© 2019 SPLUNK INC.

IoT Analytics @ Splunk

Funktionalitäten kurz und knackig

Ronald Perzul
 © 2019 SPLUNK INC.

Forward- During the course of this presentation, we may make forward‐looking statements regarding
future events or plans of the company. We caution you that such statements reflect our

Looking current expectations and estimates based on factors currently known to us and that actual
events or results may differ materially. The forward-looking statements made in the this

Statements presentation are being made as of the time and date of its live presentation. If reviewed after
its live presentation, it may not contain current or accurate information. We do not assume
any obligation to update any forward‐looking statements made herein.

In addition, any information about our roadmap outlines our general product direction and is
subject to change at any time without notice. It is for informational purposes only, and shall
not be incorporated into any contract or other commitment. Splunk undertakes no obligation
either to develop the features or functionalities described or to include any such feature or
functionality in a future release.

Splunk, Splunk>, Turn Data Into Doing, The Engine for Machine Data, Splunk Cloud, Splunk
Light and SPL are trademarks and registered trademarks of Splunk Inc. in the United States
and other countries. All other brand names, product names, or trademarks belong to their
respective owners. © 2019 Splunk Inc. All rights reserved.
 © 2019 SPLUNK INC.

Who am I?
NAME: OFFICIAL TITLE:
Ronald Perzul Staff Consulting Sales Engineer

WHAT I DO:
Advise customers and prospects on Splunk solutions in the area of IoT and
IT Operations
PREVIOUS ROLES:
lead consultant | trusted advisor | solution architect | project
manager
FAVORITE QUOTE:
EMPLOYERS:
"Learning never exhausts the
SAP | IBM | Splunk
mind."
— Leonardo Da Vinci
FAVORITE MOVIE:
INTERESTS: Blade Runner
Traveling, board and videos games, my
family
Splunk for
Manufacturing
Intro

© 2019 SPLUNK INC.

 © 2019 SPLUNK INC.

Splunk turns manufacturing data into

Business Outcomes
Any Structure, Any Source, Any Time Scale

Mfg Business Engineering Supply

IT Security IoT
Apps Users Chain

Powered by AI and ML
On-Premise Cloud

Splunk >enterprise Splunk >cloud

Access to Expanded Data Universe

 © 2019 SPLUNK INC.

Splunk for Manufacturing

From Investigation to Automation

Prescriptive Maintenance

Predictive Maintenance Predict downtime of

Advanced Monitoring equipment, make
& Investigation Forecast and predict recommendations, and
downtime of critical act on recommendations
Integrate and manage assets with machine
Downtime Investigation
data across complex learning to predict
Perform simple data sources, and failure
monitoring, alerting, applications to drive
and diagnostics across equipment observability
disparate data sources
 © 2019 SPLUNK INC.

Use Case: Capture logs/sensor data in real-time and

Architecture Example correlate data with quality metrics stored in MES,
ERP, etc. or other systems to further enrich this data.
Splunk Purdue Model - Simple
IoT Analytics

Level 0 Level 1 Level 2/3 Level 4

Heavy UF / HF Optional
Forwarder

FieldBus Control OT Enterprise and Corporate

Analytics
Strong ecosystem to ensure data connectivity and acquisition as well as implementation.
 © 2019 SPLUNK INC.

Use Case: IoT Analytics Plattform

Anforderungen und Benefits

Anforderungen:
• Anbindung an MQTT Broker
• Support von unstrukturierten Daten und Metriken
• Klassische Funktionalitäten wie Reports, Dashboards, Alarmierung

Industrie • Eingebaute ML Funktion oder Erweiterung durch Frameworks

• AR/VR/Mobile Erweiterungen
Technologiekonzern • Self-Service Funktionalitäten: Ad-Hoc Analysen und Korrelationen durch
Anlagen- und Prozessingenieure
(Bestandskunde)
Benefits:
• Fokus der IT auf Betrieb und Datenbereitstellung
• Nutzung vorhanderer Infrastruktur für IoT Use Cases
• Wiederverwenden von vorhandenem Know-How
• Schnelle Implementierung und geringe Aufwände
Fast, Easy,
Intuitive
Analytics

© 2019 SPLUNK INC.

Splunk Enterprise 8.0 © 2019 SPLUNK INC.

Metrics and Events

Metrics vs. Events
Metrics Events
Set of numbers describing a particular process or Immutable record of discrete events that happen
activity over time
Measured over intervals of time – i.e., time series Come in three forms: plain text, structured, binary
data Common event sources:
Common metrics sources: • System and server logs (syslog, journald)
• IoT Sensors (temperature readings) • HEC
• System metrics (CPU, disk memory) • APIs (Twitter, Wunderground)
• Infrastructure metrics (AWS CloudWatch) • Application, platform and server logs (log4j, log4net, Apache, MySQL, AWS) HEC
• Web tracking scripts (Google Analytics) • External apps (EAM, Work Order Mgmt., etc.)

Equivalent to
1 metric value
Sample Metric Sample Log
1481050800 brearing.temperature 42.12345 hq:us-west-1
[29/Aug/2017 08:47:05:316503] "POST /cart.do?uid=84e8d742-a31d69&action=remove&&product_id=BS-
2&JSESSIONID=SD6SAL4FF1ADFF9 HTTP 1.1" 200 2569 "http://www.buttercupenterprises.com/product.screen?
product_id=BS-2" "Mozilla/5.0 (Intel Mac OS X 10_12_2) AppleWebKit/537.36 (KHTML, like Gecko)
Timestamp Metric Name Value Dimensions Chrome/57.0.2957.0 Safari/537.36" 98
Splunk Enterprise 8.0

Splunk Enterprise
Analytics Workspace
Self Service

• Create better performing streaming

metrics alerts in a few quick steps
directly from the results of visual
analysis

• Analyze Events, Alerts and Metrics

together

• Visually compare variations in your

metrics with statistical metrics

• Create more types of dashboard panels

and reports
 © 2019 SPLUNK INC.

Demo – Self-Service Diagnostics

Recommended reading:

https://www.splunk.com/en_us/blog/iot/self-
service-analytics-for-the-shop-floor-part-i-
splunk-core-concepts.html

https://www.splunk.com/en_us/blog/iot/self-
service-analytics-for-the-shop-floor-part-2-a-
practical-example-using-mqtt.html

Use Case: Self-service diagnostics and troubleshooting, monitor and

correlate all operational data.
 © 2019 SPLUNK INC.

Demo – Visualization Framework

Use Case: Monitor and visualize

complex manufacturing processes
or use for replacement of existing
Andon Boards to display key
production KPI’s.
 © 2019 SPLUNK INC.

Demo – IT/OT Monitoring with ITSI

Use Case: Monitor the availability and

interoperability of business services, between
systems and interfaces involved, from IT to OT.
Splunk Machine Learning Toolkit 5.0

Machine Learning
Toolkit
Splunkbase App

• Navigate modeling with a new,

modern showcase layout
• Tackle your problems with smarter
assistants like the Smart Outlier
Detection Assistant for anomaly
detection
• Applicable to many use cases with
the Smart Forecasting Assistant
with Multivariate Forecasts and
Special Days Effects

Use Case: Predictive Maintenance and Predictive Quality. Use

Splunk’s Machine Learning toolkit to understand all correlations as
they are happening in real-time.
© 2019 SPLUNK INC.
Connected
Experiences

© 2019 SPLUNK INC.

 © 2019 SPLUNK INC.

Splunk Connected Experiences

Delivering contextual insights seamlessly for better, faster decisions

Stay connected with on- Empower non-technical Provide contextual insights

the-go visibility users to access data that inspire action
Connected Experiences

Splunk® AR on iOS

● Splunk® Workflow Automation

Consume data in AR and act on it through
workflow playbooks
Use Case: execute automated actions based on manual
machine inspection results.
● Media Notes
Add video notes, audio notes, image notes,
and pdf notes to workspaces

● Chart Support
Support extended to all basic Splunk®
chart types
 © 2019 SPLUNK INC.

Demo – Augmented Reality

Use Case: Provide access to operating manuals or

videos to fix issues directly at the asset or just
understand machine behavior without access to a
laptop or workstation.
 © 2019 SPLUNK INC.

Thank You
Ronald Perzul
rperzul@splunk.com