SFBA Splunk Usergroup meeting September 4, 2024

SFBA Splunk Usergroup meeting September 4, 2024: “Splunk-ify” with Cisco Splunk + CloudFabrix Robotic; New features in Dashboard Studio

1. © 2019 SPLUNK INC.
SF Bay Area Splunk User Group
Meeting September 4, 2024

2. © 2019 SPLUNK INC.
“Splunk-ify” with Cisco Splunk + CloudFabrix
Robotic Data Automation Fabric (RDAF)
Shailesh Manjrekar, CloudFabrix

3. 1 CloudFabrix Proprietary and Confidential. © 2015 -2024
CloudFabrix+ Splunk
Telco Service Assurance
Campus Analytics
Unified Network Observability
Asset Analytics
“Integrate the past and Invent the future”
Shailesh Manjrekar, Chief Marketing Officer [email protected]

4. 2 CloudFabrix Proprietary and Confidential. © 2015 –2024
Agenda
➢CloudFabrixand Splunk –Better
Together solutions
➢Telco Service Assurance
➢Campus Analytics
➢Unified Network Observability
and Automation
➢Asset Analytics
➢Demo and Next Steps

5. 3 CloudFabrix Proprietary and Confidential. © 2015 –2024
CloudFabrix a Leader and Innovator in the $32B Observability and
AIOps market –HQ in NA with global presence
Forrester Now
Tech AIOPS -Q2’2022

6. 4 CloudFabrix Proprietary and Confidential. © 2015 –2024
Gartner Peer Insights
All Customer Reviews: Perfect Score 5.0
Gartner Peer Insights are pre-verified by gartner

7. 5 CloudFabrix Proprietary and Confidential. © 2015 –2024
Splunk Partnerversepartner

8. 6 CloudFabrix Proprietary and Confidential. © 2015 –2024
Cisco + Splunk + CloudFabrix=> Better Together
ITOpsand IT Planning
personas
•Asset visibility across
Compute, Network,
Storage, Apps, Licensing
•Technology Refresh,
Datacenter Migrations
•Asset Utilization and
Capacity utilization
•CMDB update
•Cross-domain correlation
Network / NOC Admins
•Unified Network
Observability and
Automation
•Gain visibility for upcoming
renewals
•App visibility for Change
Management and
Technology Refresh
•Campus Analytics
PlatformOps/ Application
Admins
•Service Assurance /
Service delivery
•Application Dependency
mapping
•Cross-domain correlation
with ITSI single pane of
Ops
•Application risk insights for
BCS/BCI

9. © 2024 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 7
Integrated full-stack observability
Logs Integration Cloud-native,
microservices
environments
Unified Experience
(Common look & feel, SSO,
unified AI, deep links)
Traditional three-
tier environmentsLogs Integration
On-prem | SaaS
IT Service Intelligence
Observability Cloud
Platform
Private Public
A view of the Stack
CloudFabrix
RDAF
Cisco &
3rd Party
Infra
Infrastructure
Observability &
Telco Service
Assurance

10. 8 CloudFabrix Proprietary and Confidential. © 2015 –2024
Data Automation has been the “Achilles heel” of
Observability and AIOps
CloudFabrixRobotic Data Automation Fabric (RDAF) -Telemetry / Observability Pipelines address this challenge

11. 9 CloudFabrix Proprietary and Confidential. © 2015 –2024
Splunk + RDAF
CloudFabrix RDAF has strong integration with Splunk. Customers can choose the
options based on their consumption model and preference
RDAF
Splunk
SIEM
Splunk
ITSI
CFX
Apps
B) Consume Data from any Splunk Platform
without Re-ingesting.
Splunk
SIEM
Splunk
ITSI
CFX
Apps
A) Store the data in Splunk and all Apps
from RDAF will be available as Splunk
Base Apps
RDAF

12. 10CloudFabrix Proprietary and Confidential. © 2015 –2024
CloudFabrixApps on Splunk –Greenfield & Brownfield
deployments
Splunk Enterprise Splunk Cloud Platform
Splunk ITSI | AIOps
Content Packs
CloudFabrixSplunk Apps
•Campus Analytics / Asset Intelligence Analytics
•Telco / Unified Network Observability & Automation
Unified Network Observability Data sources
SNM P, CL I
Logs,
SNM P Tr ap s
AP IsQu eu es DB Queries
Data Sources
Devices, Controlle rs, Monitoring
Tools, Op erations Tools,
Automation Tools
Robotic Data Automation Fabric (RDAF)
100 0+
Bot s
Lo w-Code/
No-Code
Com posable
Wo rkfl ows
Da ta Bots
Di s tri bu te d
Da ta Fab ric
Macaw Generative AI
Low Code to No Code
Large Language Model s

13. 11CloudFabrix Proprietary and Confidential. © 2015 –2024
Introducing Splunkifymodule for RDAF
What is Splunkify
●Module on CloudFabrix RDAF
●Provides Seamless Ingestion of Enriched Datainto
Splunk
●Transforms RDAF Dashboards & Apps to Splunk Apps
●Enable Automationin Splunk by leveraging RDAF
automation capabilities
What are the Benefits?
●Combine the power of both platforms to expand the
use cases
○Asset Intelligence
○Telco/SP Use cases
○Observability and more..
●Future Proofing Customer's Investment
RDAF
With S plunkify
SNM P, CL I Event s, SNMP
Traps
AP Is
Qu eu es
DB Queries
Splunk Enterprise Splunk Cloud Platform
Apps
Apps
Apps
Apps
Apps
Apps
BYO Tools and Data

14. 12 CloudFabrix Proprietary and Confidential. © 2015 -2022
1. Telco Service Assurance

15. 13CloudFabrix Proprietary and Confidential. © 2015 –2024
Modern Telco Service Assurance Challenges we hear
•Service Assurance disparate requirements
•multiple domains e.g. DC/Campus/Cloud,
Mobility, Optical, 5G, IP Transport, etc.,
•Multi-Vendor and Multi-cloud support
•Consolidate siloed tools, support new data-
types
•deployment flexibility
•Visibility as a service
•Persona-based Single Pane of Glass
•Intelligent Analytics & Close loop remediation

16. 14CloudFabrix Proprietary and Confidential. © 2015 –2024
Replicating to other Telco SPs with RDAF & Splunk
Automation as a Service
BYO Tools/Data
Current Toolset
●CloudFabrix
●NSO
●BPA
●DNAC
●NDFC
●Prime
●EPNM
●ServiceNow
●Remedy (AOTS)
●CXTAF
●NexSysOne
●Accedian
●Thousand Eyes
●vManagee
●VMware VeloCloud

17. 15CloudFabrix Proprietary and Confidential. © 2015 –2024
Case Study => Tier1 Telco : Service Assurance in
production with RDAF
Data & Tools Integration
(Bring Your Own Data/Tools)
Asset Visibility
DC, Campus and Retail
Asset Insights
Ops Health, Utilization,
Capacity, Compliance …
Single Pane of Glass
Aggregate analytics from
multiple domain controllers
Service Assurance
X-domain event correlation,
RCA, Incident mgmt,
Predictive insights …
…
25 Datacenters
10+ Campus Sites
5000+ Retail Stores
…
Direct to Device
Integration
Telco
Service
Assurance
Halo-E
SSO
Cisco
TAC
eBonding
AOTS
Ticketing
System
Inventory,
Metrics,
Health
Syslogs
SNMP
Traps
➔Single pane across
Campus, DC and
Retail Stores
➔Network health,
lifecycle insights,
actions, config …
➔Integration with
existing Data,
Tools, BSS/OSS
Cisco
BPA

18. 16CloudFabrix Proprietary and Confidential. © 2015 –2024
Containers
Virtualization
OS
Compute
Storage
Network
Security
Resiliency
Pearl
DDoS
Sanovi
Technology Stack
Ops Tools
Automation
ITSM
•Severe Alert Fatigue from 25 Tools
•SLAs were not met with Customers
•Frequent outages
•Siloed Operations
•War rooms with 20-30 people on each call
•CMDB is outdated and cannot be kept in sync
in fast changing environment
•Lack of Visibility for Execs
•No Direct visibility for End Customers
Case Study => Managed Hosting: Before RDAF
1900 Global Customers Using this Service
Operations Teams
Execs
End Customers

19. 17CloudFabrix Proprietary and Confidential. © 2015 –2024
Containers
Virtualization
OS
Compute
Storage
Network
Security
Resiliency
Pearl
DDoS
Sanovi
Technology Stack
Ops Tools
Automation
CloudFabrix
Customer Facing Tickets
MSP Tickets
CMDB (Maint. Schedules)
MHS Exec App MHS Ops App Customer App
Email Notifications
ITSM & Collab
•Stream-lined Operations
•90%+ Noise reduction
•Real time visibility for Execs
•Direct Real-time visibility for End
Customers
•Real-time visibility into asset
dependencies across the stack
•CMDB is in Sync
Case Study => Managed Hosting: After RDAF
1900 Global Customers Using this Service
Full Stack
Observability & AIOps
Triage Rooms
Predictive Insights

20. 18CloudFabrix Proprietary and Confidential. © 2015 –2024
RDAF Unified Network Observability as Splunk App
Supported Domains
●Data Center
●Campus
●Retail/ Branch
●WAN & SDWAN
●Mobility
Network Topologies Supported
●CDP, LLDP
●BGP, OSPF
●L2 VPN, L3 VPN
●SD WAN Tunnels
Multi-Vendor & Openness
CMDBs
●Service Now
●Remedy
ITOM & Operational Tools
●Thousand Eyes
●Zabbix
●PRTG
●Prometheus
Features
●Fault & Performance
Assurance
●Discovery & Network Topology
Data Collection
●SNMP, CLI
●gRPC (Telemetry)
●Bulkstats
●APIs
●APMs
Supported Domain Controllers
●DCNM
●DNAC
●Meraki

21. 19CloudFabrix Proprietary and Confidential. © 2015 –2024
Splunk ITSI + CloudFabrix RDAF
oSplunk ITSI (IT Service Intelligence) as AIOps App on top of Splunk Platform
oCloudFabrix provides ITSI Content Packs for following domains:
oInfrastructure Observability and Assurance
oDatacenter Infrastructure
oCampus
oSDWAN
oTelco Service Assurance
oService Mapping and Chaining
External Alerts
ITSI Services and
KPIs
Notable Events Episodes
Correlation
Searches
Notable Event
Aggregation Policies
Aggregation
Policy Action
Rules
Act ionable
Ale rt s
Content Packs
CloudFabrix RDAF
Splunk ITSI
CloudFabrixContent Packs

22. 20CloudFabrix Proprietary and Confidential. © 2015 –2024
Telco Service Assurance ITSI Content pack

23. 23 CloudFabrix Proprietary and Confidential. © 2015 -2022
2. Campus Analytics –
Return to Work use case

24. 24CloudFabrix Proprietary and Confidential. © 2015 –2024
DNAC
Platform
MERAKI
Prime Powered by RDAF
Splunk ITSI
Content Pack for Cisco Campus
Networks
Direct to Device
Integration
3rd Party and
Open Source ITOM
➔Return to Office (RTO) analytics
➔Unified Campus Insights
➔Global device view
➔Health & Compliance tracking
➔Location Insights
Campus Analytics -Return to Work

25. 25CloudFabrix Proprietary and Confidential. © 2015 –2024
CloudFabrixCampus Analytics -DNAC

26. 26CloudFabrix Proprietary and Confidential. © 2015 –2024
Multiple DNAC aggregation

27. 27CloudFabrix Proprietary and Confidential. © 2015 –2024
Multiple RTO aggregation

28. 28 CloudFabrix Proprietary and Confidential. © 2015 -2022
3. Unified Network Observability and
Automation

29. 29CloudFabrix Proprietary and Confidential. © 2015 –2024
Unified Network Observability & Automation
Persona –NOCOps and ITOps

30. 30CloudFabrix Proprietary and Confidential. © 2015 –2024
Unified Network Observability Splunk App

31. 31CloudFabrix Proprietary and Confidential. © 2015 –2024
Unified Network Observability ITSI Content pack

32. 32CloudFabrix Proprietary and Confidential. © 2015 –2024
New Topology Widgets to Splunk Apps

33. 33CloudFabrix Proprietary and Confidential. © 2015 –2024
New Topology Widgets to Splunk Apps –service assurance and
visibility
Topology Aware Network Events
Correlation
CDP, OSPF, BGP

34. 34CloudFabrix Proprietary and Confidential. © 2015 –2024
New Topology Widgets to Splunk Apps

35. 35 CloudFabrix Proprietary and Confidential. © 2015 -2022
4. Asset Analytics
Know The Unknowns

36. CloudFabrix Proprietary and Confidential. © 2015 -2022
HW & SW Standards
Standard, Acceptable,
Non-Standard
Product/SKUs/GPL
Customer Dictionaries
5. Near Real-time Asset Collection
✔Collected on-demand or on a schedule
4. Capacity/Utilization
✔Identified under unutilized switches (zero port
switches)
1. Lifecycle and Supportability Insights
✔Identify aging/obsolete (EOL/EOS) assets,
unsupported assets using vendor integrations
3. Plan of Record & Compliance
✔Setup custom compliance policies
✔Identified non-compliant assets
✔Align with Regulatory & Security policy’s as well
as Compliance improvement projection
2. Change Acceleration with ADM insights
✔Applications running on VMs, servers
✔Upgrade dependencies
✔Pre and post upgrade delta reports
Acquired
Assets
Compliance
Engine
Collected Asset
Inventory Data
Partners
Vendor
Vendor Integrations
Asset Discovery
(Agentless)
Lifecycle
Governance
Support/
Contract
Asset Analytics
Asset Context DB
CloudFabrixAsset Analytics
100%
SW & HW
visibility
>250K
Reduction in
Non-compliance
costs
6. Licensing and Certificate Insights
✔Visualize and predict Licenseingand certificate
assets

37. 37CloudFabrix Proprietary and Confidential. © 2015 –2024
Benefits for customers
✓Improved Asset Accuracy to
100%
✓90% to 95% Time Savings
✓Simplified Change
Management
✓No manual intervention,
reduction in FTE
Productivity Gains
FinOps
✓Cost avoidance for reuse of zero-
port utilizations elsewhere
✓Cost Avoidance with capacity
planning and asset utilization
✓OPEX Reduction by 40%
✓Vendor OPEX Negotiation –
Consumption base
Risk Mitigation & Compliance
✓Accurate Software and
Hardware Replacement Costs
✓Accurate refreshes, upgrades,
and updates reduce security
risks
✓De-Coupled 3rd Party
Dependency
Datacenter / Application
Modernization
✓Consolidate multiple tools
used for Asset Discovery
✓Application Dependency
mapping, License and
Certificate management
✓Provide a single source of
Truth

38. Asset Analytics : Splunk App

39. Asset Analytics : Splunk App

40. Asset Analytics : Splunk App

41. 41CloudFabrix Proprietary and Confidential. © 2015 –2024
Asset Analytics as Splunk App
oRisk Rating
oDevices
oImpacted Devices
oReplacement Cost
oRisk by Business
oLocation
oFunction
oImpacted Apps

42. 42CloudFabrix Proprietary and Confidential. © 2015 –2024
Asset Intelligence :
Splunkified APP
Screen Shots
NetworktoServertoApplicationMapping
What is Splunkify
ADM View from Network
oNumber of Switches
oNumber of Servers
oNumber of Apps

43. 43 CloudFabrix Proprietary and Confidential. © 2015 -2022
Thank You!

44. 44CloudFabrix Proprietary and Confidential. © 2015 –2024
Best of both worlds –Splunk + CloudFabrix
Telemetry/Observability Pipelines
Robotic Data Automation Fabric -RDAF
•RDAF’s low-code bot -based architecture
supports 1000+ data sources , especially in
the Telco and multi-vendor Networking
domains.
•These bots are orchestrated to automate
•data integration,
•aggregation,
•transformation,
•privacy, governance,
•enrichment,
•correlation,
•routing and
•Intent -based automation

45. 45CloudFabrix Proprietary and Confidential. © 2015 –2024
CloudFabrixApps on Splunk –Greenfield & Brownfield
deployments

46. 46CloudFabrix Proprietary and Confidential. © 2015 –2024
AIA -Asset Analytics
Real-time Visibility into IT Assets, Dependencies and their Lifecycle Data
“ … saved us time & money… and
greatly simplifiedthe complexities of
tracking Hardware/Software assets
and their dependencies, ... we now
have better control of managing
lifecycle and upgrade initiatives… ”
-Sr. Director, Cloud & IT Ops

47. 48CloudFabrix Proprietary and Confidential. © 2015 –2024
CloudFabrix Solution Protect/Elevate Your Tools Investments
And Delivers Business Outcomes
RDAF
•Unified Visibility & Noise reduction by
over 90%
•Dynamic Thresholds Vs Static
•Improved MTTI & MTTR by 50%+
•Predictive insights and incident
prevention
•Asset visibility & single source of truth
•Error proof change management with
asset dependencies
•Reduce compliance risks by 100%
(EOL/EOS) etc.
•Cost reduction through optimized
resources
Business Outcomes
APM
ITIM
Log
Cloud
ITSM
Lifecycle
ERP
Direct Integration
SNMP, SSH/CLI,
APIs etc.
Data Sources ControllersDevices

48. 49CloudFabrix Proprietary and Confidential. © 2015 –2024
Automated Full Stack Discovery & Topology
Bots &
Pipelines

49. Forward-
looking
statements
`,A?A?A?Aa,SPLUNK,INC0
TA=ABA?,A?A?ABA?ABAeA?aA?ABAqAe,AcaA?,AAqAeA?aABAe,A5AqA?A?aA?AAAZAqAqAWABAeA6,A?A?aA?ABAcABAeA?A?,A?A=aA?,aA?AB,A?A?AATABAA?,A?Aq,A?A=AB,A?aA5AB,A=aA?AAqA?A?,AA?ABaA?ABA,A?AeAABA?,A?A=AB,SABAA?A?ABA?ABABA?,AAA?,AqA5,
A?A?A?A?1,aA?,aAcABAeAABA1,aAeA,A?A=AB,SABAA?A?ABA?ABABA?,EA?AA=aAeA6AB,AAA?,AqA5,A?A?A?Aa1,aA?,aAcABAeAABA0,AAZAZ,A?A?aA?ABAcABAeA?A?,AqA?A=ABA?,A?A=aAe,A?A?aA?ABAcABAeA?A?,AqA5,A=ABA?A?AqA?ABAaAZ,A5aAA?A?,aA?AB,
A?A?aA?ABAcABAeA?A?,A?A=aA?,AAqA?AZA,AAB,AABABAcABA,A5AqA?A?aA?AAAZAqAqAWABAeA6,A?A?aA?ABAcABAeA?A?0,TA=ABA?AB,A?A?aA?ABAcABAeA?A?,aA?AB,AaA?ABA,AqAe,AA?A?A?ABAeA?,ABA?A?ABAA?aA?ABAqAeA?1,ABA?A?ABAcaA?ABA?1,
A5AqA?ABAaA?A?A?1,aAeA,A?A?AqATABAA?ABAqAeA?,aAAqA?A?,A?A=AB,ABAeAA?A?A?A?ABABA?,ABAe,A?A=ABAA=,A?AB,AqA?ABA?aA?AB,aAeA,A?A=AB,AABAZABABA5A?,aAeA,aA?A?A?AcA?A?ABAqAeA?,AqA5,AqA?A?,AcaAeaA6ABAcABAeA?,AaA?ABA,AqAe,A?A=AB,
ABAeA5AqA?AcaA?ABAqAe,AA?A?A?ABAeA?AZA?,aA?aABAZaAAZAB,A?Aq,A?A?0,WAqA?AA?,A?A?AA=,aA?,QABA?A?ABAA?A?1R,QaAeA?ABAABA?aA?ABA?1R,QA?aA?A6ABA?A?1R,QA6AqaAZA?1R,QA?A?AqATABAA?A?1R,QABAeA?ABAeAA?1R,QA?AZaAeA?1R,
QAABAZABABA?ABA?1R,QAcAqAcABAeA?A?Ac1R,QA?ABABAWA?1R,QABA?A?ABAcaA?ABA?1R,QAAqAeA?ABAeA?ABA?1R,QABAeAABaA?AqA?A?1R,QA?A?A?ABA?ABA?1R,QAcaA?1R,A?aA?ABaA?ABAqAeA?,AqA5,A?A?AA=,A?AqA?AA?1,aAeA,A?ABAcABAZaA?,
ABA?A?A?ABA?A?ABAqAeA?,aA?AB,ABAeA?ABAeAABA,A?Aq,ABAABAeA?ABA5A?,A?A?AA=,A5AqA?A?aA?AAAZAqAqAWABAeA6,A?A?aA?ABAcABAeA?A?0,IAe,aAAABA?ABAqAe1,aAeA?,A?A?aA?ABAcABAeA?A?,A?A=aA?,A?ABA5ABA?,A?Aq,IA?J,AqA?A?,A6AqaAZA?1,
AAqAcAcABA?AcABAeA?A?1,aAeA,A?A?AqA6A?aAcA?3,IA?J,AqA?A?,AA?A?ABAeABA?A?,A?AZaAeA?1,ABAeABA?ABaA?ABA?ABA?1,aAeA,AqAATABAA?ABA?ABA?3,aAeA,IA?J,AqA?A?,aA?A?A?AcA?A?ABAqAeA?,aAeA,ABA?A?ABAA?aA?ABAqAeA?1,ABAeAAZA?AABAeA6,
AqA?A?,ABA?A?ABAA?aA?ABAqAeA?,A?ABA6aA?AABAeA6,AqA?A?,A?AeaAeAABaAZ,A?ABA?A5AqA?AcaAeAAB1,A?A?AqAA?AA?A?1,A?ABAA=AeAqAZAqA6A?1,A?A?A?aA?ABA6A?1,AA?A?A?AqAcABA?A?1,AcaA?AWABA?A?1,aAA?A?ABA?ABA?ABAqAeA?,aAeA,
in?estments are forward-looking statements. These forward-looking statements are not guarantees of future performance and ABAeA?AqAZA?AB,
signi?cant risks1 uncertainties and other factors that may cause our actual results1 performance or achie?ements to be materially
di?erent from results1 performance or achie?ements expressed or implied by the forward-looking statements contained in this
A?A?ABA?ABAeA?aA?ABAqAe0,RABaAABA?A?,aA?AB,AaA?A?ABAqAeABA,A?A=aA?,A?A=ABA?AB,A5AqA?A?aA?AAAZAqAqAWABAeA6,A?A?aA?ABAcABAeA?A?,aA?AB,AqAeAZA?,A?A?ABAABAA?ABAqAeA?,aAeA,aA?AB,A?A?AATABAA?,A?Aq,A?ABA?AWA?1,A?AeAABA?A?aABAeA?ABABA?1,
aAeA,aA?A?A?AcA?A?ABAqAeA?,A?A=aA?,aA?AB,AABA?AA?AZA?,A?Aq,A?A?ABAABAA?1,ABAeAAZA?AABAeA6,A?A=AqA?AB,ABAABAeA?ABA?ABA,ABAe,A?A=AB,QRABA?AW,FaAA?AqA?A?R,A?ABAA?ABAqAe,AqA5,CABA?AAqTA?,AcAqA?A?,A?ABAABAeA?,A?ABA?AqA?A?,AqAe,
FAqA?Ac,A?A?AQ,A?AZABA,AqAe,FABAA?A?aA?A?,A?A?1,A?A?A?Aa,aAeA,ABA?A?,AcAqA?A?,A?ABAABAeA?,A?ABA?AqA?A?,AqAe,FAqA?Ac,A?A?AK,A?AZABA,AqAe,SABA?A?ABAcAABA?,A?1,A?A?A?A?1,aA?,A?ABAZAZ,aA?,A?A=AB,QRABA?AW,FaAA?AqA?A?R,
A?ABAA?ABAqAe,AqA5,SA?AZA?AeAWTA?,AcAqA?A?,A?ABAABAeA?,A?ABA?AqA?A?,AqAe,FAqA?Ac,A?A?AQ,A?AZABA,A?ABA?A=,A?A=AB,SEC,AqAe,NAqA?ABAcAABA?,A?A?1,A?A?A?A?0,TA=AB,A5AqA?A?aA?AAAZAqAqAWABAeA6,A?A?aA?ABAcABAeA?A?,AcaAAB,in
A?A=ABA?,A?A?ABA?ABAeA?aA?ABAqAe,aA?AB,AcaAAB,aA?,AqA5,A?A=AB,A?ABAcAB,aAeA,AaA?AB,AqA5,A?A=ABA?,A?A?ABA?ABAeA?aA?ABAqAe0,IA5,A?ABA?ABABA?ABA,aA5A?ABA?,A?A=AB,ABAeABA?ABaAZ,A?A?ABA?ABAeA?aA?ABAqAe1,ABA?ABAe,ABA5,AcaAAB,
a?ailable by Cisco or Splunk1 on Cisco or SplunkTs website or otherwise1 it may not contain current or accurate information. Cisco and
Splunk undertake no obligation to re?ise or update any forward-looking statements for any reason1 except as re?uired by law.
IAe,aAAABA?ABAqAe1,aAeA?,ABAeA5AqA?AcaA?ABAqAe,aAAqA?A?,AeABA?,A?A?AqAA?AA?A?1,A5ABaA?A?A?ABA?1,A5A?AeAA?ABAqAeaAZABA?A?,AqA?,AqA?A?,A?AqaAAcaA?,AqA?A?AZABAeABA?,AqA?A?,A6ABAeABA?aAZ,A?A?AqAA?AA?,AABA?ABAA?ABAqAe,aAeA,ABA?,
A?A?AATABAA?,A?Aq,AA=aAeA6AB,aA?,aAeA?,A?ABAcAB,A?ABA?A=AqA?A?,AeAqA?ABAAB0,IA?,ABA?,A5AqA?,ABAeA5AqA?AcaA?ABAqAeaAZ,A?A?A?A?AqA?ABA?,AqAeAZA?,aAeA,A?A=aAZAZ,AeAqA?,AAB,ABAeAAqA?A?AqA?aA?ABA,ABAeA?Aq,aAeA?,AAqAeA?A?aAA?,AqA?,
AqA?A=ABA?,AAqAcAcABA?AcABAeA?,AqA?,AAB,A?ABAZABABA,A?A?AqAe,ABAe,AcaAWABAeA6,a,A?A?A?AA=aA?ABAeA6,AABAABA?ABAqAe0,WAB,A?AeAABA?A?aAWAB,AeAq,AAqAcAcABA?AcABAeA?1,A?A?AqAcABA?AB,AqA?,AqAAZABA6aA?ABAqAe,ABABA?A=ABA?,A?Aq,
AABA?ABAZAqA?,A?A=AB,A5ABaA?A?A?ABA?,AqA?,A5A?AeAA?ABAqAeaAZABA?ABABA?,AABA?AA?ABAABA1,ABAe,AABA?a,AqA?,ABAe,A?A?ABA?ABABA?,IA?A?ABA,ABAeA?ABA?AA=aAeA6ABaAAZA?J1,AqA?,A?Aq,ABAeAAZA?AAB,aAeA?,A?A?AA=,A5ABaA?A?A?AB,AqA?,
functionality in a future release. The de?elopment1 release1 and timing of any features or functionality described for our products
remains at our sole discretion.
SA?AZA?AeAW1,SA?AZA?AeAW?,aAeA,TA?A?Ae,DaA?a,IAeA?Aq,DAqABAeA6,aA?AB,A?A?aAABAcaA?AWA?,aAeA,A?ABA6ABA?A?ABA?ABA,A?A?aAABAcaA?AWA?,AqA5,SA?AZA?AeAW,IAeA0,ABAe,A?A=AB,UAeABA?ABA,SA?aA?ABA?,aAeA,AqA?A=ABA?,
countries. All other brand names1 product names or trademarks belong to their respecti?e owners.
`,A?A?A?Aa,SA?AZA?AeAW,IAeA0,AAZAZ,A?ABA6A=A?A?,A?ABA?ABA?A?ABA0

50. © 2019 SPLUNK INC.
New Features in Dashboard Studio
Lizzy Li and Jimmy Huang, Splunk

51. `,A?A?A?Aa,SPLUNK,INC0
BaA?,AA?ABa,UA?ABA?,GA?AqA?A?,e,SABA?A?,A?A?A?Aa
What's new
in
Dashboard
Studio

52. `,A?A?A?Aa,SPLUNK,INC0
Dashboard product managers
Lizzy Li
Dashboard Studio
Principal Product Manager
Splunk
Jimmy Huang
Dashboard Framework
Product Manager
Splunk

53. SA?AZA?AeAW,CAqA?A?AqA?aA?AB,TABAcA?AZaA?AB,,e,,TMPLTAFYA?A?AA?A?A?
`,A?A?A?Aa,SPLUNK,INC0
Agenda
●New features released in
Splunk Enterprise 9.2 and 9.3
●Dashboard Framework
EWhat is it?
ENew features
●Tips to make the most of
Dashboard Studio
●Q&A
Dashboard showcased at .conf24

54. `,A?A?A?Aa,SPLUNK,INC0
New features

55. SA?AZA?AeAW,CAqA?A?AqA?aA?AB,TABAcA?AZaA?AB,,e,,TMPLTAFYA?A?AA?A?A?
`,A?A?A?Aa,SPLUNK,INC0
New features in 9.2
●Trellis for Single Values
●Drilldown link to Reports and Search
●WAqA?AWA?AqA?,aAA?ABAqAeA?,A5AqA?,ABA?ABAeA?A?,A?ABABA?ABA?
●Expandable code editor
●Classic to Studio con?ersion report
●AAeA,AcAqA?AB5,
FA?AZAZ,AZABA?A?,aA?,YWA=aA?ZA?,NABA?,ABAe,DaA?A=AAqaA?A,SA?A?AABAqY,AAqAA?5,

56. SA?AZA?AeAW,CAqA?A?AqA?aA?AB,TABAcA?AZaA?AB,,e,,TMPLTAFYA?A?AA?A?A?
`,A?A?A?Aa,SPLUNK,INC0
New features in 9.3
●SAA=ABAA?AZABA,aAeA,API,ABA?A?AqA?A?A?,A5AqA?,
Dashboard Studio
○New dashboard to identify Classic
scheduled dashboards
●Support for multiple interactions on a
A6ABA?ABAe,A?ABA?,
●UA?AaA?AB,ABAeA?A?A?A?,A?A=ABAe,A?AqA?,AAZABAAW,A?Aq,A?ABA?,
A?AqAWABAeA?
●Change panel title and description colors
●AAeA,AcAqA?AB5,
FA?AZAZ,AZABA?A?,aA?,YWA=aA?ZA?,NABA?,ABAe,DaA?A=AAqaA?A,SA?A?AABAqY,AAqAA?5,

57. SA?AZA?AeAW,CAqA?A?AqA?aA?AB,TABAcA?AZaA?AB,,e,,TMPLTAFYA?A?AA?A?A?
`,A?A?A?Aa,SPLUNK,INC0
New features in
Splunk Cloud
9.2.2406
●Tabbed dashboards
●SABAeA6AZAB,A?aAZA?AB,A?aAABaAZ
●Clone examples from Examples
Hub

58. `,A?A?A?Aa,SPLUNK,INC0
Dashboard
Framework

59. `,A?A?A?Aa,SPLUNK,INC0
What is Dashboard Framework?
Visualizations
Dashboard
Framework
SUI,ISA?AZA?AeAW,UIJ

60. `,A?A?A?Aa,SPLUNK,INC0
Get started building custom dashboards
splunkui.splunk.com

61. `,A?A?A?Aa,SPLUNK,INC0
Examples gallery

62. `,A?A?A?Aa,SPLUNK,INC0
Examples gallery

63. `,A?A?A?Aa,SPLUNK,INC0
Recent releases

64. `,A?A?A?Aa,SPLUNK,INC0
Future features

65. `,A?A?A?Aa,SPLUNK,INC0
Questions?
[email protected]
or
@Jimmy Huang

66. `,A?A?A?Aa,SPLUNK,INC0
Tips & tricks

67. SA?AZA?AeAW,0AAqAeA5A?Aa,TABAcA?AZaA?AB,,e,,TMPLTAFYA?A?AA?A?A?
`,A?A?A?Aa,SPLUNK,INC0
●TABA?A?1,A?ABA?A?,A?A?A?AZABAeA61,aAeA,AZABAeAWA?,
●IAcaA6ABA?
●Custom chart colors
●Specifying default chart colors
●BaAAWA6A?AqA?AeA,AAqAZAqA?,aAeA,ABAcaA6AB
●SA?aAABAeA61,AA?A?A?AqAc,A?aAeABAZ,A?ABA?ABAeA61,
and layout
●Specifying panel title and
AABA?AA?ABA?A?ABAqAe,AAqAZAqA?
●Adding rounded corners to
panels
HTML and
CSS
Common use cases are
nati?ely a?ailable in
Dashboard Studio

68. SA?AZA?AeAW,0AAqAeA5A?Aa,TABAcA?AZaA?AB,,e,,TMPLTAFYA?A?AA?A?A?
`,A?A?A?Aa,SPLUNK,INC0
Conditional Panel Visibility
A?0CAqAeA?A6A?A?AB,AcA?AZA?ABA?AZAB,?A?ABA??,aAeA,?A?AeA?ABA??,AAqAeAABA?ABAqAeA?,
A?A=A?AqA?A6A=AqA?A?,SXML,A?AqA?A?AAB,A?Aq,AAqAeA?A?AqAZ,A?AqA?A?,
pA?ABA?ABAABAZABA?A?TAqAWABAep,
2.CAqAeA?A6A?A?AB,A?aAeABAZ,A?ABA?ABAABAZABA?A?,A?ABA?A=,?AABA?ABAeAA??,aAeA,
pA?ABA?ABAABAZABA?A?TAqAWABAep,ABAe,XML,A?AqA?A?AAB,
Classic dashboards

69. SA?AZA?AeAW,0AAqAeA5A?Aa,TABAcA?AZaA?AB,,e,,TMPLTAFYA?A?AA?A?A?
`,A?A?A?Aa,SPLUNK,INC0
Conditional Panel Visibility
A?0CA=ABAAW,A?A=AB,AAqA?,YWA=ABAe,AaA?a,ABA?,A?AeaA?aABAZaAAZAB1,A=ABAAB,
ABAZABAcABAeA?Y,
2.IA5,aA?A?AZABAaAAZAB1,A?AqA?,AaAe,AcAqAABA5A?,A?AqA?A?,A?ABaA?AA=,A?Aq,
that it only returns results when you want the
panel to display
Dashboard Studio

70. SA?AZA?AeAW,0AAqAeA5A?Aa,TABAcA?AZaA?AB,,e,,TMPLTAFYA?A?AA?A?A?
`,A?A?A?Aa,SPLUNK,INC0
Examples
Hub
Check out the Examples Hub for a
more ad?anced conditional
?isibility example5

71. SA?AZA?AeAW,0AAqAeA5A?Aa,TABAcA?AZaA?AB,,e,,TMPLTAFYA?A?AA?A?A?
`,A?A?A?Aa,SPLUNK,INC0
Set Tokens from Search
A?0IAe,XML,A?AqA?A?AAB1,aAA,a,?AAqAeAB?,AqA?,?A?A?AqA6A?ABA?A??,A?aA6,
2.Within that tag1 de?ne a new token name and
A?ABA?,ABA?,A?Aq,A?A=AB,AABA?ABA?ABA,A?ABaA?AA=,A?ABA?A?AZA?,AqA?,ATAqA,
metadata
A?0UA?AB,A?AqA?A?,AeaAcABA,A?AqAWABAe,A?A=A?AqA?A6A=AqA?A?,A?A=AB,
dashboard
Classic dashboards

72. SA?AZA?AeAW,0AAqAeA5A?Aa,TABAcA?AZaA?AB,,e,,TMPLTAFYA?A?AA?A?A?
`,A?A?A?Aa,SPLUNK,INC0
Set Tokens from Search
A?0CA=ABAAW,A?A=AB,AAqA?,YAAAABA?A?,A?ABaA?AA=,A?ABA?A?AZA?A?,AqA?,
AcABA?aAaA?aY,
2.UA?AB,A?ABaA?AA=,A?ABA?A?AZA?A?,AqA?,AcABA?aAaA?a,AABA?ABAA?AZA?,A?A?ABAeA6,
the following syntax:
pSearch name:result.?eldnamep
pSABaA?AA=,AeaAcAB2ATAqA0AcABA?aAaA?ap,
Example:
pActi?ity by sourcetype:result.sourcetypep
Dashboard Studio

73. SA?AZA?AeAW,0AAqAeA5A?Aa,TABAcA?AZaA?AB,,e,,TMPLTAFYA?A?AA?A?A?
`,A?A?A?Aa,SPLUNK,INC0
●Applicable to data sources and
?isualizations
●OA?AABA?,AqA5,A?A?ABAABAABAeAAB,ABA?2,
○IAeAABA?ABAA?aAZ,AqAATABAA?,AqA?A?ABAqAeA?
○TA?A?AB,A?A?ABAABA?A,AqA?A?ABAqAeA?,IAB0A60,
A?A?AZA?AeAW0AZABAeABJ
○Global settings
●YAqA?,AaAe,aAZA?Aq,A?A?ABAABA5A?,AABA5aA?AZA?,
A?AqAWABAe,A?aAZA?ABA?,
○SABAcABAZaA?,A?Aq,?ABAeABA??,
Dashboard
defaults
UA?AB,AABA5aA?AZA?A?,A?Aq,aA?A?AZA?,A?A=AB,
same settings across
AcA?AZA?ABA?AZAB,AqAATABAA?A?

74. `,A?A?A?Aa,SPLUNK,INC0
Q & A

75. `,A?A?A?Aa,SPLUNK,INC0
Thank you