goes up to podium 3 times during Shay’s preso) 10:00 AM to 10:15AM: BREAK Nate is done Shay is done, surrenders MIC Pike talks til 1200 noon Customers go to AV table and get mic’d up, remove badge and cell phone 10:15AM Customer Speakers (3) 3 Splunk Staffers will walk around w/Hand Mics for Q+A In speaking order: Bob Nicholson Office of Information Security, Social Security Administration (5 min Q+A) Gary Mikula Financial Industry Regulatory Authority (FINRA) (5 min Q+A) Firoze Lafeer, Capital One (5 min Q+A) 12:00pm: Lunch 1:15 – 3:30: Break Out Sessions (8) 3:30 – 4:30: Happy Hour **Sbies@splunk.com or m:617.633,7110 Hi All, We’ve reserved lunch tables for your customers. Lunch will be in Salon 1. The reserved tables are located in Salon 1 – either Balcony A or Balcony B. The tables will have tent cards with your name/or agency. As your customers walk up the stairs in Salon 1, someone will be there to assist them and direct them to where they should go (either to Balcony A or B) Balcony A Andy Hershey (2) Adrian Perry (2) Derek Tomlinson (1) Pat Boland (1)

Chris Hill (2) HHS – CMS (1) Balcony B Katy Mann/Pam Sotnick (2) Justice Dept. (1) State Dept. (1) Continuous Diagnostics & Mitigation (2) Homeland Security (2) Tom Beck (1) Allison Marsteller-Sortzi (1) Jon Scorzato (1) Signage

We shipped everything on the order as well as the 6 additional posters below. If you need any others let us know and we'll get them out for an early am delivery.

With swag order: 1 podium sign 3 SplunkLive! 1 Registration 1 Lunch 1 Splunk Cloud 1 Getting Started 1 Splunk for Security 1 Splunk Ninjas 1 Next level - Technical Printed & shipped in addition: