Die Grundlagen für den KI gestützten IT-Betrieb

1. © 2022 SPLUNK INC.
Die Grundlagen
für den KI
gestützten IT-
Betrieb
Carsten Stolz
Senior Sales Engineer

2. © 2022 SPLUNK INC.
Agenda
• Challenges in IT
• What modern IT Ops teams need
• This is how we do it
• Q&A
• Wrap Up

3. © 2022 SPLUNK INC.
Digital Transformation is Here

4. © 2022 SPLUNK INC.
hotelbird
GmbH
https://hotelbird.com/

5. © 2022 SPLUNK INC.
https://www.golem.de/news/mcdonald-s-mobiles-essen-bestellen-mit-200-meter-geofencing-1905-141551.html

6. © 2022 SPLUNK INC.
https://www.oxygenq.net/patientenaufruf-mvz-arztpraxis?lang=en
https://www.suedkurier.de/ueberregional/panorama/Asterix-erobert-wieder-Rom-neuer-Bilderband-erscheint;art409965,8981711

7. © 2022 SPLUNK INC.
Cloud 5G IoT AI
Mobility Virtualization Robotic Process
Automation
Blockchain AR/VR
Platforms
New technologies
are enabling
digital transformation

8. © 2022 SPLUNK INC.
https://www.urban-hub.com/de/cities/barcelona-macht-seine-smart-city-noch-smarter-2/

9. © 2022 SPLUNK INC.
Cloud 5G IoT AI
Mobility Virtualization Robotic Process
Automation
Blockchain AR/VR
Platforms
New technologies
are enabling
digital transformation

10. © 2022 SPLUNK INC.
Source picture: https://www.rackspace.com/de/blog/hybrid-cloud-better

11. © 2022 SPLUNK INC.
https://csrc.nist.gov/publications/detail/sp/800-145/final

12. © 2022 SPLUNK INC.
What does
this mean
for IT?

13. © 2022 SPLUNK INC.
Demands on IT
Have Changed
TODAY
Responsible for business
impact
Support diverse, modular,
ephemeral architectures
Fast speed to market
cycles, interconnected with
dev
BEFORE
!
Responsible for
infrastructure health
Support monolithic, static
systems
Slow deployment cycles,
disconnected from dev

14. Traditional Monitoring
Challenges
• Lack of visibility
• Too many tools
• Siloed views of data
• Unable to scale
• Long times to resolve
CISO
Dev
SysAdmin

15. © 2022 SPLUNK INC.
Teams Need Modern IT Tools
Analytics-Driven
Technology
Support complex
environments and
scale with the
business
Service-Level
Monitoring
Ensure business
performance
and health
Integrated IT
Management
Reduce operational
inefficiency and
MTTR

16. © 2022 SPLUNK INC.
DATA
Splunk is a
Leading AIOps Platform
Expansive
Data Access
Machine Learning
and Predictive
Analytics
Monitor
Investigate
Act
Analyze
Metrics Logs
Events Traces
Closed-loop Incident
Management

17. © 2022 SPLUNK INC.
Virtualization
Application
Performance
Business
Performance
Middleware
Cloud
Infrastructure
Service
Management
Network
Server
Metrics Logs
Events Traces
Expansive
Data Access

18. © 2022 SPLUNK INC.
Closed-Loop
IT Management
Alert
Triage
Investigate
Respond
Remediate
Automate
Root Cause
Analysis
Detect DATA

19. © 2022 SPLUNK INC.
Unmatched ML & Predictive Analytics
How to find a needle in multiple haystacks
Network? Database?
Middleware?
Hardware?
Wrong
command?
Connection?
Apache?
VM?
Mainframe?
Load
balancer?
Code?
Collect ALL data
• Collect from all silos
• Data in original raw format
• Add open sources apps to
ingest data on the fly
• Schema on the fly
• Dynamic thresholding
• Realtime correlation
Clustering & aggregation
• Real time event
clustering/correlation
• Reduce alert noise
• Behavioural analytics
• Deduplication
Add context
• Measure / report on
indicators that matters
• Add service / business
context
• Add actionable
information to detection
Sales
sso
Claims
Anomaly detection
• Catch issues that thresholds
cannot
• Reduce event clutter
• Deviation from past
behaviour
• Deviation from peers
• Unusual change in features
Assisted deep dive
investigation
• Root cause analysis
• Powerful & easy to use
search & investigate
language
?
Predictive
Analytics
• Predict service health
• Predict events
• Trend forecasting
• Detect influencing
entities
• Early warning of
failure
70% to 90%
Reduction in investigation time
15% to 45%
Reduction in high priority incidents
67% to 82%
Reduction in business impact

20. © 2022 SPLUNK INC.
Traditional Tools Were Built
for Specific Domains
KPIs
Infrastructure
Network Database Cloud Servers
Host/OS Desktop VM
Health of
Environment

21. © 2022 SPLUNK INC.
KPIs
Business
Services
Revenue Online Digital
Supply Chain
Customer
Satisfaction
Brand
Reputation
KPIs
Application
Services
App Health and
Performance
Traditional Tools Create
Silos and Complexity
KPIs
Infrastructure
Network Database Cloud Servers
Host/OS Desktop VM
Health of
Environment

22. © 2022 SPLUNK INC.
KPIs
Business
Services
Revenue Online Digital
Supply Chain
Customer
Satisfaction
Brand
Reputation
KPIs
Application
Services
App Health and
Performance
KPIs
Infrastructure
Network Database Cloud Servers
Host/OS Desktop VM
Health of
Environment
Splunk Provides End to End Visibility
Impacts Business KPIs

23. © 2022 SPLUNK INC.
Rethink Traditional IT Management
BEFORE
Incident
Triage Investigation Service
Restoration
Root Cause
Analysis
Failure
Detection
Datacenter Hardware DB Containers App Network
Event/Alert Storm
AFTER
What
Incident?
Incident
Failure
Detection
Triage Investigation Service
Restoration
Root Cause
Analysis
Alerts
(Includes noise)
Incident
Response
Datacenter Hardware DB Containers App Network
Multiple Tools, Ineffective Teams
(Includes
disparate teams
and tools)
DB
Hardware App
ML-powered
anomaly detection
Alerts
(No noise)
Event Correlation
& Clustering
Service context
& prioritized
events
Incident
Response
Automated
routing &
suggested
responders

24. © 2022 SPLUNK INC.
Splunk’s Approach
Before and After
BEFORE
Incident
Triage Investigation Service
Restoration
Root Cause
Analysis
Failure
Detection
Datacenter Hardware DB Containers App Network
Event/Alert Storm
AFTER
What
Incident?
Incident
Failure
Detection
Triage Investigation Service
Restoration
Root Cause
Analysis
Alerts
(Includes noise)
Incident
Response
Datacenter Hardware DB Containers App Network
Multiple Tools, Ineffective Teams
(Includes
disparate teams
and tools)
DB
Hardware App
ML-powered
anomaly detection
Alerts
(No noise)
Event Correlation
& Clustering
Service context
& prioritized
events
Incident
Response
Automated
routing &
suggested
responders
Automated
Remediation
⇩90%
alert noise
⇩65 - 90%
investigation time
⇩15 - 45%
high priority
incidents

25. © 2022 SPLUNK INC.

26. © 2022 SPLUNK INC.

27. © 2022 SPLUNK INC.

28. © 2022 SPLUNK INC.

29. © 2022 SPLUNK INC.
Intelligent Incident
Management
Accelerate MTTR using real-time event
correlation, automated incident
prioritization and integrations with IT
service management (ITSM) tools

30. © 2022 SPLUNK INC.
End to End
Visibility
Protect business performance
by monitoring service health,
drill down into underlying
infrastructure, all from one
dashboard

31. © 2022 SPLUNK INC.
ML and
Predictive
Analytics
Anomaly detection,
adaptive thresholding
and predictive health
scores to monitor KPI
data and prevent issues
30 min in advance.

32. © 2022 SPLUNK INC.
Deep Dives
What it is
• Swimlane view of multiple
KPIs and services
Why it matters
• Quickly identify root cause by viewing
correlated metrics over time

33. © 2022 SPLUNK INC.
Splunk IT Service
Intelligence
A KPI-driven, predictive
analytics solution for digital
services
● Business & service monitoring
● Intelligent incident management
● Machine learning & predictive analytics

34. © 2022 SPLUNK INC.
Glass
Tables
What it is
• Custom and pre-built executive
dashboards
Why it matters
• Visibility into all your services, and
comprehensive view of the business,
not just individual systems

35. © 2022 SPLUNK INC.
Splunk App
for Content
Packs
● Curated, prepackaged content
simplifies onboarding new data
types
● Content packs may include
service templates, pre-built glass
tables, correlation searches to
accelerate time to value
● Easy in-product installation

36. © 2022 SPLUNK INC.
Wrap Up
• Everything as a Service
• Rethink IT Ops
• A good service makes my customer happy
• A good service enables my business
• What critical service do you support?
https://www.lecker.de/scharfe-mexiko-wraps-75033.html

37. © 2022 SPLUNK INC.
Thank You