Marketing description

Splunk is the engine for machine data. It collects, indexes and harnesses the machine data generated by all your IT systems and infrastructure - physical, virtual and in the cloud.
Machine data is one of the fastest growing, most complex segments of data in your organization. It's also one of the most valuable, containing a definitive record of user transactions, customer behavior, machine behavior, security threats, fraudulent activity and more.
Splunk collects machine data securely and reliably from wherever it's generated. It stores and indexes the data in real time in a centralized location and protects it with role-based access controls. Splunk lets you search, monitor, report and analyze your real-time and historical data. Now you have the ability to quickly visualize and share your data, no matter how unstructured, large or diverse it may be.
Troubleshoot application problems and investigate security incidents in minutes instead of hours or days, avoid service degradation or outages, deliver compliance at lower cost and gain new business insights. With Splunk you can gain rapid visibility, insights and intelligence for IT and business.

Key selling points

• Identify and resolve issues up to 70% faster and reduce costly escalations by up to 90%
• Monitor systems and infrastructure in real time to identify issues before they impact your business
• See the whole picture across IT to track key performance indicators and make better decisions
• Understand trends and patterns of activity and behavior, gain real-time operational intelligence for IT and the business

Product features

• Collect and index any machine data
  Splunk collects and indexes machine data in real time from virtually any source, format or location. This includes live data from your packaged and custom applications, app servers, web servers, databases, networks, virtual machines, telecoms equipment, OSs and more. No matter the source or format, Splunk indexes it the same way - without custom parsers or connectors to purchase, write or maintain. Once in Splunk, all your machine data is available for troubleshooting, security incident investigations, network monitoring, compliance reporting, business analytics and other valuable uses.
• Search and investigate
  Search and analyze real-time and historical machine data from one place with Splunk. Search for specific terms or expressions. Use Boolean operators to refine your search. Trace transactions across multiple systems. Powerful statistical and reporting commands let you update transaction counts, calculate metrics and look for specific conditions within a rolling time window. Search assistant offers type-ahead and contextual help so that you can access the full power of the Splunk search language.
• Add knowledge
  Splunk automatically discovers knowledge from your machine data at search time so you can start using new data sources immediately. You can add context and meaning to your machine data by identifying, naming and tagging fields and data points. Add information from external source asset management databases, configuration management systems and user directories, making the system smarter for all users.
• Monitor and alert
  Turn searches into real-time alerts that automatically trigger actions such as sending automated emails, running remediation scripts or posting to RSS feeds. Alerts can also send an SNMP trap to your system management console or generate a service desk ticket. Alerts can be set to any level of granularity and can be based on a variety of thresholds, trend-based conditions and complex patterns, such as abandoned shopping carts, brute force attacks and fraud scenarios.
• Report and analyze
  Quickly build advanced charts, graphs and dashboards that show important trends, highs and lows, summaries of top values and frequency of occurrences. Create robust, information-rich reports from scratch without any advanced knowledge of search commands. Drill down from anywhere in the chart to the raw events. Save reports, integrate them into dashboards and view them all from your desktop or mobile device. Create PDFs on a scheduled basis to share with management, business users or other IT stakeholders.
• Create custom dashboards and views
  Create live dashboards in a few clicks using the dashboard editor. Dashboards integrate multiple charts and views of your real-time data to satisfy the needs of different users, such as management, business or security analysts, auditors, developers and sysadmins. Users can edit dashboards using a simple drag and drop interface and change chart types on-the-fly with integrated charting controls.
• Scale to the large IT infrastructures
  The Splunk architecture is based on MapReduce and scales linearly across commodity hardware as data volumes grow. Start small on a single commodity Windows, Linux or Unix server and then deploy Splunk across multi-geography, multi-datacenter infrastructures generating tens of terabytes of data per day.
• Secure data access and single sign-on
  At the core of Splunk is a robust security model. Every Splunk transaction is authenticated, including system activities and user activities through web and command line interfaces. Splunk also integrates with LDAP-compliant directory servers and Active Directory to enforce enterprise-wide security policies.