Log Aggregation with Splunk

Transcript

1. Monday, 6 May, 13
2. Logs Aggregation Monday, 6 May, 13
3. Logs Aggregation Jasdeep Singh Software Developer Mosaic Sales Solutions Monday, 6 May, 13
4. Logs offer Insights Monday, 6 May, 13
5. #1 What Data came through? Monday, 6 May, 13
6. #2 How our App responded? Monday, 6 May, 13
7. #3 Event/Action Timeline Monday, 6 May, 13
8. Production Issue Monday, 6 May, 13
9. Production Issue Monday, 6 May, 13
10. Production Issue DB Dumps Monday, 6 May, 13
11. Production Issue DB Dumps Monday, 6 May, 13
12. Production Issue DB Dumps Production Logs Monday, 6 May, 13
13. Production Issue DB Dumps Production Logs Monday, 6 May, 13
14. Production Issue DB Dumps Production Logs Production Logs Monday, 6 May, 13
15. Production Issue DB Dumps Production Logs Production Logs Production Logs Monday, 6 May, 13
16. Production Issue DB Dumps Production Logs Production Logs Production Logs Production Logs Monday, 6 May, 13
17. Production Issue DB Dumps Production Logs Production Logs Production Logs Production Logs Production Logs Monday, 6 May, 13
18. Production Issue DB Dumps Production Logs Production Logs Production Logs Production Logs Production Logs Production Logs Monday, 6 May, 13
19. This is really where our investigation starts. From the LOGS.... Monday, 6 May, 13
20. So, you are telling US Something is wrong with our logging?? Monday, 6 May, 13
21. Monday, 6 May, 13
22. Is it really a problem? Monday, 6 May, 13
23. Is it really a problem? Monday, 6 May, 13
24. Is it really a problem? Monday, 6 May, 13
25. Is it really a problem? Monday, 6 May, 13
26. Is it really a problem? Monday, 6 May, 13
27. Is it really a problem? Monday, 6 May, 13
28. Is it really a problem? Monday, 6 May, 13
29. Monday, 6 May, 13
30. Our Logs/Machine Data just happens to be scattered at the moment. Monday, 6 May, 13
31. Single window to our machine data. Accessible Monday, 6 May, 13
32. Solutions Monday, 6 May, 13
33. Solutions Monday, 6 May, 13
34. Solutions Monday, 6 May, 13
35. Solutions Monday, 6 May, 13
36. Solutions Monday, 6 May, 13
37. Solutions Monday, 6 May, 13
38. Solutions Monday, 6 May, 13
39. Solutions Monday, 6 May, 13
40. Enter Splunk Monday, 6 May, 13
41. Monday, 6 May, 13
42. Powerful Search Queries. Monday, 6 May, 13
43. That solves our problems. :) Monday, 6 May, 13
44. That solves our problems. :) But wait, there’s more.. Monday, 6 May, 13
45. Monday, 6 May, 13
46. War Room Metrics Monday, 6 May, 13
47. • Number of Visits scheduled for today • Number of Visits completed so far for today. • Number of Visits started, but not finished so far for today. Monday, 6 May, 13
48. • Dollar amount of Claims submitted (if possible - broken out by Claim Type) • Number of Claims approved so far for today. • Number of Claims declined so far for today. • Many more....... Monday, 6 May, 13
49. DEMO Monday, 6 May, 13
50. Hardware Requirements? 2x quad-core Intel Xeon, 3 GHz, 8 GB RAM, Redundant Array of Independent Disks (RAID) 0 or 1+0, with a 64 bit OS installed. Monday, 6 May, 13
51. How much does it cost? > Free to Index upto 500mb/day. > Finding out what it would cost after? Monday, 6 May, 13