First step as part of this module is to understand what really Splunk is.
When you usually read about Splunk on Internet blog or speak about Splunk with your colleagues.
You would have heard some of these points.
The first point here is.
That comes up when discussing about Splunk.
Some people call it as a log management or a log collection tool.
Yes, it can be a log management or log collection tool.
It can collect logs and it can manage those logs as per organizational policy.
But that is not a.
And one more common point that comes up whenever a discussion on Splunk is going on, saying it as a
IT monitoring tool or application performance monitoring tool, if you ask me.
Yes, of course I will say it as a monitoring tool.
It can monitor your CPU, RAM, hardware usage, etc., which all the typical monitoring tool does and
also can alert you based on threshold conditions that you mention as part of your alerts.
Also, as part of application monitoring is concerned, it can monitor or keep track of gvm heap size,
response, time of your request, website status, threat logs and the thread usage by applications,
etc. and so on.
So to conclude, yes, Splunk can be used as a monitoring for it.
Our infrastructure and also it can monitor your application performance.
So the next point in our discussion is big data domain or where Splunk has been seen adding great values
and getting the most out of the data available inside the organization in which it is projected as a
big data analytical platform.
And also it has been used to get inserts of business intelligence like cost per click views, per page
advertisement, revenues and impacts from the campaigns that are run on social media like Facebook,
Instagram or LinkedIn.
And a few more points would be like identifying sources from where the traffic has been originated.
It might be social media or search engines or other third party sites on the Internet.
And now moving on to our next point, SIM, which stands for Security Information and Event Management,
which is used as part of their SOC in most of the organization and plays a vital role in securing their
organization since Splunk can be used in security also at its position as a next generation SIM solution,
it is a major competitor for traditional Sims like IBM, Q Radar, SB, oxide, logarithm, etc. And
this vertical is the most active as of now.
When I say most active, it is most active in terms of growth, revenue improvements and the innovations
that are happening in this domain.
When you see us Splunk perspective and the next point, we can see that operational intelligence, which
has been coined by Splunk itself as a tagline for its product, and it refers to all the points we have
discussed before and many more in this discussion of how we can define Splunk.
If you ask me basically what Splunk is, I would simply say it is like a Google for your organization,
where all the data from your organization has been fed into Splunk, indexed, and it is stored inside
Splunk.
So that any time you need.
You can just write a search like what you search in the Google or any other search engines.
You will get information that is specific and related only to your organization.
All the data that has been fed to Splunk in your organization and if you know how to search, it will
be like a mini Google for your organization where you'll be able to find quick solution, get value
out of what data is in your organization, and to troubleshoot any issues inside your organization.