Recommandé
Contenu connexe
Tendances
Tendances (20)
Similaire à Splunk for AIOps: Reduce IT outages through prediction with machine learning
Similaire à Splunk for AIOps: Reduce IT outages through prediction with machine learning (20)
Plus de Digital Transformation EXPO Event Series
Plus de Digital Transformation EXPO Event Series (20)
Dernier
Dernier (20)
Splunk for AIOps: Reduce IT outages through prediction with machine learning
- 1. © 2017 SPLUNK INC.© 2017 SPLUNK INC.© 2017 SPLUNK INC. Splunk for AIOps Reduce IT outages through prediction with machine learning endre@splunk.com
- 2. © 2017 SPLUNK INC.© 2017 SPLUNK INC. During the course of this presentation, we may make forward-looking statements regarding future events or the expected performance of the company. We caution you that such statements reflect our current expectations and estimates based on factors currently known to us and that actual events or results could differ materially. For important factors that may cause actual results to differ from those contained in our forward-looking statements, please review our filings with the SEC. The forward-looking statements made in this presentation are being made as of the time and date of its live presentation. If reviewed after its live presentation, this presentation may not contain current or accurate information. We do not assume any obligation to update any forward looking statements we may make. In addition, any information about our roadmap outlines our general product direction and is subject to change at any time without notice. It is for informational purposes only and shall not be incorporated into any contract or other commitment. Splunk undertakes no obligation either to develop the features or functionality described or to include any such feature or functionality in a future release. Splunk, Splunk>, Listen to Your Data, The Engine for Machine Data, Splunk Cloud, Splunk Light and SPL are trademarks and registered trademarks of Splunk Inc. in the United States and other countries. All other brand names, product names, or trademarks belong to their respective owners. © 2017 Splunk Inc. All rights reserved. Forward-Looking Statements
- 3. © 2017 SPLUNK INC.© 2017 SPLUNK INC.
- 4. © 2017 SPLUNK INC.© 2017 SPLUNK INC. Gartner Artificial Intelligence for IT (AIOps) Next Generation IT Operations Management Platform • Ingesting, storing & providing access to data from a variety of sources • Enabling data analytics at the point of ingestion & access • What is “big data” in AI Ops? • Logs • Events • Metrics • Applying ML & pattern discovery/recognition
- 5. © 2017 SPLUNK INC.© 2017 SPLUNK INC. Splunk Service Intelligence Simplify Your Operations With Artificial Intelligence and Service Context Find and fix the most important issues Transform IT operations with machine learning Get a full view of your IT environment Service Context Artificial Intelligence Scalable Platform Contextualize and prioritize Separate valuable signal in noise Respond collaboratively and simplify operations 1001001 0100010 0101001 1001101 0110010111000110 1101011101010110 0010011101011000
- 6. © 2017 SPLUNK INC.© 2017 SPLUNK INC. Challenges Facing Today’s IT High cost of IT Operation Inefficient use of resources Lower customer satisfaction Lost revenue $ $ $
- 7. © 2017 SPLUNK INC.© 2017 SPLUNK INC. How IT Operates Today: IT Stack POV Physical Server (Dell, HP, CISCO blades or servers) Guest OS (Windows/Linux/*Nix) Database (Oracle, SQL Server, MySQL) Hypervisor (ESX, HyperV, Citrix) Web Server (Apache, TomCat) App Server (WebLogic, JBoss EAP, WebSphere) Applications, business/mission services SAN/NAS Storage (EMC, NetApp) Network
- 8. © 2017 SPLUNK INC.© 2017 SPLUNK INC. What’s Needed: Service/App POV Physical Server (1,2,3,4,5,6,7,8,9,10…N) Guest OS (1,2,3,4,5,6,7,8,9,10…N) Database (1,2,3,4,5,6,7,8,9,10…100) VM/Hypervisor (1,2,3,4,5,6,7,8,9,10…N) Web Server (1,2,3,4,5,6,7,8,9,10…N) App Server (1,2,3,4,5,6,7,8,9,10…N) Service/App Claims SAN/NAS Storage (1,2,3,4,5,6,7,8,9,10…N) Network Status 100 % 100 % 98% 100 % 95% 100 % 100 % 100 % Outage!
- 9. © 2017 SPLUNK INC.© 2017 SPLUNK INC. Desired Outcomes for IT Operations Reduce tool complexity and costs Become more predictive and preventative Use resources efficiently Optimize the consumer experience
- 10. © 2017 SPLUNK INC.© 2017 SPLUNK INC. Rethink and Improve How IT Operates Using Artificial Intelligence for IT Operations Traditional IT ▶ Structured data ▶ Brittle tools and integrations ▶ Obsession with “faults” and “traps” ▶ Focus on components parts ▶ Search oriented Data-Driven IT 0101101 0010101 ▶ Structured and unstructured data ▶ Robust data integrations ▶ Real-time insights from big data ▶ Focus on the whole service ▶ Machine learning-driven analytics
- 11. © 2017 SPLUNK INC. Splunk turns machine data into answers
- 12. © 2017 SPLUNK INC.© 2017 SPLUNK INC. Splunk is the Backbone of IT Broad ecosystem of integrations Applications Development Infrastructure Applications Project & Issue Tracking Storage Code Repository Cloud Automation Server Network
- 13. © 2017 SPLUNK INC.© 2017 SPLUNK INC. Artificial Intelligence for IT Operations Powered by machine learning and analytics for real-time service insights, simplified operations and root-cause isolation
- 14. © 2017 SPLUNK INC.© 2017 SPLUNK INC. Key Terminology Logical grouping of operations Online banking, authentication, virtualization EXAMPLES Services Set of actions performed with specific business goals Sell products, fulfill orders, process payroll Business Processes Component required to deliver a service Hosts, users, OS processes Entities Metrics used to evaluate success Service health, order revenue, latency Key Performance Indicators EXAMPLES EXAMPLES EXAMPLES
- 15. © 2017 SPLUNK INC.© 2017 SPLUNK INC. Manage the Incident, Not the Event Collect ALL data De-spam: Separate valuable signal from noise Add context: Prioritize resolution to ensure service availability Shared insights Collaborative response Data-enabled IT Intelligent operations SALES SSO CLAIMS
- 16. © 2017 SPLUNK INC.© 2017 SPLUNK INC. Predict and Prevent Time Hurts
- 17. © 2017 SPLUNK INC.© 2017 SPLUNK INC. Time Hurts $ Impact Time Impacting Fault Additional Events Existing Ticket created MTTR
- 18. © 2017 SPLUNK INC.© 2017 SPLUNK INC. Event Analytics – Become More Effective $ Impact Time Effective Impacting Fault Events Existing Ticket Created MTTR ITSI Event Analytics
- 19. © 2017 SPLUNK INC.© 2017 SPLUNK INC. Move to a Proactive Posture $ Impact Time Effective Proactive Impacting Fault Events Existing MTTR ITSI AT/AD ML Automated Resolution(Add Logs and Metrics) Ticket Created
- 20. © 2017 SPLUNK INC.© 2017 SPLUNK INC. Let me take you to the future
- 21. © 2017 SPLUNK INC.© 2017 SPLUNK INC. Prevent Incidents From Occurring $ Impact Time Effective Proactive Predictive Impacting Fault Events Existing MTTR ITSI AT/AD ML NEGATIVE MTTR !! Ticket Created Time Returned to Business and IT!!! ITSI Predictive ML Automated Resolution
- 22. © 2017 SPLUNK INC.© 2017 SPLUNK INC.
- 23. © 2017 SPLUNK INC.© 2017 SPLUNK INC. Clustered Notable Events Automated Actions Assisted Deep Dive Investigation Machine Learning in Service Intelligence ANOMALY DETECTION Machine Learning Adaptive Thresholds Anomaly Detection Cohesion Detection MLTK Customization Machine Learning Application logs Network logs Metrics* Server logs Any Time Series in Splunk INTELLIGENCEKPIs
- 24. © 2017 SPLUNK INC.© 2017 SPLUNK INC. Breadth of Machine Learning Capabilities Make IT Effective, Proactive and Predictive Dynamic Thresholding Thresholds adapt in real time Trend and alert on anomalous behavior Prevent service degradation Event Clustering Detect and highlight the events that matter Prioritize events that need action taken Anomaly Detection Alerts triggered automatically by anomalous activity Incident responders can see across all silos to find a quicker MTTR Prediction Predict outages and anomalies before they occur Act on these predictions so your services are not affected Platform for Machine Data
- 25. © 2017 SPLUNK INC.© 2017 SPLUNK INC. Deviation from past behavior Deviation from peers (aka Multivariate AD or Cohesive AD) Unusual change in features ITSI MAD Anomaly Detection Predict Service Health Score Predicting Churn Predicting Events Trend Forecasting Detecting influencing entities Early warning of failure – predictive maintenance Identify peer groups Event Correlation Reduce alert noise ITSI Event Analytics Anomaly detection Predictive Analytics Clustering Categories Of Machine Learning For AI Ops
- 26. © 2017 SPLUNK INC.© 2017 SPLUNK INC. Algorithms Assistants Showcase 25+ standard algorithms available prepackaged with the toolkit Guide model building, testing, & deployment for common objectives Interactive examples for over 25 typical IT, security, business, IoT use cases New commands to fit, test and operationalize model Python for Scientific Computing Library 300+ open source algorithms available for use MLib integration Splunk Machine Learning Toolkit
- 27. © 2017 SPLUNK INC.© 2017 SPLUNK INC. What Makes Splunk ITSI Different
- 28. © 2017 SPLUNK INC.© 2017 SPLUNK INC.
- 29. © 2017 SPLUNK INC.© 2017 SPLUNK INC.
- 30. © 2017 SPLUNK INC.© 2017 SPLUNK INC.
- 31. © 2017 SPLUNK INC.© 2017 SPLUNK INC. Now …in 30 min
- 32. © 2017 SPLUNK INC.© 2017 SPLUNK INC. Or both on one screen
- 33. © 2017 SPLUNK INC.© 2017 SPLUNK INC. Unified Insights for Data-Driven Actions Simplified rules managementMachine Learning Improved incident workflowsService Context Eliminate command-line rules configurations and JavaScript vulnerabilities Alert on anomalous conditions based on operational baselines to reduce event clutter Use built-in integrations into incident management tools with powerful APIs to enable custom integrations Deliver context on events to prioritize alerts and events based on business impact
- 34. © 2017 SPLUNK INC.© 2017 SPLUNK INC. Splunk IT Service Intelligence Get data Define services, entities and KPIs Monitor and troubleshoot Analyze and detect and prevent Data-Defined, Data-Driven Service Insights
- 35. © 2017 SPLUNK INC.© 2017 SPLUNK INC. Predictive Analytics At Gatwick Airport Prediction stops a minor incident becoming a major problem Splunk provides a simple method to combine historical data with current events How did we do? How are we doing? How will we do?
- 36. © 2017 SPLUNK INC.© 2017 SPLUNK INC. Demo’s & F1 Simulator at Splunk Stand R566
- 37. © 2017 SPLUNK INC.© 2017 SPLUNK INC.© 2017 SPLUNK INC. Thank You endre@splunk.com
- 38. © 2017 SPLUNK INC.© 2017 SPLUNK INC. Proven Outcomes … Repeated Time and Again
- 39. © 2017 SPLUNK INC.© 2017 SPLUNK INC. Solution Architecture DATA SOURCES SOLUTIONS Cloud Open Source Database Automation Host Container Hypervisor ApplicationServer Service InsightsEvent Analytics PLATFORM Automation Tools (THIRD PARTY) Service Mgmt Tools (THIRD PARTY) TOOLS & APIs METRICS TroubleshootingMonitoring Platform for Machine Data Network OS Application MobileStorage Wire DataLOGS INFRASTRUCTURE MONITORING APPLICATION ANALYTICS Infrastructure Troubleshooting Cloud Monitoring & Optimization Container Monitor & Troubleshoot Server Monitor & Troubleshooting Custom App Troubleshooting Release Analytics Custom Experience Monitoring Build Analytics APM CMDB ARTIFICIAL INTELLIGENCE Remediation PATTERN DETECTION CLUSTERING ANOMALY DETECTION PREDICTION
- 40. © 2017 SPLUNK INC.© 2017 SPLUNK INC. Machine Learning Made Mainstream Adaptive Thresholds Anomaly Detection Event Correlation Manage and maintain KPI thresholds by dynamically adapting to changing operational patterns Catch issues that thresholds can’t—baseline normal operations and alert on anomalous conditions Reduce event clutter, false positives and rules maintenance by auto-grouping related events