Archive

Looking for ways to socialise Splunk in the company

macadminrohit
Contributor

Hello Experts, I have been asked by the executives to work on a plan to Socialise Splunk within the company . We just bough the License last year and there are not many people in the company who know splunk. So i will have to ask from level 0 . I am looking for ideas on what are the best ways people would do in their companies.

Tags (1)
0 Karma
1 Solution

efavreau
Builder

@macadminrohit When I was at Splunk .Conf years ago, I found a bunch of Splunkers in the Pavilion educating people about "How to be Successful" within their organizations, in the ways they leverage Splunk. The benefits are obvious... using Splunk well not only treats your infrastructure, its budget, and your users with kindness, but can lead potentially to using Splunk more. Everyone wins. But if users don't know about Splunk yet, how do we get them to know and leverage Splunk successfully? As a result, we started a Community of Practice in our company.

If you want ideas in general, then use your favorite search engine to read up on things people do in a "center of excellence" or "community of practice". While the concepts can overlap, They are different. Decide on which one works for you.

Splunk has guidance that helped us with ideas as well, in what is now called the Splunk Success Framework: https://docs.splunk.com/Documentation/CoE/ssf/Handbook/About

While this seems more about tech and not about people, we used it as an opportunity to socialize various education aspects of it. What value were we getting from Splunk? How did we use it? What was amazing about it so far? Why did we even buy it? What problems did we solve with the purchase? Are there new problems we are solving with it? Are users leveraging it as well as they could? How can new users ramp up quickly? I love what this other team did, how can I do that? Etc..

What questions we answered and then socialized, were voted on by our Community of Practice. We kept meetings short and often, to keep momentum moving. Find your champions; your own internal Splunk ninjas. They can help answer questions, but they can also offer where they are finding value with Splunk, and relay what kind of questions people are asking - so you know what to socialize next.

We built a wiki to capture all the answers and information, curate links to Splunk resources, and we have a Q&A section. That way everyone can search, ask, answer, and benefit (like Splunk Answers and Stack Overflow). We had a poster campaign throughout our buildings to advertise the wiki, and a newsletter sent to all users to keep them up to date on highlights.

Some of our ninjas have already created video tutorials to internal processes and posted them on our wiki. So there's a variety of content.

We are growing into webinars (recorded lunch and learns) and a roadshow (where we go to teams staff meetings and present what we're doing and why). The first roadshow stops are to the teams that asked for an "Intro to Splunk" or who use Splunk the most. This gets them onboard, gets ideas flowing, etc.. Then keep doing it all.

It's working for us. There's no magic solution to your task. It's going to take planning and work. But I can tell you... it works.

Good luck!

###

If this reply helps you, an upvote would be appreciated.

View solution in original post

efavreau
Builder

@macadminrohit When I was at Splunk .Conf years ago, I found a bunch of Splunkers in the Pavilion educating people about "How to be Successful" within their organizations, in the ways they leverage Splunk. The benefits are obvious... using Splunk well not only treats your infrastructure, its budget, and your users with kindness, but can lead potentially to using Splunk more. Everyone wins. But if users don't know about Splunk yet, how do we get them to know and leverage Splunk successfully? As a result, we started a Community of Practice in our company.

If you want ideas in general, then use your favorite search engine to read up on things people do in a "center of excellence" or "community of practice". While the concepts can overlap, They are different. Decide on which one works for you.

Splunk has guidance that helped us with ideas as well, in what is now called the Splunk Success Framework: https://docs.splunk.com/Documentation/CoE/ssf/Handbook/About

While this seems more about tech and not about people, we used it as an opportunity to socialize various education aspects of it. What value were we getting from Splunk? How did we use it? What was amazing about it so far? Why did we even buy it? What problems did we solve with the purchase? Are there new problems we are solving with it? Are users leveraging it as well as they could? How can new users ramp up quickly? I love what this other team did, how can I do that? Etc..

What questions we answered and then socialized, were voted on by our Community of Practice. We kept meetings short and often, to keep momentum moving. Find your champions; your own internal Splunk ninjas. They can help answer questions, but they can also offer where they are finding value with Splunk, and relay what kind of questions people are asking - so you know what to socialize next.

We built a wiki to capture all the answers and information, curate links to Splunk resources, and we have a Q&A section. That way everyone can search, ask, answer, and benefit (like Splunk Answers and Stack Overflow). We had a poster campaign throughout our buildings to advertise the wiki, and a newsletter sent to all users to keep them up to date on highlights.

Some of our ninjas have already created video tutorials to internal processes and posted them on our wiki. So there's a variety of content.

We are growing into webinars (recorded lunch and learns) and a roadshow (where we go to teams staff meetings and present what we're doing and why). The first roadshow stops are to the teams that asked for an "Intro to Splunk" or who use Splunk the most. This gets them onboard, gets ideas flowing, etc.. Then keep doing it all.

It's working for us. There's no magic solution to your task. It's going to take planning and work. But I can tell you... it works.

Good luck!

###

If this reply helps you, an upvote would be appreciated.

View solution in original post

burwell
SplunkTrust
SplunkTrust

Hi. We use Slack and set up a channel for general splunk questions and one for admins. This way the community can answer questions and not just a few of us.

We have a central place for Splunk announcements like local user group meetings and we store documents specifically relating to Splunk users in our company. Encourage the power users to document Splunk best practices around their area of expertise.

We organize internal brown bag meetings to bring users together.

We got Splunk training included in our license so we encourage people to take the classes.

.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!