Copyright 2014 Splunk Inc.

Transcription

1 Copyright 2014 Splunk Inc. Extend Splunk by Visualizing Data using Tableau and the ODBC driver Sharad Kylasam Sr. Product Manager, Splunk Ashley Jaschke Product Manager, Tableau Joe Specht Sr. Director Systems Infrastructure

2 Disclaimer During the course of this presentanon, we may make forward- looking statements regarding future events or the expected performance of the company. We caunon you that such statements reflect our current expectanons and esnmates based on factors currently known to us and that actual events or results could differ materially. For important factors that may cause actual results to differ from those contained in our forward- looking statements, please review our filings with the SEC. The forward- looking statements made in the this presentanon are being made as of the Nme and date of its live presentanon. If reviewed aver its live presentanon, this presentanon may not contain current or accurate informanon. We do not assume any obliganon to update any forward- looking statements we may make. In addinon, any informanon about our roadmap outlines our general product direcnon and is subject to change at any Nme without nonce. It is for informanonal purposes only, and shall not be incorporated into any contract or other commitment. Splunk undertakes no obliganon either to develop the features or funcnonality described or to include any such feature or funcnonality in a future release. 2

3 Agenda! Overview of Splunk ODBC driver! Benefits and usage scenarios! Overview of Tableau! How Splunk ODBC driver is used at Tableau! Demos 3

4 Overview

5 Turning Machine Data Into Business Value Index Untapped Data: Any Source, Type, Volume Ask Any Ques<on On- Premises Private Cloud Public Cloud Servers Storage Online Shopping Cart Online Services Security Desktops Smartphones and Devices Telecoms Web Services Web Clickstreams Networks RFID Call Detail Records GPS LocaNon Packaged ApplicaNons Messaging Databases Energy Meters Custom ApplicaNons Applica<on Delivery IT Opera<ons Security, Compliance & Fraud Business Analy<cs Industrial Data & Internet of Things Copyright 2014 Splunk Inc.

6 Splunk: ComplemenNng BI Investments 6

7 Splunk Business Analytics Splunk Complements Exis<ng Business Intelligence Technologies NEW CLASS OF DATA FOR BUSINESS ANALYTICS REAL- TIME BUSINESS INSIGHTS ENRICH MACHINE DATA WITH STRUCTURED DATA

8 Splunk ODBC driver! Makes it easier for non- technical users to gain machine data insights from Splunk! Enables use of tools that business users are already familiar with! Leverage the enhanced visualizanon capabilines that tools like Tableau provide! Correlate machine data with other structured data to gain new business insights! ODBC v2 now in Beta! Support for Data Models Significantly improved performance 8

9 Typical Workflow Step 1: Business user communicates data requirements to Splunk Admin Business user Splunk admin Step 2: Splunk admin authors Saved search/ Data model in Splunk thereby making it available to ODBC driver 9

10 Typical Workflow (cont d) Step 3: Business user uses tool to access saved search / data model and retrieve data from Splunk Business user ODBC driver (SQL to SPL translation layer) 10

11 Tableau Overview Ashley Jaschke Product Manager

12 Tableau s Mission 12

13 Tableau Products Tableau Desktop Tableau Server For Anyone For Organizations Explore and visualize data Self-service analytics for everyone Blazing speed against massive data Tableau Online For Organizations Tableau Server hosted in the cloud Subscription pricing Connect to live cloud data sources Complete business intelligence system Web dashboards and applications Secure information management Enterprise scalability Tableau Public For Public Websites Interactive data for websites Online storytelling with data Cloud technology platform

14 Workflow extract connect live Tableau Desktop Self-service visual data analysis Information consumers extract connect live Data Server Repository Cache Presentatio n Security Management/Automation Web & mobile users Tableau Server Rapid fire business intelligence 14

15 Why Tableau + Splunk? Splunk Saved Searches as a data source in Tableau makes real- 7me insights from machine data more accessible to IT as well as the business user Provides machine data to business users in an interface that they are familiar with for data discovery and sharing via Tableau dashboards Enables Tableau users to blend structured data they are already using with new machine generated data 15

16 Demo Joe Specht Sr. Director, System Infrastructure

17 Tableau Splunk ImplementaNon! 6 Indexers! 3 search heads! 150GB daily ingest! 7TB storage prod! 5TB storage for Dev! 5TB storage for Sandbox 17

18 Splunk Users at Tableau! OperaNons Monitoring, TroubleshooNng, and ReporNng Both Splunk searches and Splunk as a Tableau Data Source! Development Performance TesNng, Bug analysis, and TroubleshooNng Both Splunk searches and Splunk as a Tableau Data Source! MarkeNng Usage Analysis Splunk as a Tableau Data Source No use of splunk data prior to ODBC! Business Analysts Conversion Rates and Product Downloads Splunk as a Tableau Data Source No use of splunk data prior to ODBC! ExecuNves Reports Splunk as a Tableau Data Source No use of splunk data prior to ODBC 18

19 Splunk Use Cases at Tableau Department Use Cases Benefits OperaNons Health monitoring Error drilling Reduced mean Nme to failure Contextual Search refinement Development Error Analysis Performance Analysis Visualizing impact of changes Self service MarkeNng LocaNon based data Regional Usage Data Self service Business Analysts Trail download conversions Access to Splunk for non- tech Self Service ExecuNves ReporNng E- mail friendly reports 19

20 Use Case Screen Shots 20

21 Show ease of connecnng Demo Outline 1. Show sample Splunk search saving to report 2. Show accessing that over ODBC 3. Show using that in Tableau Desktop 4. Show publishing the data source to server and having it auto refresh Show finished workbooks 1. Drill down on server error 2. AcNons linking to Splunk searches with variables filled in 3. Blending with other data (Rack tables / server rack locanons) 4. Link back to Splunk with variables 5. AcNons to Zabbix or test links 6. Show dashboard filtering 21

22 Demo Outline 22

23 Demo Connect 23

24 Demo Outline 24

25 Demo Outline 25

26 Demo Ops 26

27 27

28 28

29 29

30 30

31 Demo Summary Splunk ODBC allows Tableau to enhance Splunk! Simple to connect! Easy to create complex visualizanons! Drilling down on an issue is fast with filtering! Blending data from other sources enriches details! Tableau is easy to link back Splunk with narrowed searches 31

32 Quick Tricks Splunk ODBC allows Tableau to enhance Splunk! Use short duranon searches for creanon and change the duranon aver it is finalized! Use Tableau Server to incrementally extract the data! Use the fields + field_name to limit measures and dimensions! Use filters and acnons to link back to Splunk for detail invesnganon 32

33 Future Uses Planned! IntegraNon with Akamai log data! Rollout to Corporate IT systems in house! Tableau log file revamp to be more machine friendly 33

34 THANK YOU