confidence*in*conclusions:*leveraging* splunk*for ...value*of*datadriven*insights* 1....

24

Upload: phungnga

Post on 09-May-2018

219 views

Category:

Documents


2 download

TRANSCRIPT

Page 1: Confidence*In*Conclusions:*Leveraging* Splunk*For ...Value*Of*DataDriven*Insights* 1. Make*becer,*more*informed*decisions* 2. DemysHfy*the*unknown:*be*certain*projects*are*effecHve**

Copyright  ©  2016  Splunk  Inc.  

David  Uslan  Lead  Data  Analyst,  ICF  Technology  

Confidence  In  Conclusions:  Leveraging  Splunk  For  Data  Driven  Insights  

Page 2: Confidence*In*Conclusions:*Leveraging* Splunk*For ...Value*Of*DataDriven*Insights* 1. Make*becer,*more*informed*decisions* 2. DemysHfy*the*unknown:*be*certain*projects*are*effecHve**

Disclaimer  

2  

During  the  course  of  this  presentaHon,  we  may  make  forward  looking  statements  regarding  future  events  or  the  expected  performance  of  the  company.  We  cauHon  you  that  such  statements  reflect  our  current  expectaHons  and  esHmates  based  on  factors  currently  known  to  us  and  that  actual  events  or  results  could  differ  materially.  For  important  factors  that  may  cause  actual  results  to  differ  from  those  contained  in  our  forward-­‐looking  statements,  please  review  our  filings  with  the  SEC.  The  forward-­‐looking  statements  made  in  the  this  presentaHon  are  being  made  as  of  the  Hme  and  date  of  its  live  presentaHon.  If  reviewed  aQer  its  live  presentaHon,  this  presentaHon  may  not  contain  current  or  

accurate  informaHon.  We  do  not  assume  any  obligaHon  to  update  any  forward  looking  statements  we  may  make.  In  addiHon,  any  informaHon  about  our  roadmap  outlines  our  general  product  direcHon  and  is  

subject  to  change  at  any  Hme  without  noHce.  It  is  for  informaHonal  purposes  only  and  shall  not,  be  incorporated  into  any  contract  or  other  commitment.  Splunk  undertakes  no  obligaHon  either  to  develop  the  features  or  funcHonality  described  or  to  include  any  such  feature  or  funcHonality  in  a  future  release.  

Page 3: Confidence*In*Conclusions:*Leveraging* Splunk*For ...Value*Of*DataDriven*Insights* 1. Make*becer,*more*informed*decisions* 2. DemysHfy*the*unknown:*be*certain*projects*are*effecHve**

Who  Are  We?  

  Established  in  2002    ~450  Employees    –   100  Developers  –  3  Analysts  (“Full  Time  Splunkers”)  

  70,000  Paid  streams  per  day    33,000  Daily  Users    8,000  Daily  Performers  Splunking  since  2012  

3  

Page 4: Confidence*In*Conclusions:*Leveraging* Splunk*For ...Value*Of*DataDriven*Insights* 1. Make*becer,*more*informed*decisions* 2. DemysHfy*the*unknown:*be*certain*projects*are*effecHve**

What  Is  The  Value  Of  Insight?  

Page 5: Confidence*In*Conclusions:*Leveraging* Splunk*For ...Value*Of*DataDriven*Insights* 1. Make*becer,*more*informed*decisions* 2. DemysHfy*the*unknown:*be*certain*projects*are*effecHve**

What  IS  Insight?  

5  

“The  essence  of  profound  insight  is  simplicity.”    

-­‐  Jim  Collins  

Page 6: Confidence*In*Conclusions:*Leveraging* Splunk*For ...Value*Of*DataDriven*Insights* 1. Make*becer,*more*informed*decisions* 2. DemysHfy*the*unknown:*be*certain*projects*are*effecHve**

The  Value  Of  Data  Driven  Insights  1.  Make  becer,  more  informed  decisions  2.  DemysHfy  the  unknown:  be  certain  projects  are  effecHve    3.  Repeat  posiHve  outcomes  4.  Learn  from  mistakes  

6  

Page 7: Confidence*In*Conclusions:*Leveraging* Splunk*For ...Value*Of*DataDriven*Insights* 1. Make*becer,*more*informed*decisions* 2. DemysHfy*the*unknown:*be*certain*projects*are*effecHve**

Building  A  Data  Driven  Development  Process  

Page 8: Confidence*In*Conclusions:*Leveraging* Splunk*For ...Value*Of*DataDriven*Insights* 1. Make*becer,*more*informed*decisions* 2. DemysHfy*the*unknown:*be*certain*projects*are*effecHve**

Prerequisites  

8  

Product Familiarity

Data Availability Data Evaluation

Page 9: Confidence*In*Conclusions:*Leveraging* Splunk*For ...Value*Of*DataDriven*Insights* 1. Make*becer,*more*informed*decisions* 2. DemysHfy*the*unknown:*be*certain*projects*are*effecHve**

Product  Familiarity  1.  Know  your  product  inside  and  out  

–  Especially  the  “Happy  Path”  

2.  Understand  its  strengths  and  weaknesses  3.  Be  familiar  with  the  compeHHon    

9  

Page 10: Confidence*In*Conclusions:*Leveraging* Splunk*For ...Value*Of*DataDriven*Insights* 1. Make*becer,*more*informed*decisions* 2. DemysHfy*the*unknown:*be*certain*projects*are*effecHve**

Record  Everything  1.  PrioriHze  your  happy  path  2.  Record  as  much  data  as  possible  3.  You  never  know  what  might  be  important  in  the  future  4.  Do  it  soon…  

10  

Page 11: Confidence*In*Conclusions:*Leveraging* Splunk*For ...Value*Of*DataDriven*Insights* 1. Make*becer,*more*informed*decisions* 2. DemysHfy*the*unknown:*be*certain*projects*are*effecHve**

Evaluate  Data  This  is  going  to  seem  a  licle  grim  but…  1.  QuesHon  everything  2.  Trust  reluctantly  3.  Leave  no  room  for  doubt  

“The temptation to form premature theories upon insufficient data is the bane of our profession.” – Sherlock Holmes

11  

Page 12: Confidence*In*Conclusions:*Leveraging* Splunk*For ...Value*Of*DataDriven*Insights* 1. Make*becer,*more*informed*decisions* 2. DemysHfy*the*unknown:*be*certain*projects*are*effecHve**

ImplemenHng  The  Process  1.  Develop  historic  baselines  metrics  and  Key  Performance  Indicators  (KPIs)  2.  Determine  relevant  metrics  for  specific  code  deployments  3.  Monitor  KPIs  before,  during,  and  aQer  deployment  4.  DisHnguish  between  short  term  monitoring  and  long  term  reporHng  

12  

Page 13: Confidence*In*Conclusions:*Leveraging* Splunk*For ...Value*Of*DataDriven*Insights* 1. Make*becer,*more*informed*decisions* 2. DemysHfy*the*unknown:*be*certain*projects*are*effecHve**

Review  And  Evaluate  1.  Determine  whether  the  project  was  successful  2.  Were  the  selected  KPIs  appropriate?    

–  Do  we  need  new/becer/different  ones?  

3.  What  quesHons  should  we  have  asked  up  front?    4.  Did  we  adequately  understand  the  user  populaHon?  

5.   How  successful  was  it?  

13  

Page 14: Confidence*In*Conclusions:*Leveraging* Splunk*For ...Value*Of*DataDriven*Insights* 1. Make*becer,*more*informed*decisions* 2. DemysHfy*the*unknown:*be*certain*projects*are*effecHve**

An  Internal  Case  Study:    Revenue  ImpacHng  Code  Deployments  

Page 15: Confidence*In*Conclusions:*Leveraging* Splunk*For ...Value*Of*DataDriven*Insights* 1. Make*becer,*more*informed*decisions* 2. DemysHfy*the*unknown:*be*certain*projects*are*effecHve**

Background  1.  ICF  Technology  uses  Scrum  for  agile  development  2.  Several  product  teams  releasing  code  to  producHon  3.  We  monitor  business  and  system  data  streams  4.  On  Average:  2  incidents  per  month  

15  

Page 16: Confidence*In*Conclusions:*Leveraging* Splunk*For ...Value*Of*DataDriven*Insights* 1. Make*becer,*more*informed*decisions* 2. DemysHfy*the*unknown:*be*certain*projects*are*effecHve**

The  Problem  1.  Not  enough  visibility  into  impact  of  code  deployments  on  producHon  

environment  2.  Our  Streaming  Group  kept  having  to  delay  or  revert  code  releases  unHl  

revenue  “recovered”  3.  Needed  a  way  to  determine  that  deployed  code  wasn’t  breaking  

producHon  environment  

16  

Page 17: Confidence*In*Conclusions:*Leveraging* Splunk*For ...Value*Of*DataDriven*Insights* 1. Make*becer,*more*informed*decisions* 2. DemysHfy*the*unknown:*be*certain*projects*are*effecHve**

Analyze  The  Problem  1.  Met  with  subject  macer  experts  2.  Determined  mechanism  to  deploy  code  to  idenHfiable  populaHons  3.  Analyze  viability  of  odd  vs.  even  performerID  deployments  

17  

Page 18: Confidence*In*Conclusions:*Leveraging* Splunk*For ...Value*Of*DataDriven*Insights* 1. Make*becer,*more*informed*decisions* 2. DemysHfy*the*unknown:*be*certain*projects*are*effecHve**

The  Proposed  SoluHon  1.  Developed  dashboard  to  monitor  code  impact  on  populaHons  2.  Creates  baselines  before  each  deployment  3.  Determines  impact  during  deployment  4.  Allows  evaluaHon  success  aQer  appropriate  period  of  Hme  

18  

Page 19: Confidence*In*Conclusions:*Leveraging* Splunk*For ...Value*Of*DataDriven*Insights* 1. Make*becer,*more*informed*decisions* 2. DemysHfy*the*unknown:*be*certain*projects*are*effecHve**

19  

EvaluaHon  Dashboard  

Page 20: Confidence*In*Conclusions:*Leveraging* Splunk*For ...Value*Of*DataDriven*Insights* 1. Make*becer,*more*informed*decisions* 2. DemysHfy*the*unknown:*be*certain*projects*are*effecHve**

20  

Revenue  Per  Performer  

Page 21: Confidence*In*Conclusions:*Leveraging* Splunk*For ...Value*Of*DataDriven*Insights* 1. Make*becer,*more*informed*decisions* 2. DemysHfy*the*unknown:*be*certain*projects*are*effecHve**

What  We  Do  Today  1.  Each  release  is  now  evaluated  with  A/B  test  dashboard  2.  Code  deployments  are  first  released  to  half  the  performer  populaHon  3.  AQer  a  few  hours,  revenue  is  compared    4.  If  everything  looks  good,  code  is  deployed  to  remaining  populaHon  

21  

Page 22: Confidence*In*Conclusions:*Leveraging* Splunk*For ...Value*Of*DataDriven*Insights* 1. Make*becer,*more*informed*decisions* 2. DemysHfy*the*unknown:*be*certain*projects*are*effecHve**

Review  And  Evaluate  1.  Determine  whether  the  project  was  successful  2.  Were  the  selected  KPIs  appropriate?    

–  Do  we  need  new/becer/different  ones?  

3.  What  quesHons  should  we  have  asked  up  front?    4.  Did  we  adequately  understand  the  user  populaHon?  

5.   How  successful  was  it?  

22  

Page 23: Confidence*In*Conclusions:*Leveraging* Splunk*For ...Value*Of*DataDriven*Insights* 1. Make*becer,*more*informed*decisions* 2. DemysHfy*the*unknown:*be*certain*projects*are*effecHve**

QuesHons?  

23  

Page 24: Confidence*In*Conclusions:*Leveraging* Splunk*For ...Value*Of*DataDriven*Insights* 1. Make*becer,*more*informed*decisions* 2. DemysHfy*the*unknown:*be*certain*projects*are*effecHve**

THANK  YOU