Delivering Integrated Capital

Transcription

1 Copyright 2014 Splunk Inc. Delivering Integrated Capital Thiru Venkat Sr. Enterprise Architect Tim March Middleware EA Leader

2 Disclaimer During the course of this presentaion, we may make forward- looking statements regarding future events or the expected performance of the company. We cauion you that such statements reflect our current expectaions and esimates based on factors currently known to us and that actual events or results could differ materially. For important factors that may cause actual results to differ from those contained in our forward- looking statements, please review our filings with the SEC. The forward- looking statements made in the this presentaion are being made as of the Ime and date of its live presentaion. If reviewed aser its live presentaion, this presentaion may not contain current or accurate informaion. We do not assume any obligaion to update any forward- looking statements we may make. In addiion, any informaion about our roadmap outlines our general product direcion and is subject to change at any Ime without noice. It is for informaional purposes only, and shall not be incorporated into any contract or other commitment. Splunk undertakes no obligaion either to develop the features or funcionality described or to include any such feature or funcionality in a future release. 2

3 Agenda! Business Case! Private Cloud! Architecture! Business AcIvity Monitoring! Centralized Log Monitoring! Dashboard Samples 3

4 Business Case

5 What If?? Detec%ng problems in this system was as easy as Detec%ng problems in this system?

6 20/20 Data Hindsight & Foresight Outage DiagnosIcs PredicIve Data Understand IT system problem areas Use data to predict & Prevent outages Timeline Par%al outage 11/1/13 9:30~ AM outage reported to helpdesk 10:10 AM IT- side outage call opened 12:55 PM Root Cause IdenIfied 1:15 PM Issue resolved 2.5 hours to diagnose issue 20 minutes to resolve. Improved Capacity Planning Load Balancing Understand & Predict peak volume for risk & ops Staff accordingly, hourly, daily, monthly... Reduced Down- Ime Planning & PrevenIon

7 Voice of the Customer A lot of 'me goes into understanding the true nature of the error and which system is actually throwing the error. There are always asks on the IT Outage Management calls for 'What is the exact error message? and we wait for someone to login and tell us what it is. 20/20 simply eliminates this problem. Re: Access to Error & Log entries via Splunk Tradi'onally a data issue or an xml issue would be reported by a business user before Service Delivery is even aware of it. The idea of knowing when an issue occurs without having to wait for a customer to report it - thereby understanding your true Failed Customer Interac'ons would be key to the next level of value add. Re: Failed Customer Interac'ons Direct visibility to the status of a specific transac'on Direct visibility to which system it currently 'resides in' or 'is stuck at' A huge plus in reducing BTTR around 'Customer Cri'cal' 'ckets Re: Transac'on level monitoring & error messages Dashboard visibility to the health of various applica'ons at the transac'onal level RE: Service Delivery

8 Rallying Today s World Business team submits a ServiceNow Request a transac'on has not come through the system in the last 30 minutes Service Delivery opens an IT Outage Management and begins to collect various system owners onto a Bridge to troubleshoot problem Troubleshoo%ng Each team uses the various technologies at their disposal to trace which system is failing. This can someimes take up to 30 minutes or longer At which point business has now been stopped for approximately 1 hr Enlightenment Problem system has been idenified and appropriate team is taking correcive acion to address the issue

9 What are ConInuous Insights?! The What Monitoring a single transacion across disparate systems! The Why Monitor, measure, and minimize Failed Customer InteracIons! The How Business AcIvity Monitoring (Top- Down) Centralized Logging Indexing & AnalyIcs (Bolom- Up)

10 Why Splunk?! Proven operaional intelligence and log monitoring soluion with tons of features & benefits! Splunk is in GE for more than 5 years primarily used for Security and IT Risk monitoring! As a corporate policy, Splunk is installed on all our servers through the hardware provisioning process! Dedicated IT Risk team manages the enire Splunk infrastructure! ApplicaIon monitoring gets much easier with this, just add to the forwarder configuraion and develop dashboards 10

11 GE Capital s Private Cloud

12 GE Capital Private Cloud IPAS Fewer moving parts for speed & stability We re not in the IT integraion business Challenge: People & processes, not tech Install Physical Servers Install OS Security Middleware Palerns Automated Deployment ApplicaIons Install App Servers Configure network Management Configure security VirtualizaIon Debug! Storage Networking Servers

13 Speed, Consistency & Repeatability with Palerns Dev, QA, & Prod provisioned in minutes PaGern Library Developer Dev/Test Cloud Group Dev PaGern QA Prod PaGern Enterprise Architecture Produc%on Cloud Group QA Prod PaGern

14 Private Cloud Architecture (MC-1) WEB DMgr ODR DMgr VM APP WAS CELL IHS 1 ODR 1 APP 1 APP 1 Static Cluster 1 F5 VM APP 2 APP 2 Static Cluster 2 IHS 2 ODR 2 VM APP n APP n Static Cluster N Splunk Splunk VM Node 1 VM Node 2 Plugin-cfg.xml (cached) NFS Share Plugin-cfg.xml Plugin gen d from ODR Cluster and copied to NFS Share for WEB Tier read Provisioning Patterns: GECA-MC1-STATIC-ODR-V1.0 GECA-MC1-STATIC-APP-V1.0 Health Policies: GCPercentage Memory Leak Excessive Memory Usage Max CPU Server Age, Notofication

15 ConInuous Insights Architecture

16 CI Architecture Touchless

17 IT ApplicaIons Monitoring Web Applica%on External Services and Apps Database Events Events Events Events Centralized Log Indexing and Analy%cs Search & Analysis Predictions Action items FCI Dashboard Log events are captured across IT systems coninuously to provide business and IT criical perspecives and dashboards

18 GE Capital Splunk Architecture Indexers Search Head IBM Pure Forwarders Deployment Server Browser

19 Business AcIvity Monitoring

20 Business AcIvity Monitoring ApplicaIon components are drawn in user understandable graphical diagram Business Monitor shows each step of the transacion in- progress

21 Outage DetecIon & Response Service Delivery Ac%on: A component or sub- system failure is highlighted in red so that service delivery can engage the right team to get the outage resolved

22 Centralized Log Monitoring

23 IT & Business Use Cases Current Scope

24 ApplicaIon Development! Real- Ime access to logs! Used by both developers and testers! Complete transacion traceability from front- end UI to database/system of record! Quickly idenify issue root cause! Troubleshoot performance bollenecks! Splunk enabled in all environments from development to producion and DR! Monitor various background resources providing in- depth view to applicaion errors

25 OperaIonal Visibility! Hardware components monitoring! SoSware components monitoring! Hardware uilizaion and capacity monitoring! CorrelaIon of hardware uilizaion with applicaion usage palerns! ConInuous proacive monitoring and alerts! OperaIons teams get clear understanding of the incident and can take acion instantaneously

26 Performance Monitoring & Support! Wing- to- wing view of issues/impact propagaion across various sub- systems using top- down and bolom up approaches! History to understand performance over Ime! Drill- down to see specific transacions not meeing performance goals! Configured alerts to noify when performance degrades below defined threshold! Provides business with heat maps, operaional analyics and SLA monitoring thru dashboards! Support can idenify problems in seconds to minutes! Engage right support resources to resolve the issue

27 ImplementaIon Stat! ApplicaIon Log Sources Business ApplicaIon ApplicaIon Servers, Web Servers, FileNet, Siebel etc., Oracle database IBM Worklight Mobile & Tea Leaf! ApplicaIon Environments ProducIon (51) QA (56) Development (58) SIT (22) DR (8) 27

28 Expected Benefits & Cost Savings! ReducIon in troubleshooing Ime for P1 issues by 25%! ReducIon in Customer CriIcal issues: ReducIon in troubleshooing Ime : 50-75% Improvement in correct team engagement 40% Effort reducion per incident from the current average of 73 minutes to 43 minutes! 34% ReducIon in support Ickets for log requests! Enables true value add work across associated teams! SoS dollars savings for Business (lost business, etc.)

29 Dashboard Samples

30 20/20 Integrated Dashboard

31 IPAS Dashboard

32 CriIcal Errors

33 ApplicaIon Dashboard

34 Search and Export Logs

35 Dashboard & Alerts

36 Special Offer: Try Splunk MINT Express for Free! Splunk MINT offers a fast path to mobile intelligence. How fast? Find out with a 6- month trial* Register for your free trial: hlp://mint.splunk.com/conf2014offer Download the Splunk MINT SDKs Add the Splunk MINT line of SDK code and publish** Start gevng digital intelligence at your fingerips! *Offer valid for.conf2014 a[endees and coworkers of a[endees only. **Trial allows monitoring of up to 750,000 monthly ac've users (MAUs). 36

37 THANK YOU