SlideShare a Scribd company logo
Copyright © 2015 Splunk Inc.
Lee Melvin & Shawn Roberts
Mentor Graphics
Hello
my name is:
Lee Melvin
Mentor Graphics
Technical Architect - Storage
Hello
my name is:
Shawn Roberts
Mentor Graphics
Technical Architect - Clients
Mentor Graphics® provides
software and hardware design
solutions that enable companies
to develop better electronic
products faster and more cost-
effectively.
How I got started with Splunk
• Dual vendor network-attached storage strategy
• 100+ filers across 30+ sites, used by 10+ divisions
• Needed ways to
• Provide per-division summary reporting, accessible to engineers on demand
• Implement performance service level objectives
• Provide storage administrators with actionable issues, not just graphs and
metrics
• Provide reporting that spans vendors
• Vendor reporting tools expensive and inadequate for these needs
• Previously, layered a fragile and manual scripting process on top
• Initial focus on capacity and performance analysis
Lee
Our “Storage” Solution
Forwarder/Data
Collection Node
Lee
Custom Vendor
Specific
Add-on
Splunk’s plugin
Indexer/search head
How I got started with Splunk
• We had ~8,500 systems around the world that were not being
monitored
• No visibility into what could be causing occasional crashes
• No ability to:
• Add another agent
• “increase the IT tax”
• Negatively impact performance
• Track changes over time
• People were asking questions…
Shawn
Those 8,500 systems…
Shawn
Those 8,500 systems…
Shawn
Shawn
Shawn
Shawn
WMI?
Event Logs?
Event Forwarding?
8,500 Systems
Performance hit to
network and clients
8,500 Systems
8,500 Systems!
Event Viewer <>
Reporting
Shawn
Shawn
Shawn
Our “Client” Solution
Event
Forwarding
Shawn
Collection
Server
 Doesn’t add another agent
 Doesn’t “increase the IT tax”
 No impact to performance
 Track changes over time
Shawn
Tough client reports now possible
Boot Time
Average aka What’s
normal?
Last 30 vs 365
Top/Bottom 10
Error Events
Top 10
Errors by category
Startup impacting
Application crashes
!
Shawn
Shawn
Storage reporting enhanced!
• Tagging filesystems by division, product group, performance tier,
or other abstract (via Splunk lookup table)
• Custom technology add-on to ingest data from Hitachi HNAS
• Capacity/Performance reports that span both NetApp and Hitachi
• Division summary and per-filesystem views
• Actionable items for storage administrators
• Outliers view – slow, busy, near-full
• Stale data reporting – big chunks of unused data
Lee
Lee
Lee
Lee
Lee
Shawn
http://www.flickr.com/people/15291928@N00
No good deed, etc…what’s next?
• Lookup/compare by:
• Location
• AD OU
• Manager
• Type
• Model
• Manufacturer
Shawn
Client dashboard
• Measurements
• Make, Model, CPU, Memory, Disks,
Encryption status, etc.
• Age of Windows installation
• Most common errors
• Last N errors
• SCCM Data
• Installed software
• Update status
• Changes!
• Hardware
• Software
• AV Data
• Versions
• Activity
Shawn
Client dashboard with Splunk
• Measurements
• Make, Model, CPU, Memory, Disks,
Encryption status, etc.
• Age of Windows installation
• Most common errors
• Last N errors
• SCCM Data
• Installed software
• Update status
• Changes!
• Hardware
• Software
• AV Data
• Versions
• ActivityX vs Normal
X over Time
Shawn
Storage reporting
• Reports
• Filer configuration auditing
• Geographic visualization
• Long term (5-year) reports leveraging
summary indexes
• Matching workloads to appropriate
performance tier
• Alerting
• Alert filesystem owners on near-
capacity using lookup table
• Infrastructure
• Web frontend to edit tags in
lookup table
• Division-specific view roles to
limit access/confusion
• Ingest additional HDS metrics
• Ingest Symantec NetBackup logs
• Round the learning curve on
data models, simplify
Lee
Lessons learned
• You have data in more places than you might think.
• You don’t always need a huge license purchase to answer hard
questions.
• Use the provided apps for inspiration (and for cut/paste).
Don’t treat them as an end state.
Shawn
Lee
Copyright © 2015 Splunk Inc.
Thank
You!
Shawn Roberts
shawn_roberts@mentor.com
+ShawnRobertsNerd
Lee Melvin
lee_melvin@mentor.com
linkedin.com/in/lmelvin

More Related Content

PDF
Splunk conf2014 - Getting Deeper Insights into your Virtualization and Storag...
PPTX
SplunkLive! Customer Presentation - Staples
PDF
Delivering New Visibility and Analytics for IT Operations
PDF
Splunk in Staples: IT Operations
PPTX
Sl boston 05_12_15_ener_noc_final_public
PPTX
Splunk Ninjas: New Features, Pivot, and Search Dojo
PPTX
SplunkLive! Austin Customer Presentation - Dell
PPTX
SplunkLive! Customer Presentation – Directv
Splunk conf2014 - Getting Deeper Insights into your Virtualization and Storag...
SplunkLive! Customer Presentation - Staples
Delivering New Visibility and Analytics for IT Operations
Splunk in Staples: IT Operations
Sl boston 05_12_15_ener_noc_final_public
Splunk Ninjas: New Features, Pivot, and Search Dojo
SplunkLive! Austin Customer Presentation - Dell
SplunkLive! Customer Presentation – Directv

What's hot (20)

PDF
CA Technologies Customer Presentation
PPTX
Splunk for Developers
PDF
PayPal Customer Presentation
PPTX
Improve the Impact of DevOps
PDF
Spring ‘17 New Relic Digital Intelligence Platform Updates
PPTX
SplunkLive! Customer Presentation - Garmin International
PDF
When PaaS hits the fan: monitoring advanced Azure PaaS workloads in an enterp...
PPTX
Monitoring your Digital Experience
PDF
Peter Zaitsev - Practical MySQL Performance Optimization
PDF
CloudBrew 2017 - Security + DevOps + Azure = Awesomeness
PDF
SplunkLive! Austin Customer Presentation - Xerox
PPTX
How to Design, Build and Map IT and Business Services in Splunk
PPTX
Splunk at Aaron's Inc
PPTX
Affordably Refreshing Your Water District’s Process Control
PPTX
Machine Learning and Analytics Breakout Session
PDF
Data-Drive DevOps: Mining Machine Data for "Metrics that Matter"
PPTX
How to Design, Build and Map IT and Biz Services Breakout Session
PPTX
SplunkLive! London 2016 Splunk for Devops
PPTX
Scaling Enterprise DevOps w/ New Relic: Nationwide’s Modernization Journey, F...
PDF
Herbalife Customer Presentation
CA Technologies Customer Presentation
Splunk for Developers
PayPal Customer Presentation
Improve the Impact of DevOps
Spring ‘17 New Relic Digital Intelligence Platform Updates
SplunkLive! Customer Presentation - Garmin International
When PaaS hits the fan: monitoring advanced Azure PaaS workloads in an enterp...
Monitoring your Digital Experience
Peter Zaitsev - Practical MySQL Performance Optimization
CloudBrew 2017 - Security + DevOps + Azure = Awesomeness
SplunkLive! Austin Customer Presentation - Xerox
How to Design, Build and Map IT and Business Services in Splunk
Splunk at Aaron's Inc
Affordably Refreshing Your Water District’s Process Control
Machine Learning and Analytics Breakout Session
Data-Drive DevOps: Mining Machine Data for "Metrics that Matter"
How to Design, Build and Map IT and Biz Services Breakout Session
SplunkLive! London 2016 Splunk for Devops
Scaling Enterprise DevOps w/ New Relic: Nationwide’s Modernization Journey, F...
Herbalife Customer Presentation
Ad

Similar to Mentor Graphics Customer Presentation (20)

PDF
Rakuten’s Journey with Splunk - Evolution of Splunk as a Service
PPTX
Extreme Makeover OnBase Edition
PDF
AD1545 - Extending the XPages Extension Library
PDF
Pain points of agile development
PPTX
Sql server operational best practices notes from the field - charley hanan...
PPT
Choosing the Right Business Intelligence Tools for Your Data and Architectura...
PDF
Meta scale kognitio hadoop webinar
PPT
Open Source & Identity Management
PPTX
Data Vault Automation at the Bijenkorf
PPTX
Embedding Data & Analytics With Looker
PDF
Introduction to the Typesafe Reactive Platform
PPTX
2010/10 - Database Architechs - Perf. & Tuning Tools
PDF
Big Data at a Gaming Company: Spil Games
PPTX
College of Technology Pantnagar lecture- Jainendra
PPTX
Options for Data Prep - A Survey of the Current Market
PPTX
Five Ways to Fix Your SQL Server Dev-Test Problems
PPTX
Design Reviews for Operations - Velocity Europe 2014
PPTX
Business Automation - Cloud Automation Orchestration Service - Nordea
Rakuten’s Journey with Splunk - Evolution of Splunk as a Service
Extreme Makeover OnBase Edition
AD1545 - Extending the XPages Extension Library
Pain points of agile development
Sql server operational best practices notes from the field - charley hanan...
Choosing the Right Business Intelligence Tools for Your Data and Architectura...
Meta scale kognitio hadoop webinar
Open Source & Identity Management
Data Vault Automation at the Bijenkorf
Embedding Data & Analytics With Looker
Introduction to the Typesafe Reactive Platform
2010/10 - Database Architechs - Perf. & Tuning Tools
Big Data at a Gaming Company: Spil Games
College of Technology Pantnagar lecture- Jainendra
Options for Data Prep - A Survey of the Current Market
Five Ways to Fix Your SQL Server Dev-Test Problems
Design Reviews for Operations - Velocity Europe 2014
Business Automation - Cloud Automation Orchestration Service - Nordea
Ad

More from Splunk (20)

PDF
Splunk Leadership Forum Wien - 20.05.2025
PDF
Splunk Security Update | Public Sector Summit Germany 2025
PDF
Building Resilience with Energy Management for the Public Sector
PDF
IT-Lagebild: Observability for Resilience (SVA)
PDF
Nach dem SOC-Aufbau ist vor der Automatisierung (OFD Baden-Württemberg)
PDF
Monitoring einer Sicheren Inter-Netzwerk Architektur (SINA)
PDF
Praktische Erfahrungen mit dem Attack Analyser (gematik)
PDF
Cisco XDR & Splunk SIEM - stronger together (DATAGROUP Cyber Security)
PDF
Security - Mit Sicherheit zum Erfolg (Telekom)
PDF
One Cisco - Splunk Public Sector Summit Germany April 2025
PDF
.conf Go 2023 - Data analysis as a routine
PDF
.conf Go 2023 - How KPN drives Customer Satisfaction on IPTV
PDF
.conf Go 2023 - Navegando la normativa SOX (Telefónica)
PDF
.conf Go 2023 - Raiffeisen Bank International
PDF
.conf Go 2023 - På liv og død Om sikkerhetsarbeid i Norsk helsenett
PDF
.conf Go 2023 - Many roads lead to Rome - this was our journey (Julius Bär)
PDF
.conf Go 2023 - Das passende Rezept für die digitale (Security) Revolution zu...
PDF
.conf go 2023 - Cyber Resilienz – Herausforderungen und Ansatz für Energiever...
PDF
.conf go 2023 - De NOC a CSIRT (Cellnex)
PDF
conf go 2023 - El camino hacia la ciberseguridad (ABANCA)
Splunk Leadership Forum Wien - 20.05.2025
Splunk Security Update | Public Sector Summit Germany 2025
Building Resilience with Energy Management for the Public Sector
IT-Lagebild: Observability for Resilience (SVA)
Nach dem SOC-Aufbau ist vor der Automatisierung (OFD Baden-Württemberg)
Monitoring einer Sicheren Inter-Netzwerk Architektur (SINA)
Praktische Erfahrungen mit dem Attack Analyser (gematik)
Cisco XDR & Splunk SIEM - stronger together (DATAGROUP Cyber Security)
Security - Mit Sicherheit zum Erfolg (Telekom)
One Cisco - Splunk Public Sector Summit Germany April 2025
.conf Go 2023 - Data analysis as a routine
.conf Go 2023 - How KPN drives Customer Satisfaction on IPTV
.conf Go 2023 - Navegando la normativa SOX (Telefónica)
.conf Go 2023 - Raiffeisen Bank International
.conf Go 2023 - På liv og død Om sikkerhetsarbeid i Norsk helsenett
.conf Go 2023 - Many roads lead to Rome - this was our journey (Julius Bär)
.conf Go 2023 - Das passende Rezept für die digitale (Security) Revolution zu...
.conf go 2023 - Cyber Resilienz – Herausforderungen und Ansatz für Energiever...
.conf go 2023 - De NOC a CSIRT (Cellnex)
conf go 2023 - El camino hacia la ciberseguridad (ABANCA)

Recently uploaded (20)

PDF
How UI/UX Design Impacts User Retention in Mobile Apps.pdf
PDF
cuic standard and advanced reporting.pdf
PPTX
A Presentation on Artificial Intelligence
PDF
Dropbox Q2 2025 Financial Results & Investor Presentation
PPTX
PA Analog/Digital System: The Backbone of Modern Surveillance and Communication
PDF
KodekX | Application Modernization Development
PPTX
Digital-Transformation-Roadmap-for-Companies.pptx
PDF
The Rise and Fall of 3GPP – Time for a Sabbatical?
PDF
NewMind AI Weekly Chronicles - August'25 Week I
PDF
Machine learning based COVID-19 study performance prediction
PPTX
Big Data Technologies - Introduction.pptx
PPT
Teaching material agriculture food technology
PDF
7 ChatGPT Prompts to Help You Define Your Ideal Customer Profile.pdf
PPTX
Cloud computing and distributed systems.
PDF
Reach Out and Touch Someone: Haptics and Empathic Computing
PDF
Empathic Computing: Creating Shared Understanding
PDF
Electronic commerce courselecture one. Pdf
DOCX
The AUB Centre for AI in Media Proposal.docx
PDF
Peak of Data & AI Encore- AI for Metadata and Smarter Workflows
PPTX
Detection-First SIEM: Rule Types, Dashboards, and Threat-Informed Strategy
How UI/UX Design Impacts User Retention in Mobile Apps.pdf
cuic standard and advanced reporting.pdf
A Presentation on Artificial Intelligence
Dropbox Q2 2025 Financial Results & Investor Presentation
PA Analog/Digital System: The Backbone of Modern Surveillance and Communication
KodekX | Application Modernization Development
Digital-Transformation-Roadmap-for-Companies.pptx
The Rise and Fall of 3GPP – Time for a Sabbatical?
NewMind AI Weekly Chronicles - August'25 Week I
Machine learning based COVID-19 study performance prediction
Big Data Technologies - Introduction.pptx
Teaching material agriculture food technology
7 ChatGPT Prompts to Help You Define Your Ideal Customer Profile.pdf
Cloud computing and distributed systems.
Reach Out and Touch Someone: Haptics and Empathic Computing
Empathic Computing: Creating Shared Understanding
Electronic commerce courselecture one. Pdf
The AUB Centre for AI in Media Proposal.docx
Peak of Data & AI Encore- AI for Metadata and Smarter Workflows
Detection-First SIEM: Rule Types, Dashboards, and Threat-Informed Strategy

Mentor Graphics Customer Presentation

  • 1. Copyright © 2015 Splunk Inc. Lee Melvin & Shawn Roberts Mentor Graphics
  • 2. Hello my name is: Lee Melvin Mentor Graphics Technical Architect - Storage Hello my name is: Shawn Roberts Mentor Graphics Technical Architect - Clients
  • 3. Mentor Graphics® provides software and hardware design solutions that enable companies to develop better electronic products faster and more cost- effectively.
  • 4. How I got started with Splunk • Dual vendor network-attached storage strategy • 100+ filers across 30+ sites, used by 10+ divisions • Needed ways to • Provide per-division summary reporting, accessible to engineers on demand • Implement performance service level objectives • Provide storage administrators with actionable issues, not just graphs and metrics • Provide reporting that spans vendors • Vendor reporting tools expensive and inadequate for these needs • Previously, layered a fragile and manual scripting process on top • Initial focus on capacity and performance analysis Lee
  • 5. Our “Storage” Solution Forwarder/Data Collection Node Lee Custom Vendor Specific Add-on Splunk’s plugin Indexer/search head
  • 6. How I got started with Splunk • We had ~8,500 systems around the world that were not being monitored • No visibility into what could be causing occasional crashes • No ability to: • Add another agent • “increase the IT tax” • Negatively impact performance • Track changes over time • People were asking questions… Shawn
  • 10. Shawn
  • 11. Shawn WMI? Event Logs? Event Forwarding? 8,500 Systems Performance hit to network and clients 8,500 Systems 8,500 Systems! Event Viewer <> Reporting
  • 12. Shawn
  • 13. Shawn
  • 14. Shawn
  • 16.  Doesn’t add another agent  Doesn’t “increase the IT tax”  No impact to performance  Track changes over time Shawn
  • 17. Tough client reports now possible Boot Time Average aka What’s normal? Last 30 vs 365 Top/Bottom 10 Error Events Top 10 Errors by category Startup impacting Application crashes ! Shawn
  • 18. Shawn
  • 19. Storage reporting enhanced! • Tagging filesystems by division, product group, performance tier, or other abstract (via Splunk lookup table) • Custom technology add-on to ingest data from Hitachi HNAS • Capacity/Performance reports that span both NetApp and Hitachi • Division summary and per-filesystem views • Actionable items for storage administrators • Outliers view – slow, busy, near-full • Stale data reporting – big chunks of unused data Lee
  • 20. Lee
  • 21. Lee
  • 22. Lee
  • 24. No good deed, etc…what’s next? • Lookup/compare by: • Location • AD OU • Manager • Type • Model • Manufacturer Shawn
  • 25. Client dashboard • Measurements • Make, Model, CPU, Memory, Disks, Encryption status, etc. • Age of Windows installation • Most common errors • Last N errors • SCCM Data • Installed software • Update status • Changes! • Hardware • Software • AV Data • Versions • Activity Shawn
  • 26. Client dashboard with Splunk • Measurements • Make, Model, CPU, Memory, Disks, Encryption status, etc. • Age of Windows installation • Most common errors • Last N errors • SCCM Data • Installed software • Update status • Changes! • Hardware • Software • AV Data • Versions • ActivityX vs Normal X over Time Shawn
  • 27. Storage reporting • Reports • Filer configuration auditing • Geographic visualization • Long term (5-year) reports leveraging summary indexes • Matching workloads to appropriate performance tier • Alerting • Alert filesystem owners on near- capacity using lookup table • Infrastructure • Web frontend to edit tags in lookup table • Division-specific view roles to limit access/confusion • Ingest additional HDS metrics • Ingest Symantec NetBackup logs • Round the learning curve on data models, simplify Lee
  • 28. Lessons learned • You have data in more places than you might think. • You don’t always need a huge license purchase to answer hard questions. • Use the provided apps for inspiration (and for cut/paste). Don’t treat them as an end state. Shawn Lee
  • 29. Copyright © 2015 Splunk Inc. Thank You! Shawn Roberts shawn_roberts@mentor.com +ShawnRobertsNerd Lee Melvin lee_melvin@mentor.com linkedin.com/in/lmelvin

Editor's Notes

  • #8: Mostly Windows OS
  • #9: And BTW, they are clients.
  • #10: I went shopping for a “Client Monitoring” tool. There aren’t any options in this space.
  • #11: We have a great working relationship with Microsoft. I asked them for guidance.
  • #12: Here’s our conversation.
  • #13: Now that I could get the logs in one place, it was much easier to go shopping.
  • #14: I happened to be attending OSCON around the same time…
  • #15: I talked with Splunk.
  • #16: With Windows Event Forwarding and Splunk, I’m able to put together a fairly simple solution.
  • #17: All green.
  • #19: Also, we are able to perform on demand reporting to solve tough client problems like this one.
  • #24: We’re a little bruised from the journey, but we’re in a good place.
  • #26: The next project I’ve been tasked with is creating a Client Dashboard to help our help desk and desktop administrators. Without Splunk, I can do a lot with DB queries and HTML.
  • #27: With Splunk I can call out what’s important in all that data. This is really useful to our admins who don’t have a lot of familiarity with each system they work with.