Splunk for Web Intelligence? Why not! This session provides a plain-english tour that shows how NPR uses Splunk to track audio and video traffic across our web sites and digital apps (Android, iPhone, etc.). Then Intuit will share how they capture greater insight into visitor sessions and answer questions traditional web analytics tools can’t provide. Intuit will cover a variety of use cases, taking each from the raw data through Splunk “under-the-hood” to the strategic questions and answers.

1. .conf 2011 Keynote Outline August 15, 2011 Web Analytics Throwdown with NPR and Intuit Sondra Russell and Tim Suh

2. 24/7

4. Audio and Video Tracking: The Basic Setup MP3 Downloads On Demand Flash Live Streams ProgramID (?P<ProgramID>[^]*)(?=) UserAgent (?P<UserAgent>[^amp;quot;]*)(?=amp;quot; ) AppVersion “ *(? =) ” Ingest Raw Data Extract Fields Define Transactions > sourcetype = download AND status < 300 AND Method=Get | transaction IPAddress UserAgent maxspan=120… Create Summary Indexes 08/08/2011=>31800 08/09/2011=>29655 08/10/2011=>29903 08/11/2011=>53443 08/12/2011=>32593 08/13/2011=>88654 08/14/2011=>11231 1 2 3 4

5. > index=“summary” search_name=“ si_download_programID ” ProgramName= “ All Songs Considered ” “ How has my podcast been doing?” pulls from the summary index maps ProgramID to lookup table

6. > * | eval Platform = mvfilter(match(eventtype,&quot;plat*&quot;)) | timechart span=1w count by Platform “ What platforms are people using to access our show?” Filters for eventtypes that include “plat” plat_iphone_browser UserAgent=&quot;*iPhone*&quot; AND UserAgent!=&quot;*NPRRadio*&quot; AND UserAgent!=&quot;*iPod*“ AND sc!=18

7. > * | rex field=_raw &quot;Darwin(?<Version>[0-9]*)amp;quot;“ | top Version “ What percentage of our users have upgraded?” Uses regex to extract element from raw log &quot;NPRMusic/2.7 CFNetwork/459 Darwin/10.0.0d3&quot;

8. > index=“twitter” | stats count by story_url “ Which stories are getting Tweeted the most?” timestamp =&quot;2011-07-18T15:40:34Z&quot;, author =&quot;drpdtapp (Dr. P. D Tapp)&quot;, tweet =&quot;Tinnitus: Why Won't My Ears Stop Ringing?”, story_url =&quot;http://www.npr.org/2011/07/18/138163304/tinnitus-why-wont-my-ears-stop-ringing?sc=tw&quot;, Creates reports from a custom log

9. .conf 2011 Keynote Outline August 15, 2011 Questions? Sondra Russell and Tim Suh