SplunkLive! Stockholm 2016 - Telia Norway

16
Copyright © 2015 Splun Inc. Utilizing IT Service Intelligence at Telia Norway Jan Roger Presterud Service Manager

Transcript of SplunkLive! Stockholm 2016 - Telia Norway

Page 1: SplunkLive! Stockholm 2016 - Telia Norway

Copyright © 2015 Splunk Inc.

Utilizing IT Service Intelligence at Telia NorwayJan Roger Presterud

Service Manager

Page 2: SplunkLive! Stockholm 2016 - Telia Norway

2

Mobile operator in Norway, part of Telia CompanySecond largest operator in Norway – 4 brandsAwarded the best 4G operator in NorwayUnit: Service Assurance and Operations, IT Services– Quality measurement and reporting– Owner of Service Management toolboxes (Splunk, Nagios etc)

Splunk ITSI – first trial in Feb’16

Page 3: SplunkLive! Stockholm 2016 - Telia Norway

3

My Background and Role18 years in the mobile business; Value Added Services and IT-solutions Various positions – Operations / Development / Service ManagementCurrently a Service Manager – combined mobile and IT services– Business Support Solutions

Sales solutions Self supporting channels

– Products & Services for B2B customers

A business approach – applications vs infrastructureTag line - <tbd>Everything can be measured – but should it? My head has a 7 litre capacity!

Page 4: SplunkLive! Stockholm 2016 - Telia Norway

4

The beginning…Key challenges

Difficulty in viewing the business impact/business value of incidents or bad qualityUncertainty in the business about defining KPIs and business targetsFragmented organization with separate responsibilities, proved difficult to have an end2end view on qualityData was missing from several sources in the e2e value chain

Page 5: SplunkLive! Stockholm 2016 - Telia Norway

5

How We Got StartedKey challenges

From a typical Telecom tradition; solutions have evolved from single, large system to distributed, autonomous, cooperating servicesLack of real user data, compensating – user simulation probes generating data – not trustedIneffective root cause analysis; time consuming, based on unprecise inputAgile methods not well supported; probe config laggingReactive instead of proactive

Page 6: SplunkLive! Stockholm 2016 - Telia Norway

6

Our goals…• New focus - from technical KPIs to business and customer service view -

SLA achievement scores as the highest level• Provide transparency of service quality throughout the organization

Page 7: SplunkLive! Stockholm 2016 - Telia Norway

7

Data to useLack of machine generated data – low correlation & data quality

– Situation: Lack of machine generated data – user simulation tool gave some end user experience, but not thrusted

– Struggling with: Several tools and systems with no easy way to correlate among them

– Wanted: A centralized view to correlate correct data

– Enter Splunk: pre for Splunk-ification; made a standardized application logging framework. ITSI -> improved correlation helping out in root cause analysis

Screenshot here

Correct?

Page 8: SplunkLive! Stockholm 2016 - Telia Norway

8

Improved Business viewService Health Score

– Situation: Uncertainty concerning the actual service quality

– Struggling with: “Noise” from Sales, KAMs, management - spending much time to inform/make reports etc

– Wanted: An easy way to present close to real time quality visualization

– Enter Splunk: Splunk ITSI and Glass Tables presentation of service quality gave a more “calmed down” situation

Screenshot here

Page 9: SplunkLive! Stockholm 2016 - Telia Norway

9

KPIs at a glanceService Analyzer for different responsible teams

– Situation: Indications of decreased quality of services

– Struggling with: ad hoc analysis, based on assumptions

– Wanted: A centralized view with real and relevant info about “my services”

– Enter Splunk: Defining Service Analyzer views for the different responsible teams have improved the awareness and efficiency in prioritization of improvement activities

Screenshot here

Page 10: SplunkLive! Stockholm 2016 - Telia Norway

10

KPIs and Architecture info combinedGlass Table usage

– Situation: Root cause analysis took long time

– Struggling with: unstructured way of analysis, spending time on irrelevant data

– Wanted: A centralized view of in-scope systems and relevant KPIs

– Enter Splunk: Combining architectural information with KPIs really improves the operational staffs ability to pinpoint their analysis for root causes

Screenshot here

Page 11: SplunkLive! Stockholm 2016 - Telia Norway

11

Business ReportingIn progress* in Telia Norway

– Situation: Service reviews on a monthly basis is a requirement for several SLAs

– Struggling with: Real facts about the service levels achieved, combined sources of information

– Wanted & Achieved: Improved view through Health Scores – need to tag deviation info

– Enter Splunk: want to use ITSI functions to make a monthly sum up, with all relevant info – including deviations and relevant info about corrective actions. In progress these days.

Screenshot here

Page 12: SplunkLive! Stockholm 2016 - Telia Norway

12

KPIs and Business info combined

– Wanted: A centralized view into user transactions and related business figures, e.g. Sales channels

– Enter Splunk: Mixing KPIs and relevant business info (like revenue) have made an important input to evaluating campaigns etc

Screenshot here

Page 13: SplunkLive! Stockholm 2016 - Telia Norway

13

Splunk at Telia Norway

• Enterprise 6.4.3 (upgrading soon to 6.5)

• IT Service Intelligence 2.4.0• License: 100 GB/day

Page 14: SplunkLive! Stockholm 2016 - Telia Norway

14

The future…

Add more data source to get true e2e application

mapping

Finalize the Splunk setup for the 11 most important IT

services in the BSS portfolio - using the Glass Table

visualization for e2e at a glance

Improve root cause analysis by using Deep Dives for even

more services

Maximize the utilization of the Anomaly Detection

featureanalysis

Page 15: SplunkLive! Stockholm 2016 - Telia Norway

15

Key lessonsITSI - e2e visualization of services in Glass Tables is

highly appreciated by several parts of our

organization (Business, Management etc)

ITSI – really improves the correlation of

different data, really useful in root cause

analysis

Splunk is very useful to diagnose issues in

testing and production (functional- &

performance-wise)

Page 16: SplunkLive! Stockholm 2016 - Telia Norway

Thank You