SlideShare une entreprise Scribd logo
1  sur  29
Copyright © 2015 Splunk Inc.
Lee Melvin & Shawn Roberts
Mentor Graphics
Hello
my name is:
Lee Melvin
Mentor Graphics
Technical Architect - Storage
Hello
my name is:
Shawn Roberts
Mentor Graphics
Technical Architect - Clients
Mentor Graphics® provides
software and hardware design
solutions that enable companies
to develop better electronic
products faster and more cost-
effectively.
How I got started with Splunk
• Dual vendor network-attached storage strategy
• 100+ filers across 30+ sites, used by 10+ divisions
• Needed ways to
• Provide per-division summary reporting, accessible to engineers on demand
• Implement performance service level objectives
• Provide storage administrators with actionable issues, not just graphs and
metrics
• Provide reporting that spans vendors
• Vendor reporting tools expensive and inadequate for these needs
• Previously, layered a fragile and manual scripting process on top
• Initial focus on capacity and performance analysis
Lee
Our “Storage” Solution
Forwarder/Data
Collection Node
Lee
Custom Vendor
Specific
Add-on
Splunk’s plugin
Indexer/search head
How I got started with Splunk
• We had ~8,500 systems around the world that were not being
monitored
• No visibility into what could be causing occasional crashes
• No ability to:
• Add another agent
• “increase the IT tax”
• Negatively impact performance
• Track changes over time
• People were asking questions…
Shawn
Those 8,500 systems…
Shawn
Those 8,500 systems…
Shawn
Shawn
Shawn
Shawn
WMI?
Event Logs?
Event Forwarding?
8,500 Systems
Performance hit to
network and clients
8,500 Systems
8,500 Systems!
Event Viewer <>
Reporting
Shawn
Shawn
Shawn
Our “Client” Solution
Event
Forwarding
Shawn
Collection
Server
 Doesn’t add another agent
 Doesn’t “increase the IT tax”
 No impact to performance
 Track changes over time
Shawn
Tough client reports now possible
Boot Time
Average aka What’s
normal?
Last 30 vs 365
Top/Bottom 10
Error Events
Top 10
Errors by category
Startup impacting
Application crashes
!
Shawn
Shawn
Storage reporting enhanced!
• Tagging filesystems by division, product group, performance tier,
or other abstract (via Splunk lookup table)
• Custom technology add-on to ingest data from Hitachi HNAS
• Capacity/Performance reports that span both NetApp and Hitachi
• Division summary and per-filesystem views
• Actionable items for storage administrators
• Outliers view – slow, busy, near-full
• Stale data reporting – big chunks of unused data
Lee
Lee
Lee
Lee
Lee
Shawn
http://www.flickr.com/people/15291928@N00
No good deed, etc…what’s next?
• Lookup/compare by:
• Location
• AD OU
• Manager
• Type
• Model
• Manufacturer
Shawn
Client dashboard
• Measurements
• Make, Model, CPU, Memory, Disks,
Encryption status, etc.
• Age of Windows installation
• Most common errors
• Last N errors
• SCCM Data
• Installed software
• Update status
• Changes!
• Hardware
• Software
• AV Data
• Versions
• Activity
Shawn
Client dashboard with Splunk
• Measurements
• Make, Model, CPU, Memory, Disks,
Encryption status, etc.
• Age of Windows installation
• Most common errors
• Last N errors
• SCCM Data
• Installed software
• Update status
• Changes!
• Hardware
• Software
• AV Data
• Versions
• ActivityX vs Normal
X over Time
Shawn
Storage reporting
• Reports
• Filer configuration auditing
• Geographic visualization
• Long term (5-year) reports leveraging
summary indexes
• Matching workloads to appropriate
performance tier
• Alerting
• Alert filesystem owners on near-
capacity using lookup table
• Infrastructure
• Web frontend to edit tags in
lookup table
• Division-specific view roles to
limit access/confusion
• Ingest additional HDS metrics
• Ingest Symantec NetBackup logs
• Round the learning curve on
data models, simplify
Lee
Lessons learned
• You have data in more places than you might think.
• You don’t always need a huge license purchase to answer hard
questions.
• Use the provided apps for inspiration (and for cut/paste).
Don’t treat them as an end state.
Shawn
Lee
Copyright © 2015 Splunk Inc.
Thank
You!
Shawn Roberts
shawn_roberts@mentor.com
+ShawnRobertsNerd
Lee Melvin
lee_melvin@mentor.com
linkedin.com/in/lmelvin

Contenu connexe

Tendances

SplunkLive! Customer Presentation - Garmin International
SplunkLive! Customer Presentation - Garmin InternationalSplunkLive! Customer Presentation - Garmin International
SplunkLive! Customer Presentation - Garmin International
Splunk
 
Peter Zaitsev - Practical MySQL Performance Optimization
Peter Zaitsev - Practical MySQL Performance OptimizationPeter Zaitsev - Practical MySQL Performance Optimization
Peter Zaitsev - Practical MySQL Performance Optimization
Caroline_Rose
 

Tendances (20)

CA Technologies Customer Presentation
CA Technologies Customer PresentationCA Technologies Customer Presentation
CA Technologies Customer Presentation
 
Splunk for Developers
Splunk for DevelopersSplunk for Developers
Splunk for Developers
 
PayPal Customer Presentation
PayPal Customer PresentationPayPal Customer Presentation
PayPal Customer Presentation
 
Improve the Impact of DevOps
Improve the Impact of DevOpsImprove the Impact of DevOps
Improve the Impact of DevOps
 
Spring ‘17 New Relic Digital Intelligence Platform Updates
Spring ‘17 New Relic Digital Intelligence Platform UpdatesSpring ‘17 New Relic Digital Intelligence Platform Updates
Spring ‘17 New Relic Digital Intelligence Platform Updates
 
SplunkLive! Customer Presentation - Garmin International
SplunkLive! Customer Presentation - Garmin InternationalSplunkLive! Customer Presentation - Garmin International
SplunkLive! Customer Presentation - Garmin International
 
When PaaS hits the fan: monitoring advanced Azure PaaS workloads in an enterp...
When PaaS hits the fan: monitoring advanced Azure PaaS workloads in an enterp...When PaaS hits the fan: monitoring advanced Azure PaaS workloads in an enterp...
When PaaS hits the fan: monitoring advanced Azure PaaS workloads in an enterp...
 
Monitoring your Digital Experience
Monitoring your Digital ExperienceMonitoring your Digital Experience
Monitoring your Digital Experience
 
Peter Zaitsev - Practical MySQL Performance Optimization
Peter Zaitsev - Practical MySQL Performance OptimizationPeter Zaitsev - Practical MySQL Performance Optimization
Peter Zaitsev - Practical MySQL Performance Optimization
 
CloudBrew 2017 - Security + DevOps + Azure = Awesomeness
CloudBrew 2017 - Security + DevOps + Azure = AwesomenessCloudBrew 2017 - Security + DevOps + Azure = Awesomeness
CloudBrew 2017 - Security + DevOps + Azure = Awesomeness
 
SplunkLive! Austin Customer Presentation - Xerox
SplunkLive! Austin Customer Presentation - XeroxSplunkLive! Austin Customer Presentation - Xerox
SplunkLive! Austin Customer Presentation - Xerox
 
How to Design, Build and Map IT and Business Services in Splunk
How to Design, Build and Map IT and Business Services in SplunkHow to Design, Build and Map IT and Business Services in Splunk
How to Design, Build and Map IT and Business Services in Splunk
 
Splunk at Aaron's Inc
Splunk at Aaron's IncSplunk at Aaron's Inc
Splunk at Aaron's Inc
 
Affordably Refreshing Your Water District’s Process Control
Affordably Refreshing Your Water District’s Process ControlAffordably Refreshing Your Water District’s Process Control
Affordably Refreshing Your Water District’s Process Control
 
Machine Learning and Analytics Breakout Session
Machine Learning and Analytics Breakout SessionMachine Learning and Analytics Breakout Session
Machine Learning and Analytics Breakout Session
 
Data-Drive DevOps: Mining Machine Data for "Metrics that Matter"
Data-Drive DevOps: Mining Machine Data for "Metrics that Matter"Data-Drive DevOps: Mining Machine Data for "Metrics that Matter"
Data-Drive DevOps: Mining Machine Data for "Metrics that Matter"
 
How to Design, Build and Map IT and Biz Services Breakout Session
How to Design, Build and Map IT and Biz Services Breakout SessionHow to Design, Build and Map IT and Biz Services Breakout Session
How to Design, Build and Map IT and Biz Services Breakout Session
 
SplunkLive! London 2016 Splunk for Devops
SplunkLive! London 2016 Splunk for DevopsSplunkLive! London 2016 Splunk for Devops
SplunkLive! London 2016 Splunk for Devops
 
Scaling Enterprise DevOps w/ New Relic: Nationwide’s Modernization Journey, F...
Scaling Enterprise DevOps w/ New Relic: Nationwide’s Modernization Journey, F...Scaling Enterprise DevOps w/ New Relic: Nationwide’s Modernization Journey, F...
Scaling Enterprise DevOps w/ New Relic: Nationwide’s Modernization Journey, F...
 
Herbalife Customer Presentation
Herbalife Customer PresentationHerbalife Customer Presentation
Herbalife Customer Presentation
 

Similaire à Mentor Graphics Customer Presentation

Pain points of agile development
Pain points of agile developmentPain points of agile development
Pain points of agile development
Perforce
 
Sql server operational best practices notes from the field - charley hanan...
Sql server operational best practices    notes from the field - charley hanan...Sql server operational best practices    notes from the field - charley hanan...
Sql server operational best practices notes from the field - charley hanan...
Charley Hanania
 
Design Reviews for Operations - Velocity Europe 2014
Design Reviews for Operations - Velocity Europe 2014Design Reviews for Operations - Velocity Europe 2014
Design Reviews for Operations - Velocity Europe 2014
Mandi Walls
 

Similaire à Mentor Graphics Customer Presentation (20)

Rakuten’s Journey with Splunk - Evolution of Splunk as a Service
Rakuten’s Journey with Splunk - Evolution of Splunk as a ServiceRakuten’s Journey with Splunk - Evolution of Splunk as a Service
Rakuten’s Journey with Splunk - Evolution of Splunk as a Service
 
Extreme Makeover OnBase Edition
Extreme Makeover OnBase EditionExtreme Makeover OnBase Edition
Extreme Makeover OnBase Edition
 
AD1545 - Extending the XPages Extension Library
AD1545 - Extending the XPages Extension LibraryAD1545 - Extending the XPages Extension Library
AD1545 - Extending the XPages Extension Library
 
Pain points of agile development
Pain points of agile developmentPain points of agile development
Pain points of agile development
 
Sql server operational best practices notes from the field - charley hanan...
Sql server operational best practices    notes from the field - charley hanan...Sql server operational best practices    notes from the field - charley hanan...
Sql server operational best practices notes from the field - charley hanan...
 
Choosing the Right Business Intelligence Tools for Your Data and Architectura...
Choosing the Right Business Intelligence Tools for Your Data and Architectura...Choosing the Right Business Intelligence Tools for Your Data and Architectura...
Choosing the Right Business Intelligence Tools for Your Data and Architectura...
 
Meta scale kognitio hadoop webinar
Meta scale kognitio hadoop webinarMeta scale kognitio hadoop webinar
Meta scale kognitio hadoop webinar
 
Open Source & Identity Management
Open Source & Identity ManagementOpen Source & Identity Management
Open Source & Identity Management
 
Data Vault Automation at the Bijenkorf
Data Vault Automation at the BijenkorfData Vault Automation at the Bijenkorf
Data Vault Automation at the Bijenkorf
 
NVReddy
NVReddyNVReddy
NVReddy
 
Embedding Data & Analytics With Looker
Embedding Data & Analytics With LookerEmbedding Data & Analytics With Looker
Embedding Data & Analytics With Looker
 
Introduction to the Typesafe Reactive Platform
Introduction to the Typesafe Reactive PlatformIntroduction to the Typesafe Reactive Platform
Introduction to the Typesafe Reactive Platform
 
2010/10 - Database Architechs - Perf. & Tuning Tools
2010/10 - Database Architechs - Perf. & Tuning Tools2010/10 - Database Architechs - Perf. & Tuning Tools
2010/10 - Database Architechs - Perf. & Tuning Tools
 
Big Data at a Gaming Company: Spil Games
Big Data at a Gaming Company: Spil GamesBig Data at a Gaming Company: Spil Games
Big Data at a Gaming Company: Spil Games
 
College of Technology Pantnagar lecture- Jainendra
College of Technology Pantnagar lecture- Jainendra College of Technology Pantnagar lecture- Jainendra
College of Technology Pantnagar lecture- Jainendra
 
Options for Data Prep - A Survey of the Current Market
Options for Data Prep - A Survey of the Current MarketOptions for Data Prep - A Survey of the Current Market
Options for Data Prep - A Survey of the Current Market
 
Five Ways to Fix Your SQL Server Dev-Test Problems
Five Ways to Fix Your SQL Server Dev-Test Problems Five Ways to Fix Your SQL Server Dev-Test Problems
Five Ways to Fix Your SQL Server Dev-Test Problems
 
NVReddy
NVReddyNVReddy
NVReddy
 
Webinar share point performance feb2016 slideshare
Webinar share point performance feb2016 slideshareWebinar share point performance feb2016 slideshare
Webinar share point performance feb2016 slideshare
 
Design Reviews for Operations - Velocity Europe 2014
Design Reviews for Operations - Velocity Europe 2014Design Reviews for Operations - Velocity Europe 2014
Design Reviews for Operations - Velocity Europe 2014
 

Plus de Splunk

Plus de Splunk (20)

.conf Go 2023 - Data analysis as a routine
.conf Go 2023 - Data analysis as a routine.conf Go 2023 - Data analysis as a routine
.conf Go 2023 - Data analysis as a routine
 
.conf Go 2023 - How KPN drives Customer Satisfaction on IPTV
.conf Go 2023 - How KPN drives Customer Satisfaction on IPTV.conf Go 2023 - How KPN drives Customer Satisfaction on IPTV
.conf Go 2023 - How KPN drives Customer Satisfaction on IPTV
 
.conf Go 2023 - Navegando la normativa SOX (Telefónica)
.conf Go 2023 - Navegando la normativa SOX (Telefónica).conf Go 2023 - Navegando la normativa SOX (Telefónica)
.conf Go 2023 - Navegando la normativa SOX (Telefónica)
 
.conf Go 2023 - Raiffeisen Bank International
.conf Go 2023 - Raiffeisen Bank International.conf Go 2023 - Raiffeisen Bank International
.conf Go 2023 - Raiffeisen Bank International
 
.conf Go 2023 - På liv og død Om sikkerhetsarbeid i Norsk helsenett
.conf Go 2023 - På liv og død Om sikkerhetsarbeid i Norsk helsenett .conf Go 2023 - På liv og død Om sikkerhetsarbeid i Norsk helsenett
.conf Go 2023 - På liv og død Om sikkerhetsarbeid i Norsk helsenett
 
.conf Go 2023 - Many roads lead to Rome - this was our journey (Julius Bär)
.conf Go 2023 - Many roads lead to Rome - this was our journey (Julius Bär).conf Go 2023 - Many roads lead to Rome - this was our journey (Julius Bär)
.conf Go 2023 - Many roads lead to Rome - this was our journey (Julius Bär)
 
.conf Go 2023 - Das passende Rezept für die digitale (Security) Revolution zu...
.conf Go 2023 - Das passende Rezept für die digitale (Security) Revolution zu....conf Go 2023 - Das passende Rezept für die digitale (Security) Revolution zu...
.conf Go 2023 - Das passende Rezept für die digitale (Security) Revolution zu...
 
.conf go 2023 - Cyber Resilienz – Herausforderungen und Ansatz für Energiever...
.conf go 2023 - Cyber Resilienz – Herausforderungen und Ansatz für Energiever....conf go 2023 - Cyber Resilienz – Herausforderungen und Ansatz für Energiever...
.conf go 2023 - Cyber Resilienz – Herausforderungen und Ansatz für Energiever...
 
.conf go 2023 - De NOC a CSIRT (Cellnex)
.conf go 2023 - De NOC a CSIRT (Cellnex).conf go 2023 - De NOC a CSIRT (Cellnex)
.conf go 2023 - De NOC a CSIRT (Cellnex)
 
conf go 2023 - El camino hacia la ciberseguridad (ABANCA)
conf go 2023 - El camino hacia la ciberseguridad (ABANCA)conf go 2023 - El camino hacia la ciberseguridad (ABANCA)
conf go 2023 - El camino hacia la ciberseguridad (ABANCA)
 
Splunk - BMW connects business and IT with data driven operations SRE and O11y
Splunk - BMW connects business and IT with data driven operations SRE and O11ySplunk - BMW connects business and IT with data driven operations SRE and O11y
Splunk - BMW connects business and IT with data driven operations SRE and O11y
 
Splunk x Freenet - .conf Go Köln
Splunk x Freenet - .conf Go KölnSplunk x Freenet - .conf Go Köln
Splunk x Freenet - .conf Go Köln
 
Splunk Security Session - .conf Go Köln
Splunk Security Session - .conf Go KölnSplunk Security Session - .conf Go Köln
Splunk Security Session - .conf Go Köln
 
Data foundations building success, at city scale – Imperial College London
 Data foundations building success, at city scale – Imperial College London Data foundations building success, at city scale – Imperial College London
Data foundations building success, at city scale – Imperial College London
 
Splunk: How Vodafone established Operational Analytics in a Hybrid Environmen...
Splunk: How Vodafone established Operational Analytics in a Hybrid Environmen...Splunk: How Vodafone established Operational Analytics in a Hybrid Environmen...
Splunk: How Vodafone established Operational Analytics in a Hybrid Environmen...
 
SOC, Amore Mio! | Security Webinar
SOC, Amore Mio! | Security WebinarSOC, Amore Mio! | Security Webinar
SOC, Amore Mio! | Security Webinar
 
.conf Go 2022 - Observability Session
.conf Go 2022 - Observability Session.conf Go 2022 - Observability Session
.conf Go 2022 - Observability Session
 
.conf Go Zurich 2022 - Keynote
.conf Go Zurich 2022 - Keynote.conf Go Zurich 2022 - Keynote
.conf Go Zurich 2022 - Keynote
 
.conf Go Zurich 2022 - Platform Session
.conf Go Zurich 2022 - Platform Session.conf Go Zurich 2022 - Platform Session
.conf Go Zurich 2022 - Platform Session
 
.conf Go Zurich 2022 - Security Session
.conf Go Zurich 2022 - Security Session.conf Go Zurich 2022 - Security Session
.conf Go Zurich 2022 - Security Session
 

Dernier

+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
?#DUbAI#??##{{(☎️+971_581248768%)**%*]'#abortion pills for sale in dubai@
 
Histor y of HAM Radio presentation slide
Histor y of HAM Radio presentation slideHistor y of HAM Radio presentation slide
Histor y of HAM Radio presentation slide
vu2urc
 

Dernier (20)

Boost Fertility New Invention Ups Success Rates.pdf
Boost Fertility New Invention Ups Success Rates.pdfBoost Fertility New Invention Ups Success Rates.pdf
Boost Fertility New Invention Ups Success Rates.pdf
 
04-2024-HHUG-Sales-and-Marketing-Alignment.pptx
04-2024-HHUG-Sales-and-Marketing-Alignment.pptx04-2024-HHUG-Sales-and-Marketing-Alignment.pptx
04-2024-HHUG-Sales-and-Marketing-Alignment.pptx
 
Apidays New York 2024 - The value of a flexible API Management solution for O...
Apidays New York 2024 - The value of a flexible API Management solution for O...Apidays New York 2024 - The value of a flexible API Management solution for O...
Apidays New York 2024 - The value of a flexible API Management solution for O...
 
Strategies for Landing an Oracle DBA Job as a Fresher
Strategies for Landing an Oracle DBA Job as a FresherStrategies for Landing an Oracle DBA Job as a Fresher
Strategies for Landing an Oracle DBA Job as a Fresher
 
Partners Life - Insurer Innovation Award 2024
Partners Life - Insurer Innovation Award 2024Partners Life - Insurer Innovation Award 2024
Partners Life - Insurer Innovation Award 2024
 
+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
 
How to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected WorkerHow to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected Worker
 
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
 
Handwritten Text Recognition for manuscripts and early printed texts
Handwritten Text Recognition for manuscripts and early printed textsHandwritten Text Recognition for manuscripts and early printed texts
Handwritten Text Recognition for manuscripts and early printed texts
 
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemkeProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
 
A Domino Admins Adventures (Engage 2024)
A Domino Admins Adventures (Engage 2024)A Domino Admins Adventures (Engage 2024)
A Domino Admins Adventures (Engage 2024)
 
Tata AIG General Insurance Company - Insurer Innovation Award 2024
Tata AIG General Insurance Company - Insurer Innovation Award 2024Tata AIG General Insurance Company - Insurer Innovation Award 2024
Tata AIG General Insurance Company - Insurer Innovation Award 2024
 
TrustArc Webinar - Unlock the Power of AI-Driven Data Discovery
TrustArc Webinar - Unlock the Power of AI-Driven Data DiscoveryTrustArc Webinar - Unlock the Power of AI-Driven Data Discovery
TrustArc Webinar - Unlock the Power of AI-Driven Data Discovery
 
presentation ICT roal in 21st century education
presentation ICT roal in 21st century educationpresentation ICT roal in 21st century education
presentation ICT roal in 21st century education
 
TrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments
TrustArc Webinar - Stay Ahead of US State Data Privacy Law DevelopmentsTrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments
TrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments
 
Histor y of HAM Radio presentation slide
Histor y of HAM Radio presentation slideHistor y of HAM Radio presentation slide
Histor y of HAM Radio presentation slide
 
Understanding Discord NSFW Servers A Guide for Responsible Users.pdf
Understanding Discord NSFW Servers A Guide for Responsible Users.pdfUnderstanding Discord NSFW Servers A Guide for Responsible Users.pdf
Understanding Discord NSFW Servers A Guide for Responsible Users.pdf
 
Exploring the Future Potential of AI-Enabled Smartphone Processors
Exploring the Future Potential of AI-Enabled Smartphone ProcessorsExploring the Future Potential of AI-Enabled Smartphone Processors
Exploring the Future Potential of AI-Enabled Smartphone Processors
 
Real Time Object Detection Using Open CV
Real Time Object Detection Using Open CVReal Time Object Detection Using Open CV
Real Time Object Detection Using Open CV
 
Developing An App To Navigate The Roads of Brazil
Developing An App To Navigate The Roads of BrazilDeveloping An App To Navigate The Roads of Brazil
Developing An App To Navigate The Roads of Brazil
 

Mentor Graphics Customer Presentation

  • 1. Copyright © 2015 Splunk Inc. Lee Melvin & Shawn Roberts Mentor Graphics
  • 2. Hello my name is: Lee Melvin Mentor Graphics Technical Architect - Storage Hello my name is: Shawn Roberts Mentor Graphics Technical Architect - Clients
  • 3. Mentor Graphics® provides software and hardware design solutions that enable companies to develop better electronic products faster and more cost- effectively.
  • 4. How I got started with Splunk • Dual vendor network-attached storage strategy • 100+ filers across 30+ sites, used by 10+ divisions • Needed ways to • Provide per-division summary reporting, accessible to engineers on demand • Implement performance service level objectives • Provide storage administrators with actionable issues, not just graphs and metrics • Provide reporting that spans vendors • Vendor reporting tools expensive and inadequate for these needs • Previously, layered a fragile and manual scripting process on top • Initial focus on capacity and performance analysis Lee
  • 5. Our “Storage” Solution Forwarder/Data Collection Node Lee Custom Vendor Specific Add-on Splunk’s plugin Indexer/search head
  • 6. How I got started with Splunk • We had ~8,500 systems around the world that were not being monitored • No visibility into what could be causing occasional crashes • No ability to: • Add another agent • “increase the IT tax” • Negatively impact performance • Track changes over time • People were asking questions… Shawn
  • 10. Shawn
  • 11. Shawn WMI? Event Logs? Event Forwarding? 8,500 Systems Performance hit to network and clients 8,500 Systems 8,500 Systems! Event Viewer <> Reporting
  • 12. Shawn
  • 13. Shawn
  • 14. Shawn
  • 16.  Doesn’t add another agent  Doesn’t “increase the IT tax”  No impact to performance  Track changes over time Shawn
  • 17. Tough client reports now possible Boot Time Average aka What’s normal? Last 30 vs 365 Top/Bottom 10 Error Events Top 10 Errors by category Startup impacting Application crashes ! Shawn
  • 18. Shawn
  • 19. Storage reporting enhanced! • Tagging filesystems by division, product group, performance tier, or other abstract (via Splunk lookup table) • Custom technology add-on to ingest data from Hitachi HNAS • Capacity/Performance reports that span both NetApp and Hitachi • Division summary and per-filesystem views • Actionable items for storage administrators • Outliers view – slow, busy, near-full • Stale data reporting – big chunks of unused data Lee
  • 20. Lee
  • 21. Lee
  • 22. Lee
  • 24. No good deed, etc…what’s next? • Lookup/compare by: • Location • AD OU • Manager • Type • Model • Manufacturer Shawn
  • 25. Client dashboard • Measurements • Make, Model, CPU, Memory, Disks, Encryption status, etc. • Age of Windows installation • Most common errors • Last N errors • SCCM Data • Installed software • Update status • Changes! • Hardware • Software • AV Data • Versions • Activity Shawn
  • 26. Client dashboard with Splunk • Measurements • Make, Model, CPU, Memory, Disks, Encryption status, etc. • Age of Windows installation • Most common errors • Last N errors • SCCM Data • Installed software • Update status • Changes! • Hardware • Software • AV Data • Versions • ActivityX vs Normal X over Time Shawn
  • 27. Storage reporting • Reports • Filer configuration auditing • Geographic visualization • Long term (5-year) reports leveraging summary indexes • Matching workloads to appropriate performance tier • Alerting • Alert filesystem owners on near- capacity using lookup table • Infrastructure • Web frontend to edit tags in lookup table • Division-specific view roles to limit access/confusion • Ingest additional HDS metrics • Ingest Symantec NetBackup logs • Round the learning curve on data models, simplify Lee
  • 28. Lessons learned • You have data in more places than you might think. • You don’t always need a huge license purchase to answer hard questions. • Use the provided apps for inspiration (and for cut/paste). Don’t treat them as an end state. Shawn Lee
  • 29. Copyright © 2015 Splunk Inc. Thank You! Shawn Roberts shawn_roberts@mentor.com +ShawnRobertsNerd Lee Melvin lee_melvin@mentor.com linkedin.com/in/lmelvin

Notes de l'éditeur

  1. Mostly Windows OS
  2. And BTW, they are clients.
  3. I went shopping for a “Client Monitoring” tool. There aren’t any options in this space.
  4. We have a great working relationship with Microsoft. I asked them for guidance.
  5. Here’s our conversation.
  6. Now that I could get the logs in one place, it was much easier to go shopping.
  7. I happened to be attending OSCON around the same time…
  8. I talked with Splunk.
  9. With Windows Event Forwarding and Splunk, I’m able to put together a fairly simple solution.
  10. All green.
  11. Also, we are able to perform on demand reporting to solve tough client problems like this one.
  12. We’re a little bruised from the journey, but we’re in a good place.
  13. The next project I’ve been tasked with is creating a Client Dashboard to help our help desk and desktop administrators. Without Splunk, I can do a lot with DB queries and HTML.
  14. With Splunk I can call out what’s important in all that data. This is really useful to our admins who don’t have a lot of familiarity with each system they work with.