Using splunk to manage aws – gaining transparency into cloud computing aws summit london 2016

7
Copyright © 2016 Splun Inc. Using Splunk to Manage AWS – Gaining Transparency into Cloud Computing Yuval Tenenbaum Head Of Cloud Practice EMEA At Splunk

Transcript of Using splunk to manage aws – gaining transparency into cloud computing aws summit london 2016

Page 1: Using splunk to manage aws – gaining transparency into cloud computing aws summit london 2016

Copyright © 2016 Splunk Inc.

Using Splunk to Manage AWS – Gaining Transparency into Cloud ComputingYuval TenenbaumHead Of Cloud Practice EMEA At Splunk

Page 2: Using splunk to manage aws – gaining transparency into cloud computing aws summit london 2016

Copyright © 2016 Splunk Inc.

Make machine data accessible, usable and valuable to everyone.

Splunking:to explore machine data

Spelunking:“is the recreational pastime of exploring wild cave systems.”

Page 3: Using splunk to manage aws – gaining transparency into cloud computing aws summit london 2016

3

Splunk Your Machine DataIndex Untapped Data: Any Source, Type, Volume

Online Services Web

Services

ServersSecurity GPS

Location

StorageDesktops

Networks

Messaging

TelecomsOnline

Shopping Cart

Web Clickstreams

Databases

Energy Meters

RFID

On-Premises

Private Cloud

Public Cloud

End-to-End Visibility

Application Delivery

Security, Compliance, and Fraud

IT Operations

Business Analytics

Industrial Data andthe Internet of Things

CloudTrail

Config

Lambda

EC2

Page 4: Using splunk to manage aws – gaining transparency into cloud computing aws summit london 2016

Comprehensive Security Visibility Leveraging AWS CloudTrail

Correlating Data Across Hybrid EnvironmentSpanning AWS and On-Premises

Real-time AWS Cost ManagementReducing Spend on Select AWS Workloads

FINRA Uses Splunk Cloud for Transparency and End-To-End Visibility in AWS

Page 5: Using splunk to manage aws – gaining transparency into cloud computing aws summit london 2016

Same Challenges-Different EnvironmentsSecurity– Are we firewalled correctly?– Do we use all necessary AWS security features?

Compliance– Are we following all published standards?

Networking– Placed servers on the correct network?

Finance– Stayed within budget?

Capacity Planning– Used resources optimally?

5

And all of that in a decentralised Model…

Page 6: Using splunk to manage aws – gaining transparency into cloud computing aws summit london 2016

Impact – Improved Visibility

Meeting IAM AWS Security Best Practices– Lock away your AWS account (root) access keys– Grant least privilege etc…

Focus on low hanging Fruit– Shutting down services over weekend/evenings– Identify AWS services with highest spending– Projects over budgets

Results– 13.5% reduction in billing in line items– Better forecast and control

6

Informed Decision Making

Page 7: Using splunk to manage aws – gaining transparency into cloud computing aws summit london 2016

In Summary: Splunk App for AWS

7

Increase visibility into AWS resource utilisation & user activityEnsure adherence to security and compliance standards with a full audit trailUnderstand AWS environmental dependencies through topology viewsMonitor VPC traffic utilisation for additional security insights


Performance Tuningfiles.informatandm.com/uploads/2018/10/Performance... · 2018-10-15 · Performance Tuning: AWS EC2 and You James Berger SRE Splunk. #ITDEVCONNECTIONS | ITDEVCONNECTIONS.COM

Performance Tuningfiles.informatandm.com/uploads/2018/10/Performance... · 2018-10-15 · Performance Tuning: AWS EC2 and You James Berger SRE Splunk. #ITDEVCONNECTIONS | ITDEVCONNECTIONS.COM

SoM 2017 report 04 - BigPandastart.bigpanda.io/.../images/State_of_Monitoring_2017_report.pdf · Enterprise SMB Top monitoring tools SolarWinds Nagios AWS Cloudwatch Spiceworks Splunk

SoM 2017 report 04 - BigPandastart.bigpanda.io/.../images/State_of_Monitoring_2017_report.pdf · Enterprise SMB Top monitoring tools SolarWinds Nagios AWS Cloudwatch Spiceworks Splunk

SplunkingYour Mobile Apps - .conf19 | Splunk · Introducing Splunk for Mobile Intelligence (Splunk MINT) Deploying Splunk MINT – Intro to SDKs – Getting Started Using Splunk MINT

SplunkingYour Mobile Apps - .conf19 | Splunk · Introducing Splunk for Mobile Intelligence (Splunk MINT) Deploying Splunk MINT – Intro to SDKs – Getting Started Using Splunk MINT

Integrating Splunk with AWS services · PDF fileIntegrating Splunk with AWS services: Patrick Shumate Solutions Architect, Amazon Web Services Olivier de Garrigues Professional Services

Integrating Splunk with AWS services · PDF fileIntegrating Splunk with AWS services: Patrick Shumate Solutions Architect, Amazon Web Services Olivier de Garrigues Professional Services

Splunk user group - automating Splunk with Ansible

Splunk user group - automating Splunk with Ansible

How Edmodo Uses Splunk For Real-Time Tag-Based Reporting of AWS Billing and Usage

How Edmodo Uses Splunk For Real-Time Tag-Based Reporting of AWS Billing and Usage

Building*acloudMbased* SIEMwith*Splunk* Cloud*and*AWS* · Aug*08*08:26:54*snort.acmetech.com*{TCP} ... invokedBy section identifies the AWS service making request on behalf of the

Building*acloudMbased* SIEMwith*Splunk* Cloud*and*AWS* · Aug*08*08:26:54*snort.acmetech.com*{TCP} ... invokedBy section identifies the AWS service making request on behalf of the

AWS Software Business Leader Forumaws-de-media.s3.amazonaws.com/...Splunk_for_AWS.pdfAWS Software Business Leader Forum Splunk’s Journey to the Cloud Andy Hershey. ... • Splunk

AWS Software Business Leader Forumaws-de-media.s3.amazonaws.com/...Splunk_for_AWS.pdfAWS Software Business Leader Forum Splunk’s Journey to the Cloud Andy Hershey. ... • Splunk

Splunk App for AWS at Creative Artists Agencyfiles.meetup.com/4507922/Splunk App for AWS at... · First and foremost - replicating current AWS success in Azure to continue to provide

Splunk App for AWS at Creative Artists Agencyfiles.meetup.com/4507922/Splunk App for AWS at... · First and foremost - replicating current AWS success in Azure to continue to provide

Docker Implementation on AWS Cloud for ICT Solution ... · TECHNOLOGY • Docker Containerization TOOLS • Docker/NewRelic/Splunk PLATFORM • AWS (ECS/Windows 2016R2) LANGUAGES

Docker Implementation on AWS Cloud for ICT Solution ... · TECHNOLOGY • Docker Containerization TOOLS • Docker/NewRelic/Splunk PLATFORM • AWS (ECS/Windows 2016R2) LANGUAGES

Splunk conf2014 - Splunk Monitoring - New Native Tools for Monitoring your Splunk Deployment

Splunk conf2014 - Splunk Monitoring - New Native Tools for Monitoring your Splunk Deployment

Integrating AVANAN with AWS S3 for Splunk logs - Part One · > Select “Report security events to Splunk” if you want all new security events to be uploaded (recommended). > Select

Integrating AVANAN with AWS S3 for Splunk logs - Part One · > Select “Report security events to Splunk” if you want all new security events to be uploaded (recommended). > Select

Splunk Enterprise on the AWS Cloud - Cloud Object … Web Services – Splunk Enterprise on the AWS Cloud September 2017 Page 2 of 23 Step 2. Subscribe to the Splunk Enterprise AMI

Splunk Enterprise on the AWS Cloud - Cloud Object … Web Services – Splunk Enterprise on the AWS Cloud September 2017 Page 2 of 23 Step 2. Subscribe to the Splunk Enterprise AMI

Big Data In The Cloud - Splunk · Big Data In The Cloud AWS EMR and Splunk Analytics for Hadoop Patrick Shumate | Solutions Architect, AWS Simon O’Brien | Staff Sales Engineer,

Big Data In The Cloud - Splunk · Big Data In The Cloud AWS EMR and Splunk Analytics for Hadoop Patrick Shumate | Solutions Architect, AWS Simon O’Brien | Staff Sales Engineer,

Referent / Redner Benjamin Tiggemann · 2015-07-08 · Splunk for Exchange Splunk for Enterprise Security* Splunk for Vmware Splunk for PCI Compliance* Splunk for Windows Splunk for

Referent / Redner Benjamin Tiggemann · 2015-07-08 · Splunk for Exchange Splunk for Enterprise Security* Splunk for Vmware Splunk for PCI Compliance* Splunk for Windows Splunk for

stackArmor Security MicroSummit - AWS Security with Splunk

stackArmor Security MicroSummit - AWS Security with Splunk

Splunk For IT Operational Intelligence · • Splunk Apps –Splunk App for VMware –Splunk Apps for Citrix & Hyper V –Splunk App for Microsoft Exchange –Splunk App for Active

Splunk For IT Operational Intelligence · • Splunk Apps –Splunk App for VMware –Splunk Apps for Citrix & Hyper V –Splunk App for Microsoft Exchange –Splunk App for Active

Installing Splunk Enterprise on AWS · Deploying Splunk Enterprise on AWS Instance Setting Up EC2 Instance Virtual machines on AWS EC2, also called instances, have many advantages.

Installing Splunk Enterprise on AWS · Deploying Splunk Enterprise on AWS Instance Setting Up EC2 Instance Virtual machines on AWS EC2, also called instances, have many advantages.

Security Investigation and Rapid Response Using Splunk and ... · Enter Splunk Splunk Enterprise and Splunk Cloud provide an analytics-driven approach to security on the AWS Cloud

Security Investigation and Rapid Response Using Splunk and ... · Enter Splunk Splunk Enterprise and Splunk Cloud provide an analytics-driven approach to security on the AWS Cloud

Gaining*ExecuDve* Supportfor*Splunk*by* PosiDoning*it’s*Value* · Help*Splunk*documentthe* projected*and*already realizedbusinessvalue *of*making*machine*data accessible,*usable,*and*valuable*for*everyone*

Gaining*ExecuDve* Supportfor*Splunk*by* PosiDoning*it’s*Value* · Help*Splunk*documentthe* projected*and*already realizedbusinessvalue *of*making*machine*data accessible,*usable,*and*valuable*for*everyone*