Splunk Steam for Real-Time Latte Analytics

Industries Matthias Maier

As my fellow coffee lovers may know, Monday 1st October was International Coffee Day - and what better way to honour it than with a blog post on Splunking my coffee machine? You see, I drink a lot coffee, so thought that a little self control wouldn’t hurt! Can you count how many cups you drink a day? Even the ones you mindlessly grab from the coffee machine because you’re so deep into your work - or is that just me?

Good For Monitoring Java Beans

Sure - I don’t have a super expensive, latest model coffee machine, with retina display, running on Linux connected via WiFi. I have an “analog” coffee machine. No ethernet cable or wireless, so thankfully I don’t need to patch and update firmware (sorry, I’m a security geek after all!). However, it still makes awesome coffee, and the best thing about it is the built-in mill, ensuring a fresh cup every time!

Good For Monitoring Java Beans - Adapter!

I invested 37 Euro and bought an Equip Wireless Plug from Edimax, which features an energy meter and connects to my WiFi.

The decision for this particular adapter was due to someone’s review mentioning that it is possible to access and control the device via rest. Someone also posted handy script samples on github of how to do so.

I installed this into my Splunk instance at home using the Rest API Modular Input app and configured a new input, immediately pulling in events every five seconds, as instructed:

I think the same scenario of analog devices is often present in the Industry 4.0 arena - there are old machines that work, but you still need to get some “insight” out of them.

E-vente Analytics

Ok, the data is not strictly from my coffee machine, but from the power plug connected to it. Here’s the energy consumption parameter:

As you can see, I have extracted two value’s; Ampere and Watt. I retrieve those values now every five seconds - day and night!

MTTR - Mean Time To Ristretto

Next, I created a timechart and calculated the used Ampere, as there is a higher consumption if the machine is on and running. So you can see already a clear trend; five cups of coffee from the morning of May 2nd to lunch is a typical home office day. You can also see that on the next day I was apparently more alert, and reduced my coffee consumption.

My weekend coffee habits look a little healthier. However, many argue that coffee is healthy - so I’ll let you be the judge! Notice that the Ampere here is up from 200 to 400? This is because alongside my daily espresso habits, my wife always has a cappuccino - but she gets her weekday fix in the office rather than at home.

From Zero To Nero Downtime

Now the fun really starts when we use Splunk to answer key questions, and find interesting correlations. Here are some examples of what we could ask:

Got any more ideas (or coffee-related puns?), let me know! Enjoy your coffee today - cheers and happy Splunking!

Matthias

Related Articles

Understanding the DoD’s Data Strategy: Part 2
Industries
6 Minute Read

Understanding the DoD’s Data Strategy: Part 2

Explore the industry trends and insights that align with the DoD’s goals and objectives in part two of this two-part series.
Observability for the Public Sector: Greater Visibility for a More Resilient Digital Future
Industries
4 Minute Read

Observability for the Public Sector: Greater Visibility for a More Resilient Digital Future

Discover key observability insights, challenges and trends from leaders across the public sector.
Insights from Public Sector Leaders: Understanding the State of Security and Lessons learned
Industries
4 Minute Read

Insights from Public Sector Leaders: Understanding the State of Security and Lessons learned

Let’s start with this: Global research shows over half of organisations have had a data breach, and 62% suffer from unplanned downtime on a monthly basis.