Splunking F1: Part Two

Do you remember when your maths teacher told you it’s not the final answer that’s important, it’s your working out that really counts? Well, during this year’s SplunkLive! London event, we had a tie for first place on our F1 racing simulator; two identical lap times to within one thousandth of a second - amazing! Both James and Joe wanted to win the first prize – tickets to the British Grand Prix, so we decided to investigate their driving styles by examining the car telemetry data streamed to Splunk during their respective sessions. Much like an outage or security investigation, with the data in Splunk, we were able to unwind the events to find out how we arrived at the end result. In this case, the result was the fastest lap time. In other scenarios, it could be how security defences were breached, or why a server went down, the process is the same.

One element missing from the F1 data listed in part one of this post, was information concerning the actual driver. To supplement this, we built a simple form in Splunk to capture driver name and demographic data, storing the information in the Splunk KV Store. The final piece; the leaderboard dashboard, correlates the driver information with the telemetry data collected during the race to determine fastest completed lap, of the first 3 laps per contestant.

The table below shows the average throttle, brake and steering application from the driver, ranging from 0 (no application) to 1 (full application).

Session Summary Stats From the above summary table, we can see that James was on the throttle longer and on the brakes less of the time, indicating that he accelerated and braked harder than Joe – key for a fast lap time. James also used less steering angle, indicating a smoother driver, again key for being fast. So how was Joe able to match James’s lap time?

Throttle Application

Brake Application The answer isn’t obvious when looking at the driver inputs alone. However, the speed of the car does give a clear indication. The speed chart from the two drivers reveals that James had a terrible last corner as the pressure of the big prize got to him! Joe kept a clear head and applied the power beautifully through ‘Club Corner’, a very fast right hander which requires the driver to balance the car on the edge of adhesion. This allows him to recover the time that he had lost to James in the earlier part of the lap.

Speed (mph)

For those who missed out on the excitement, the competition is sure to make another appearance at a Splunk event near you! We are also exploring additional features to add to the app, such as the use of the Machine Learning Toolkit to predict behaviours based on player demographic, driving style, and to correlate the data with real-world IOT data sources.

Not and F1 fan? Let us know what other sports you think we could Splunk. Who knows, it could be our next event competition!

SplunkLive London F1 simulator

----------------------------------------------------
Thanks!
Haider Al-Seaidy

Related Articles

Stream Amazon CloudWatch Logs to Splunk Using AWS Lambda
Platform
5 Minute Read

Stream Amazon CloudWatch Logs to Splunk Using AWS Lambda

Set up a subscription filter with AWS Lambda to ingest CloudWatch Logs data into different Splunk destinations.
Splunk Edge Processor and Federated Search: Do I Need It?
Platform
4 Minute Read

Splunk Edge Processor and Federated Search: Do I Need It?

Splunk Edge Processor and Federated Search for Amazon S3 can help efficiently gain value out of your data.
IDC Reports: Enterprises Gain Higher Efficiency and Resiliency With Migration to Cloud
Platform
2 Minute Read

IDC Reports: Enterprises Gain Higher Efficiency and Resiliency With Migration to Cloud

As expansion to the cloud continues, IT leaders are continuously looking for better ways to strengthen security and focus more on driving business value.
Analyzing Text with Deep Learning: New Use Cases in Splunk DSDL
Platform
4 Minute Read

Analyzing Text with Deep Learning: New Use Cases in Splunk DSDL

In this blog post, we will introduce two use cases for text analysis based on deep learning: text similarity scoring and zero-shot text labeling. These functionalities are now available in the latest release (v5.1.1) of the Splunk App for Data Science and Deep Learning (DSDL), available for Splunk Cloud Platform and Splunk Enterprise. We will provide step-by-step demonstrations of how to use these features in this blog.
Build Digital Resilience Through Expanded Access to Decentralized Data
Platform
3 Minute Read

Build Digital Resilience Through Expanded Access to Decentralized Data

Splunk Platform introduces new data management capabilities that enable faster and more cost-effective root cause analysis and incident resolution of customer-facing issues.
Enterprises Realize Benefits from Migrating to Cloud with Splunk
Platform
2 Minute Read

Enterprises Realize Benefits from Migrating to Cloud with Splunk

By moving to Splunk Cloud Platform, our customers were able to investigate, monitor, analyze and act on their data with unprecedented insight, all from the cloud.
Announcing Splunk Federated Search for Amazon S3 Now Generally Available in Splunk Cloud Platform
Platform
2 Minute Read

Announcing Splunk Federated Search for Amazon S3 Now Generally Available in Splunk Cloud Platform

Announcing the general availability of Federated Search for Amazon S3, a new capability that allows customers to search data from their Amazon S3 buckets directly from Splunk Cloud Platform without the need to ingest it.
Addition of Syslog in Splunk Edge Processor Supercharges Security Operations with Palo Alto Firewall Log Reduction
Platform
6 Minute Read

Addition of Syslog in Splunk Edge Processor Supercharges Security Operations with Palo Alto Firewall Log Reduction

Addition of Syslog in Splunk Edge Processor Supercharges Security Operations with Palo Alto Firewall Log Reduction
Revolutionize Data Ingestion: Introducing Terraform Support for Splunk Cloud Platform
Platform
2 Minute Read

Revolutionize Data Ingestion: Introducing Terraform Support for Splunk Cloud Platform

Splunk Cloud introduces Terraform support for Index, IP list, & HEC token management for efficient data ingestion.