Technical Deep Dive Splunk Cloud Copyright 2015 Splunk Inc.
Disclaimer During the course of this presentaaon, we may make forward looking statements regarding future events or the expected performance of the company. We cauaon you that such statements reflect our current expectaaons and esamates based on factors currently known to us and that actual events or results could differ materially. For important factors that may cause actual results to differ from those contained in our forward- looking statements, please review our filings with the SEC. The forward- looking statements made in the this presentaaon are being made as of the Ame and date of its live presentaaon. If reviewed amer its live presentaaon, this presentaaon may not contain current or accurate informaaon. We do not assume any obligaaon to update any forward looking statements we may make. In addiaon, any informaaon about our roadmap outlines our general product direcaon and is subject to change at any Ame without noace. It is for informaaonal purposes only and shall not, be incorporated into any contract or other commitment. Splunk undertakes no obligaaon either to develop the features or funcaonality described or to include any such feature or funcaonality in a future release. 2
Agenda! IntroducAons! Splunk Cloud Overview! Design Principles! High Performance & High Availability! Security from the Ground Up! OperaAonal Excellence 3
Cloud and Your Business Apps and data moving to cloud Cloud data can remain in cloud Desire to consume Splunk as a service 4!
SaaS Splunk s PorZolio for Cloud So(ware Apps Splunk Enterprise as a service Analyze data in EMR/ S3 with Hunk App for AWS App for ServiceNow More SaaS apps 5
What is Splunk Cloud: Where s Waldo? Search Head(s) Search Head(s) Indexer(s) Indexer(s) On Premises Private Cloud Public Cloud On Premises Private Cloud Public Cloud 6
Okay, a Hint Search Head(s) Search Head(s) Indexer(s) Indexer(s) On Premises Private Cloud Public Cloud On Premises Private Cloud Public Cloud 7
Did You Spot It? Search Head(s) Search Head(s) Indexer(s) Indexer(s) On Premises Private Cloud Public Cloud On Premises Private Cloud Public Cloud 8
Splunk Cloud is Splunk Enterprise as a Service Search Head(s) Available Globally in AWS Indexer(s) On Premises Private Cloud Public Cloud 9
Global AWS Regions & GovCloud 10
Splunk Cloud is Splunk Enterprise as a Service Available Globally in AWS Search Head(s) Indexer(s) On Premises Private Cloud Public Cloud 11
Splunk Cloud Design Principles Instant Secure Reliable Hybrid 12
Stacks Clustering & License Managers Indexers Search Heads 13
Stacks Clustering & License Managers Indexers Search Heads EC2 Instance 14
Stacks Single Tenant Customer Stack 15
Secure By Default Network IsolaAon EncrypAon Non- repudiable Logging Secure coding pracaces 16
17
18
Durable Replicated Data Replicated Configs Backups Redundant systems 19
Automated 20
21
22
23
24 Skynet
High Availability Copyright 2015 Splunk Inc.
High Availability 26
High Availability Search Head 27
High Availability Search Head 1 Search Head 2 Search Head 3 28
High Availability Search Head 1 Search Head 2 Search Head 3 29
High Availability Load Balancer Search Head 1 Search Head 2 Search Head 3 30
High Availability Load Balancer Search Head 1 Search Head 2 Search Head 3 31
High Availability Load Balancer Search Head 1 Search Head 2 Search Head 3 32
High Availability Load Balancer Search Head 1 Search Head 2 Search Head 3 33
High Availability 3 Indexers 34
High Availability Indexer 1 Indexer 2 Indexer 3 35
High Availability Indexer 1 Indexer 2 Indexer 3 Searchable Bucket 36
High Availability Indexer 1 Indexer 2 Indexer 3 Searchable Bucket Searchable Bucket 37
High Availability Indexer 1 Indexer 2 Indexer 3 Searchable Bucket Searchable Bucket Replicated Bucket 38
High Availability Indexer 1 Indexer 2 Indexer 3 Searchable Bucket Searchable Bucket Replicated Bucket 39
High Availability Indexer 1 Indexer 2 Indexer 3 Searchable Bucket Replicated Bucket 40
High Availability Indexer 1 Indexer 2 Indexer 3 Searchable Bucket Searchable Bucket Replicated Bucket 41
High Availability Indexers 42
High Availability Indexers 43
High Availability Indexers 44
High Availability Indexers 45
High Availability Indexers 46
High Availability Indexers 47
High Availability Search Head Indexers 48
High Availability Search Head Indexers 49
Disaster Recovery Splunk Buckets & ConfiguraAon Data 50
Disaster Recovery Splunk Buckets & ConfiguraAon Data Amazon S3 51
Disaster Recovery Splunk Buckets & ConfiguraAon Data Amazon S3 52
Security
customer stack 54
security group Isolated by Security Groups 55
security group Further Isolated by a Splunk VPC 56
security group security group security group security group security group 57
Customer Forwarders AuthenAcaAon Client SSL CerAficates Server SSL CerAficates 58
Customer Forwarders AuthenAcaAon 2 Client SSL CerAficates Server SSL CerAficates 1 59
Rogue Forwarders AuthenAcaAon 2 1 60
EncrypAon at Rest Clustering & License Managers Indexers Search Heads 61
Forwarder Indexer Search Head splunkd encrypt 62
Forwarder Indexer Search Head splunkd splunkd decrypt decrypt 63
Hybrid
Hybrid Hybrid Search Search Head(s) Search Head(s) Indexer(s) Single Pane of Glass Visibility Indexer(s) On Premises Private Cloud Public Cloud On Premises Private Cloud Public Cloud 65
One More Thing
Looking Forward Searchable S3 Archiving 2 years + AWS S3 Search Head Forwarder Indexer 0 to 365 days 67
Splunk Cloud is! Highly performant! Highly available! Built with security from the ground up! OperaAonally automated! A single pane of glass visibility with hybrid search 68
QuesAons
Thank You!