Copyright © 2014 Splunk Inc.
Sharad Kylasam
Sr. Product Manager, Splunk
Ashley Jaschke
Product Manager, Tableau
Joe Specht
Sr. Director Systems Infrastructure
Extend Splunk by
Visualizing Data using
Tableau and the
Disclaimer
During the course of this presentaNon, we may make forward-‐looking statements regarding future events or the expected performance of the company. We cauNon you that such statements reflect our current expectaNons and
esNmates based on factors currently known to us and that actual events or results could differ materially. For important factors that may cause actual results to differ from those contained in our forward-‐looking statements, please review our filings with the SEC. The forward-‐looking statements made in the this presentaNon are being made as
of the Nme and date of its live presentaNon. If reviewed aVer its live presentaNon, this presentaNon may not contain current or accurate informaNon. We do not assume any obligaNon to update any forward-‐looking statements we may make. In addiNon, any informaNon about our roadmap outlines our general product direcNon and is subject to change
at any Nme without noNce. It is for informaNonal purposes only, and shall not be incorporated into any contract or other commitment. Splunk undertakes no obligaNon either to develop the features or funcNonality described or to
Agenda
!
Overview of Splunk ODBC driver
!
Benefits and usage scenarios
!
Overview of Tableau
!
How Splunk ODBC driver is used at Tableau
!
Demos
Turning Machine Data Into Business Value
Index Untapped Data: Any Source, Type, Volume
Online Services Web Services Servers Security GPS LocaNon Storage Desktops Networks Packaged ApplicaNons Custom ApplicaNons Messaging Telecoms Online Shopping Cart Web Clickstreams Databases Energy Meters Call Detail Records Smartphones and Devices RFID On-‐ Premises Private Cloud Public Cloud
Copyright © 2014 Splunk Inc.
Ask Any Ques<on
Applica<on Delivery
Security, Compliance
& Fraud
IT Opera<ons
Industrial Data &
Internet of Things
Business Analy<cs
REAL-‐TIME BUSINESS INSIGHTS NEW CLASS OF
DATA FOR BUSINESS ANALYTICS
ENRICH MACHINE DATA WITH STRUCTURED DATA
Splunk Business Analytics
Splunk ODBC driver
!
Makes it easier for non-‐technical users to gain machine data insights from
Splunk
!
Enables use of tools that business users are already familiar with
!
Leverage the enhanced visualizaNon capabiliNes that tools like Tableau
provide
!
Correlate machine data with other structured data to gain new business
insights
!
ODBC v2 now in Beta!
– Support for Data Models
Typical Workflow
9
Business user Splunk admin
Step 1: Business user
communicates data
requirements to Splunk
Admin
Step 2: Splunk admin
authors Saved search/
Data model in Splunk
thereby making it
Typical Workflow (cont’d)
ODBC driver (SQL to SPL translation layer) Business userStep 3: Business user
uses tool to access saved
search / data model and
retrieve data from
Tableau Overview
Ashley Jaschke
Product Manager
Tableau Products
Tableau Desktop
• Explore and visualize data
• Self-service analytics for everyone
• Blazing speed against massive data
Tableau Online
• Tableau Server hosted in the cloud
• Subscription pricing
• Connect to live cloud data sources
Tableau Server
• Complete business intelligence system
• Web dashboards and applications
• Secure information management
• Enterprise scalability
Tableau Public
• Interactive data for websites
• Online storytelling with data
• Cloud technology platform
For Public Websites For Organizations
For Organizations For Anyone
Workflow
Tableau Desktop Self-service visual data analysis Information consumers connect live extractWeb & mobile users Pr esen tati o n Repository Security Management/Automation Data Server Cac he connect live extract
15
Why Tableau + Splunk?
15
•
Splunk Saved Searches as a data source in Tableau makes real-‐7me
insights from machine data more accessible to IT as well as the
business user
•
Provides machine data to business users in an interface that they are
familiar with for data discovery and sharing via Tableau dashboards
•
Enables Tableau users to blend structured data they are already using
with new machine generated data
Demo
Joe Specht
Sr. Director,
Tableau Splunk ImplementaNon
17!
6 Indexers
!
3 search heads
!
150GB daily ingest
!
7TB storage prod
!
5TB storage for Dev
Splunk Users at Tableau
!
OperaNons – Monitoring, TroubleshooNng, and ReporNng
– Both Splunk searches and Splunk as a Tableau Data Source
!
Development – Performance TesNng, Bug analysis, and
TroubleshooNng
– Both Splunk searches and Splunk as a Tableau Data Source
!
MarkeNng – Usage Analysis
– Splunk as a Tableau Data Source – No use of splunk data prior to ODBC
!
Business Analysts – Conversion Rates and Product Downloads
– Splunk as a Tableau Data Source – No use of splunk data prior to ODBC
Splunk Use Cases at Tableau
19
Department
Use Cases
Benefits
OperaNons
•
Health monitoring
•
Error drilling
•
•
Reduced mean Nme to failure
Contextual Search refinement
Development
•
Error Analysis
•
Performance Analysis
•
Visualizing impact of changes
•
Self service
MarkeNng
•
LocaNon based data
•
Regional Usage Data
•
Self service
Business Analysts
•
Trail download
conversions
•
•
Access to Splunk for non-‐tech
Self Service
ExecuNves
•
ReporNng
•
E-‐mail friendly reports
Demo Outline
Show ease of connecNng
1.
Show sample Splunk search saving to report
2.
Show accessing that over ODBC
3.
Show using that in Tableau Desktop
4.
Show publishing the data source to server and having it auto refresh
Show finished workbooks
1.
Drill down on server error
2.
AcNons linking to Splunk searches with variables filled in
3.
Blending with other data (Rack tables / server rack locaNons)
4.
Link back to Splunk with variables
5.
AcNons to Zabbix or test links
6.
Show dashboard filtering
Demo Connect
Demo Outline
Demo Summary
31
Splunk ODBC allows Tableau to enhance Splunk
!
Simple to connect
!
Easy to create complex visualizaNons
!
Drilling down on an issue is fast with filtering
!
Blending data from other sources enriches details
Quick Tricks
Splunk ODBC allows Tableau to enhance Splunk
!
Use short duraNon searches for creaNon and change the duraNon
aVer it is finalized
!
Use Tableau Server to incrementally extract the data
!
Use the |fields + field_name to limit measures and dimensions
Future Uses Planned
33
