Copyright

2014 Splunk Inc.

Extend Splunk by
Visualizing Data using
Tableau and the
ODBC driver
Sharad Kylasam
Sr. Product Manager, Splunk
Ashley Jaschke
Product Manager, Tableau
Joe Specht
Sr. Director Systems Infrastructure

Disclaimer
During the course of this presentaNon, we may make forward-looking statements regarding future events or the
expected performance of the company. We cauNon you that such statements reect our current expectaNons and
esNmates based on factors currently known to us and that actual events or results could dier materially. For
important factors that may cause actual results to dier from those contained in our forward-looking statements,
please review our lings with the SEC. The forward-looking statements made in the this presentaNon are being made as
of the Nme and date of its live presentaNon. If reviewed aVer its live presentaNon, this presentaNon may not contain
current or accurate informaNon. We do not assume any obligaNon to update any forward-looking statements we may
make. In addiNon, any informaNon about our roadmap outlines our general product direcNon and is subject to change
at any Nme without noNce. It is for informaNonal purposes only, and shall not be incorporated into any contract or
other commitment. Splunk undertakes no obligaNon either to develop the features or funcNonality described or to
include any such feature or funcNonality in a future release.

Agenda
!
!
!
!
!

Overview of Splunk ODBC driver

Benets and usage scenarios
Overview of Tableau
How Splunk ODBC driver is used at Tableau
Demos

Overview

Turning Machine Data Into Business Value

Index Untapped Data: Any Source, Type, Volume
Online
Services

On-
Premises
Servers

Applica<on Delivery

Web
Services

Security

GPS
LocaNon
Networks

Private
Cloud

Storage

Messaging

Online
Shopping
Cart

Public
Cloud

Smartphones
and Devices

Custom
ApplicaNons

RFID
Energy
Meters
Databases

Web
Clickstreams

Copyright 2014 Splunk Inc.

IT Opera<ons

Packaged
ApplicaNons

Desktops

Telecoms

Ask Any Ques<on

Call Detail
Records

Security, Compliance
& Fraud
Business Analy<cs
Industrial Data &
Internet of Things

Splunk: ComplemenNng BI Investments

Splunk Business Analytics

Splunk Complements Exis<ng Business Intelligence Technologies

NEW CLASS OF
DATA FOR BUSINESS
ANALYTICS

REAL-TIME
BUSINESS
INSIGHTS

ENRICH MACHINE
DATA WITH
STRUCTURED DATA

Splunk ODBC driver

!
!
!
!
!

Makes it easier for non-technical users to gain machine data insights from
Splunk
Enables use of tools that business users are already familiar with
Leverage the enhanced visualizaNon capabiliNes that tools like Tableau
provide
Correlate machine data with other structured data to gain new business
insights
ODBC v2 now in Beta!
Support for Data Models
Signicantly improved performance

Typical Workow
Step 1: Business user
communicates data
requirements to Splunk
Admin

Business user

Splunk admin

Step 2: Splunk admin

authors Saved search/
Data model in Splunk
thereby making it
available to ODBC driver
9

Typical Workow (contd)

Step 3: Business user
uses tool to access saved
search / data model and
retrieve data from
Splunk

ODBC driver
(SQL to SPL
translation
layer)
Business user

10

Tableau Overview

Ashley Jaschke
Product Manager

Tableaus Mission

12

Tableau Products
Tableau Desktop

Tableau Server

For Anyone

For Organizations

Explore and visualize data

Self-service analytics for everyone
Blazing speed against massive data

Tableau Online
For Organizations
Tableau Server hosted in the cloud
Subscription pricing
Connect to live cloud data sources

Complete business intelligence system

Web dashboards and applications
Secure information management
Enterprise scalability

Tableau Public
For Public Websites
Interactive data for websites
Online storytelling with data
Cloud technology platform

Workow
extract
Information
consumers

connect
live

Repository

Presentatio
n

Data
Server

Cache

extract
connect
live

Tableau Desktop
Self-service visual
data analysis

Security
Management/Automation
Tableau Server
Rapid fire business intelligence

14

Web & mobile

users

Why Tableau + Splunk?

Splunk Saved Searches as a data source in Tableau makes real-7me
insights from machine data more accessible to IT as well as the
business user
Provides machine data to business users in an interface that they are
familiar with for data discovery and sharing via Tableau dashboards
Enables Tableau users to blend structured data they are already using
with new machine generated data

15
15

Demo

Joe Specht
Sr. Director,
System Infrastructure

Tableau Splunk ImplementaNon

6 Indexers
3 search heads
150GB daily ingest
7TB storage prod
5TB storage for Dev

5TB storage for Sandbox

!
!
!
!

17

Splunk Users at Tableau

!
!

OperaNons Monitoring, TroubleshooNng, and ReporNng

Both Splunk searches and Splunk as a Tableau Data Source

Development Performance TesNng, Bug analysis, and

TroubleshooNng
Both Splunk searches and Splunk as a Tableau Data Source

!
!
!

MarkeNng Usage Analysis

Splunk as a Tableau Data Source No use of splunk data prior to ODBC

Business Analysts Conversion Rates and Product Downloads

Splunk as a Tableau Data Source No use of splunk data prior to ODBC

ExecuNves Reports

Splunk as a Tableau Data Source No use of splunk data prior to ODBC

18

Splunk Use Cases at Tableau

Department

Use Cases

Benets

OperaNons

Health monitoring
Error drilling

Reduced mean Nme to failure

Contextual Search renement

Development

Error Analysis
Performance Analysis

Visualizing impact of changes

Self service

MarkeNng

LocaNon based data

Regional Usage Data

Self service

Business Analysts

Trail download
conversions

Access to Splunk for non-tech

Self Service

ExecuNves

ReporNng

E-mail friendly reports

19

Use Case Screen Shots

20

Demo Outline
Show ease of connecNng
1.
Show sample Splunk search saving to report
2.
Show accessing that over ODBC
3.
Show using that in Tableau Desktop
4.
Show publishing the data source to server and having it auto refresh
Show nished workbooks
1.
Drill down on server error
2.
AcNons linking to Splunk searches with variables lled in
3.
Blending with other data (Rack tables / server rack locaNons)
4.
Link back to Splunk with variables
5.
AcNons to Zabbix or test links
6.
Show dashboard ltering
21

Demo Outline

22

Demo Connect

23

Demo Outline

24

Demo Outline

25

Demo Ops

26

27

28

29

30

Demo Summary
Splunk ODBC allows Tableau to enhance Splunk
! Simple to connect
! Easy to create complex visualizaNons
! Drilling down on an issue is fast with ltering
! Blending data from other sources enriches details
!

Tableau is easy to link back Splunk with narrowed searches

31

Quick Tricks
Splunk ODBC allows Tableau to enhance Splunk
! Use short duraNon searches for creaNon and change the duraNon
aVer it is nalized
! Use Tableau Server to incrementally extract the data
!
!

Use the |elds + eld_name to limit measures and dimensions

Use lters and acNons to link back to Splunk for detail invesNgaNon

32

Future Uses Planned

!
!
!

IntegraNon with Akamai log data

Rollout to Corporate IT systems in house
Tableau log le revamp to be more machine friendly

33

THANK YOU