Splunk Forum Frankfurt - 15th Nov 2017 - AI Ops

30
© 2017 SPLUNK INC. © 2017 SPLUNK INC. NOVEMBER 15 | FRANKFURT

Transcript of Splunk Forum Frankfurt - 15th Nov 2017 - AI Ops

Page 1: Splunk Forum Frankfurt - 15th Nov 2017 - AI Ops

© 2017 SPLUNK INC.© 2017 SPLUNK INC.

NOVEMBER 15 | FRANKFURT

Page 2: Splunk Forum Frankfurt - 15th Nov 2017 - AI Ops

© 2017 SPLUNK INC.

Der Mehrwert aus Daten-getriebener Service Intelligence (AI Ops)

NOVEMBER 15 | FRANKFURT

Peter Swart | Business Value Consultant

René Siekermann | IT Markets Specialist EMEA

Page 3: Splunk Forum Frankfurt - 15th Nov 2017 - AI Ops

© 2017 SPLUNK INC.

During the course of this presentation, we may make forward-looking statements regarding future events or

the expected performance of the company. We caution you that such statements reflect our current

expectations and estimates based on factors currently known to us and that actual events or results could

differ materially. For important factors that may cause actual results to differ from those contained in our

forward-looking statements, please review our filings with the SEC.

The forward-looking statements made in this presentation are being made as of the time and date of its live

presentation. If reviewed after its live presentation, this presentation may not contain current or accurate

information. We do not assume any obligation to update any forward looking statements we may make. In

addition, any information about our roadmap outlines our general product direction and is subject to change

at any time without notice. It is for informational purposes only and shall not be incorporated into any contract

or other commitment. Splunk undertakes no obligation either to develop the features or functionality

described or to include any such feature or functionality in a future release.

Splunk, Splunk>, Listen to Your Data, The Engine for Machine Data, Splunk Cloud, Splunk Light and SPL are trademarks and registered trademarks of Splunk Inc. in

the United States and other countries. All other brand names, product names, or trademarks belong to their respective owners. © 2017 Splunk Inc. All rights reserved.

Forward-Looking Statements

THIS SLIDE IS REQUIRED FOR ALL 3 PARTY PRESENTATIONS.

Page 4: Splunk Forum Frankfurt - 15th Nov 2017 - AI Ops

© 2017 SPLUNK INC.

Challenges Facing Today’s IT

High cost of IT Operation

Inefficient use of resources

Lower customer satisfaction

Lost revenue

$$

$

Page 5: Splunk Forum Frankfurt - 15th Nov 2017 - AI Ops

© 2017 SPLUNK INC.

Desired Outcomes for IT Operations

Reduce tool complexity and

costs

Become more proactive

Use resources efficiently

Optimize the consumer experience

Page 6: Splunk Forum Frankfurt - 15th Nov 2017 - AI Ops

© 2017 SPLUNK INC.

Integration Approach to IT Management

Network Infr

astr

uctu

re

Packet, Payload, Traffic,

Utilization, Perf

Storage

Utilization, Capacity,

Performance

Server

Performance, Usage,

Dependency

Ap

p &

Serv

ice

User Experience

Usage, Response Time,

Failed Interactions

Byte Code Instrumentation

Usage, Experience,

Performance, Quality

Business Performance

Corporate Data, Intake,

Output, Throughput

Challenges

▶ Many disparate components

▶ Brittle integrations

▶ Data is summarized and lost

▶ Longer root-cause identification

▶ End-to-end view challenging

▶ Labor-intensive to manage

▶ Not agile enough for digital businessEVENTS

Event Layer

Event Management

METRICS

Service Layer

BSM/Dashboard

Tools

Page 7: Splunk Forum Frankfurt - 15th Nov 2017 - AI Ops

© 2017 SPLUNK INC.

Collecting and analysing this data has never been so easy

Network

Infr

astr

uctu

re L

ayer

Packet, Payload, Traffic,

Utilization, Perf

Storage

Utilization, Capacity,

Performance

Server

Performance, Usage,

Dependency

Ap

plica

tio

n L

ayer

User Experience

Usage, Response Time,

Failed Interactions

Byte Code Instrumentation

Usage, Experience,

Performance, Quality

Business Performance

Corporate Data, Intake,

Output, Throughput

Splunk Approach:

▶ Single repository for ALL data

▶ Data in original raw format

▶ Machine learning

▶ Simplified architecture

▶ Fewer resources to manage

▶ Collaborative approach

MACHINE

DATA

Page 8: Splunk Forum Frankfurt - 15th Nov 2017 - AI Ops

© 2017 SPLUNK INC.

Worldwide IT Operations Analytics SoftwareMarket, 2016

Market-share

leader for the 3rd

consecutive

year

Page 9: Splunk Forum Frankfurt - 15th Nov 2017 - AI Ops

© 2017 SPLUNK INC.

AIOpsCommon technologies and data sources in use today

Page 10: Splunk Forum Frankfurt - 15th Nov 2017 - AI Ops

© 2017 SPLUNK INC.

10

ML and Advanced Analytics

Machine Learning SPL commands – fit, apply, summary, sample…

Machine Learning Toolkit– Guided Machine Learning modeling app

Access to full Python Data Science Library

25+ algorithms supported out of the box

ML built into the platform and into our Premium Solutions

Behavior baselining & modeling

Anomaly Detection (30+ models)

Advanced threat detection

Uni-variate and Multi-variate Anomaly

Detection

Adaptive Thresholding

Built in service/KPI management

Partner AppsScianta ML Platform

Uses ML Toolkit for Signal Analysis

Page 11: Splunk Forum Frankfurt - 15th Nov 2017 - AI Ops

© 2017 SPLUNK INC.

Further investments in ML

ITOA Security

Page 12: Splunk Forum Frankfurt - 15th Nov 2017 - AI Ops

© 2017 SPLUNK INC.

Artificial Intelligence for IT Operations

Powered by machine learning and analytics for real-time service insights,

simplified operations and root-cause isolation

Page 13: Splunk Forum Frankfurt - 15th Nov 2017 - AI Ops

© 2017 SPLUNK INC.

What Is Service Intelligence?

Enabling a business-aware IT

Measuring and reporting on indicators that matter

Unlocking operational efficiencies

Collaborating across silos to improve service operations

Data-based decision making

Solving problems and anticipating pitfalls with

sophisticated analytics and powerful insights

Page 14: Splunk Forum Frankfurt - 15th Nov 2017 - AI Ops

© 2017 SPLUNK INC.© 2017 SPLUNK INC.

Splunk ITSI: Multiple Use Cases, One Solution

SERVICE INSIGHTS EVENT ANALYTICS

Service health scores

calculated from KPIs

Baseline KPI trends based

on operational patterns and

identify abnormal conditions

Organized view of KPIs

and trends for fast triage

and analysis

Deep insights into

technology domains to

speed investigation

Machine learning to reduce

noise and find alerts on root

causes of issues

Initiate incident response

and remediation actions

Service insights on events to

prioritize triage and

investigation

Sophisticated analytics and

incident workflow to

automate managing events

Page 15: Splunk Forum Frankfurt - 15th Nov 2017 - AI Ops

© 2017 SPLUNK INC.

Demo

Page 16: Splunk Forum Frankfurt - 15th Nov 2017 - AI Ops

© 2017 SPLUNK INC.

What we just saw…

Adaptive Thresholds Anomaly Detection Event Correlation

Manage and maintain KPI thresholds by dynamically adapting to changing operational patterns

Catch issues that thresholds can’t—baseline normal operations and alert on anomalous conditions

Reduce event clutter, false positives and rules maintenance by auto-grouping related events

Page 17: Splunk Forum Frankfurt - 15th Nov 2017 - AI Ops

© 2017 SPLUNK INC.

▶ Modelling on ITSI Services and KPIs

▶ Predictive Analytics for future Service Health Scores

▶ Proactive alerting integrated into the ITSI notable events framework

▶ Identify leading indicators for possible service degradation

Predict Service Health Score andPrevent Outages with Machine Learning

https://www.splunk.com/blog/2017/08/28/itsi-and-sophisticated-machine-learning.html

Page 18: Splunk Forum Frankfurt - 15th Nov 2017 - AI Ops

© 2017 SPLUNK INC.

How Does This All Translate Into Tangible Benefits And Value For

Your Organization?

Splunk> Business Value Consulting Team

Peter Swart, Director EMEA

Page 19: Splunk Forum Frankfurt - 15th Nov 2017 - AI Ops

© 2017 SPLUNK INC.

“There is a light and it never goes out”

The Smiths, 1986

Page 20: Splunk Forum Frankfurt - 15th Nov 2017 - AI Ops

© 2017 SPLUNK INC.

Operations

Monitoring

Operations

Bridge

Event

Management

Incident

Management

OLA’s SLA’s

Customer

Service Level

Management

Problem

Management

Change

Management

Capacity

Management

Design +

Plan +

Improve

Services

Page 21: Splunk Forum Frankfurt - 15th Nov 2017 - AI Ops

© 2017 SPLUNK INC.

Operations

Monitoring

Operations

Bridge

Event

Management

Incident

Management

OLA’s SLA’s

Customer

Service Level

Management

Problem

Management

Change

Management

Capacity

Management

Design +

Plan +

Improve

Services

Total Effort

Page 22: Splunk Forum Frankfurt - 15th Nov 2017 - AI Ops

© 2017 SPLUNK INC.

Operations

Monitoring

Operations

Bridge

Event

Management

Incident

Management

OLA’s SLA’s

Customer

Service Level

Management

Problem

Management

Change

Management

Capacity

Management

Design +

Plan +

Improve

Services

1. # Incidents

2. MTTR Negative Business Impact

3. Total Effort

Page 23: Splunk Forum Frankfurt - 15th Nov 2017 - AI Ops

© 2017 SPLUNK INC.

Operations

Monitoring

Operations

Bridge

Event

Management

Incident

Management

OLA’s SLA’s

Customer

Service Level

Management

Problem

Management

Change

Management

Capacity

Management

Design +

Plan +

Improve

Services

1. # Problems

2. Total Effort

3. # Incidents

Page 24: Splunk Forum Frankfurt - 15th Nov 2017 - AI Ops

© 2017 SPLUNK INC.

Operations

Monitoring

Operations

Bridge

Event

Management

Incident

Management

OLA’s SLA’s

Customer

Service Level

Management

Problem

Management

Change

Management

Capacity

Management

Design +

Plan +

Improve

Services

Page 25: Splunk Forum Frankfurt - 15th Nov 2017 - AI Ops

© 2017 SPLUNK INC.

Operations

Monitoring

Operations

Bridge

Event

Management

Incident

Management

Customer

Service Level

Management

Problem

Management

Capacity

Management

Design +

Plan +

Improve

Services

1. Incident Analysis / Deep-dive

2. Compliance with SLA’s

3. Customer Satisfaction / Contract renewals

4. Capacity Optimization

5. Continuous Service Improvement

Page 26: Splunk Forum Frankfurt - 15th Nov 2017 - AI Ops

© 2017 SPLUNK INC.

Operations

Monitoring

Operations

Bridge

Event

Management

Incident

Management

Customer

Service Level

Management

Problem

Management

Capacity

Management

Design +

Plan +

Improve

Services

1. IT Ops AI

2. Business AI

Business

Analytics

IoT

Industry 4.0

Page 27: Splunk Forum Frankfurt - 15th Nov 2017 - AI Ops

© 2017 SPLUNK INC.

Machine

Learning on

Events at

the World

Bank

Page 28: Splunk Forum Frankfurt - 15th Nov 2017 - AI Ops

© 2017 SPLUNK INC.

Thanks to the integrated machine learning in Splunk ITSI, we now have a reduced number of events to process and the streamlined event analytics framework allows us to process events eight minutes more quicklyLaurent Amouroux,

Technical Director

Econocom Infrastructure Management Services

15% increased

SLA Performance

60% reduction

In number of events

10x reduction in number of system

performance events through

machine learning

Page 29: Splunk Forum Frankfurt - 15th Nov 2017 - AI Ops

© 2017 SPLUNK INC.

This aligns directly with a company’s top priorities

Drive revenue

95% passengers through

security >5 mins

> spending more time

shopping

High inventory waste and

food going stale

> immediate sales

insight

Lower cost

Hard to get threat

insights

> real-time security

response

Reduce

risk

Negative impact of outage

at peak times

> improved business

& customer insight

Customer experience

Page 30: Splunk Forum Frankfurt - 15th Nov 2017 - AI Ops

© 2017 SPLUNK INC.© 2017 SPLUNK INC.

THANK YOU.