Getting Data In

What are the best practices for Onboarding new machine data to ensure APM KPIs are captured and measured?

davebo1896
Communicator

Often when users want to bring their machine data into Splunk, they just want access to their logs so they don't have to (or are not allowed to) grep through them from the command line.

What are the best practices to drive the data onboarding interview process toward having these users identify the KPI metrics that can be obtained from the data?

Tags (1)
0 Karma
1 Solution

sloshburch
Splunk Employee
Splunk Employee

I say look at the work we've put into Data onboarding best practices for a Splunk deployment.

Step two may be what you're looking for. The key is to have everyone think about the use case, not just the data.

View solution in original post

sloshburch
Splunk Employee
Splunk Employee

I say look at the work we've put into Data onboarding best practices for a Splunk deployment.

Step two may be what you're looking for. The key is to have everyone think about the use case, not just the data.

davebo1896
Communicator

That is very helpful, thank you.

I've been thinking about trying to open up the conversation, moving away from just working through the data sources they are presenting to asking "What business decisions will you be making with this data?" This, in order to prompt more of a conversation about performance indicators and possibly bringing in associated data in order to tell more of a story. Less "This is a log I need to find things in it", More "Here is information that affects the business".
So yes, craft the Use Case, but spin it to get a deeper understanding of possibilities.

0 Karma

sloshburch
Splunk Employee
Splunk Employee

Yaay - thanks for the feedback!

0 Karma
Get Updates on the Splunk Community!

Why You Can't Miss .conf25: Unleashing the Power of Agentic AI with Splunk & Cisco

The Defining Technology Movement of Our Lifetime The advent of agentic AI is arguably the defining technology ...

Deep Dive into Federated Analytics: Unlocking the Full Power of Your Security Data

In today’s complex digital landscape, security teams face increasing pressure to protect sprawling data across ...

Your summer travels continue with new course releases

Summer in the Northern hemisphere is in full swing, and is often a time to travel and explore. If your summer ...