Getting Data In

What are the best practices for Onboarding new machine data to ensure APM KPIs are captured and measured?

davebo1896
Communicator

Often when users want to bring their machine data into Splunk, they just want access to their logs so they don't have to (or are not allowed to) grep through them from the command line.

What are the best practices to drive the data onboarding interview process toward having these users identify the KPI metrics that can be obtained from the data?

Tags (1)
0 Karma
1 Solution

sloshburch
Splunk Employee
Splunk Employee

I say look at the work we've put into Data onboarding best practices for a Splunk deployment.

Step two may be what you're looking for. The key is to have everyone think about the use case, not just the data.

View solution in original post

sloshburch
Splunk Employee
Splunk Employee

I say look at the work we've put into Data onboarding best practices for a Splunk deployment.

Step two may be what you're looking for. The key is to have everyone think about the use case, not just the data.

davebo1896
Communicator

That is very helpful, thank you.

I've been thinking about trying to open up the conversation, moving away from just working through the data sources they are presenting to asking "What business decisions will you be making with this data?" This, in order to prompt more of a conversation about performance indicators and possibly bringing in associated data in order to tell more of a story. Less "This is a log I need to find things in it", More "Here is information that affects the business".
So yes, craft the Use Case, but spin it to get a deeper understanding of possibilities.

0 Karma

sloshburch
Splunk Employee
Splunk Employee

Yaay - thanks for the feedback!

0 Karma
Get Updates on the Splunk Community!

Monitoring MariaDB and MySQL

In a previous post, we explored monitoring PostgreSQL and general best practices around which metrics to ...

Financial Services Industry Use Cases, ITSI Best Practices, and More New Articles ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Splunk Federated Analytics for Amazon Security Lake

Thursday, November 21, 2024  |  11AM PT / 2PM ET Register Now Join our session to see the technical ...