Dan MacTiernan, Dow Jones & Company
You must have Flash installed and Javascript
enabled to view this video.
Description:
Dan MacTiernan
Business Architect
Speaking about using Splunk at Interop NYC 2007
Date: Dec 13, 2007 | Runtime: 02:17
Permalink
http://www.splunk.com/view/SP-CAAACHB
Transcript
Dan MacTiernan
Interop 2007 Transcript
00:00
Hi, I’m Dan MacTiernan, and I’m a Business Architect. We brought Splunk in to do a number of things. Primarily to help us with our log monitoring. We are tied right now to BMC Patrol, they have us by the you-know-what, and we can’t move away from them until we can monitor our logs.
00:26
They have very expensive patrol agents that sit on a server and do that function, but only for that one particular server. We brought Splunk in, so we could finally pull that agent off of the server, and we can do our log monitoring, across the enterprise, in one central location. And that’s really important for us to reduce costs, and also improve the functionality that comes with availability management.
00:51
Real-time diagnostics. So, we’re using it for availability management, and what that means is cutting our MTTR [Mean time to recovery] down in half. Right now when we have a catastrophic event, the web-servers go down, right now it takes us a long time, scratching our heads about what happened.
01:07
Then the next step is to notify the tier two guy, who notifies the tier three guy, and then finally somebody wakes up in the middle of the night and has to log into a server, and grep a file just to figure out what happened.
01:18
By that time, you’re out of the water, it’s two hours later. Splunk, if you’re Splunking all your log data, and all your event data, you have it in one spot. So now it doesn’t get past the tier one guy. He’s looking at it in real-time, and he brings it up, and just like Google, he’s searching for that clue, or that piece of information that he has in front of him.
01:37
And Splunk lets him interact with that data. So he brings all those events that have that particular in it, or let’s say a server. And then he’ll point and click, and with the Ajax-heavy interface, he’s navigating that data like he navigates the internet using Google.
01:53
So, needless to say, that problem gets solved in a much shorter time than when you don’t have Splunk. That’s the exciting part. We really anticipate for our tier one guys to be solving problems much quicker. And, that’s cost reduction. We’re gonna’ save a lot of money, and we’re gonna’ keep our business running to a higher standard.