© 2019 splunk inc. openshift and splunk - better together! · during the course of this...
TRANSCRIPT
![Page 1: © 2019 SPLUNK INC. OpenShift and Splunk - Better Together! · During the course of this presentation, we may make forward‐looking statements regarding future events or plans of](https://reader034.vdocuments.site/reader034/viewer/2022042219/5ec5830b9f76806f70487b02/html5/thumbnails/1.jpg)
© 2019 SPLUNK INC.
© 2019 SPLUNK INC.
IT2240 - Red Hat OpenShift and Splunk - Better Together!
Mattia Mascia | Red Hat
Matthew Modestino | Splunk
.conf19 SPEAKERS: Please use this slide as your title slide.Add your headshot to the circle below by clicking the icon in the center.
![Page 2: © 2019 SPLUNK INC. OpenShift and Splunk - Better Together! · During the course of this presentation, we may make forward‐looking statements regarding future events or plans of](https://reader034.vdocuments.site/reader034/viewer/2022042219/5ec5830b9f76806f70487b02/html5/thumbnails/2.jpg)
© 2019 SPLUNK INC.
Principal Consultant | Red HatMattia
IT Practitioner | SplunkMatt
Use this if there will be two speakers for your session.
![Page 3: © 2019 SPLUNK INC. OpenShift and Splunk - Better Together! · During the course of this presentation, we may make forward‐looking statements regarding future events or plans of](https://reader034.vdocuments.site/reader034/viewer/2022042219/5ec5830b9f76806f70487b02/html5/thumbnails/3.jpg)
During the course of this presentation, we may make forward‐looking statements regarding future events or plans of the company. We caution you that such statements reflect our current expectations and estimates based on factors currently known to us and that actual events or results may differ materially. The forward-looking statements made in the this presentation are being made as of the time and date of its live presentation. If reviewed after its live presentation, it may not contain current or accurate information. We do not assume any obligation to update any forward‐looking statements made herein.
In addition, any information about our roadmap outlines our general product direction and is subject to change at any time without notice. It is for informational purposes only, and shall not be incorporated into any contract or other commitment. Splunk undertakes no obligation either to develop the features or functionalities described or to include any such feature or functionality in a future release.
Splunk, Splunk>, Turn Data Into Doing, The Engine for Machine Data, Splunk Cloud, Splunk Light and SPL are trademarks and registered trademarks of Splunk Inc. in the United States and other countries. All other brand names, product names, or trademarks belong to their respective owners. © 2019 Splunk Inc. All rights reserved.
Forward-LookingStatements
© 2019 SPLUNK INC.
![Page 4: © 2019 SPLUNK INC. OpenShift and Splunk - Better Together! · During the course of this presentation, we may make forward‐looking statements regarding future events or plans of](https://reader034.vdocuments.site/reader034/viewer/2022042219/5ec5830b9f76806f70487b02/html5/thumbnails/4.jpg)
© 2019 SPLUNK INC.
1. Intro & Overview 2 min
2. OpenShift Container Platform 5 min
3. Red Hat Universal Base Image 5 min
4. Splunk 2min
5. Splunk Operator 3 min
6. Splunk Connect for Kubernetes, App for Infrastructure & Business Flow 10min
7. Use Cases 5 min
8. Q&A 5 min
TimestampsAgenda
![Page 5: © 2019 SPLUNK INC. OpenShift and Splunk - Better Together! · During the course of this presentation, we may make forward‐looking statements regarding future events or plans of](https://reader034.vdocuments.site/reader034/viewer/2022042219/5ec5830b9f76806f70487b02/html5/thumbnails/5.jpg)
© 2019 SPLUNK INC.
“Last Page First!”A great guiding principal for us Techies ☺
![Page 6: © 2019 SPLUNK INC. OpenShift and Splunk - Better Together! · During the course of this presentation, we may make forward‐looking statements regarding future events or plans of](https://reader034.vdocuments.site/reader034/viewer/2022042219/5ec5830b9f76806f70487b02/html5/thumbnails/6.jpg)
© 2019 SPLUNK INC.
Red Hat & Splunk
•Enterprise Platforms•Simple, Secure & Scalable•Hybrid - Any Data Center. Any Data. •Opensource & Community
Red Hat + Splunk partnership delivers key outcomes for our customers!
![Page 7: © 2019 SPLUNK INC. OpenShift and Splunk - Better Together! · During the course of this presentation, we may make forward‐looking statements regarding future events or plans of](https://reader034.vdocuments.site/reader034/viewer/2022042219/5ec5830b9f76806f70487b02/html5/thumbnails/7.jpg)
© 2019 SPLUNK INC.
Insert your own screenshot here.For best results, use an image sized at 1450 x 850
![Page 8: © 2019 SPLUNK INC. OpenShift and Splunk - Better Together! · During the course of this presentation, we may make forward‐looking statements regarding future events or plans of](https://reader034.vdocuments.site/reader034/viewer/2022042219/5ec5830b9f76806f70487b02/html5/thumbnails/8.jpg)
© 2019 SPLUNK INC.
Insert your own screenshot here.For best results, use an image sized at 1450 x 850
![Page 9: © 2019 SPLUNK INC. OpenShift and Splunk - Better Together! · During the course of this presentation, we may make forward‐looking statements regarding future events or plans of](https://reader034.vdocuments.site/reader034/viewer/2022042219/5ec5830b9f76806f70487b02/html5/thumbnails/9.jpg)
© 2019 SPLUNK INC.
OpenShift Container Platform
What is it?
![Page 10: © 2019 SPLUNK INC. OpenShift and Splunk - Better Together! · During the course of this presentation, we may make forward‐looking statements regarding future events or plans of](https://reader034.vdocuments.site/reader034/viewer/2022042219/5ec5830b9f76806f70487b02/html5/thumbnails/10.jpg)
© 2019 SPLUNK INC.
“OpenShift is an Integrated Platform”
It’s not Just Kubernetes Certified!
![Page 11: © 2019 SPLUNK INC. OpenShift and Splunk - Better Together! · During the course of this presentation, we may make forward‐looking statements regarding future events or plans of](https://reader034.vdocuments.site/reader034/viewer/2022042219/5ec5830b9f76806f70487b02/html5/thumbnails/11.jpg)
© 2019 SPLUNK INC.
OpenShift Container Platform
•Fully integrated and automated architecture
•Seamless Kubernetes deployment on any cloud or on-premises environment
Everything you need, out of the box
![Page 12: © 2019 SPLUNK INC. OpenShift and Splunk - Better Together! · During the course of this presentation, we may make forward‐looking statements regarding future events or plans of](https://reader034.vdocuments.site/reader034/viewer/2022042219/5ec5830b9f76806f70487b02/html5/thumbnails/12.jpg)
© 2019 SPLUNK INC.
OpenShift Container Platform
•Fully automated installation, from cloud infrastructure to OS to application services
•One click platform and application updates
•Auto-scaling of cloud resources
Everything you need, out of the box
![Page 13: © 2019 SPLUNK INC. OpenShift and Splunk - Better Together! · During the course of this presentation, we may make forward‐looking statements regarding future events or plans of](https://reader034.vdocuments.site/reader034/viewer/2022042219/5ec5830b9f76806f70487b02/html5/thumbnails/13.jpg)
© 2019 SPLUNK INC.
Red Hat Universal Base Image
A bold change that will help us expand the ecosystem
![Page 14: © 2019 SPLUNK INC. OpenShift and Splunk - Better Together! · During the course of this presentation, we may make forward‐looking statements regarding future events or plans of](https://reader034.vdocuments.site/reader034/viewer/2022042219/5ec5830b9f76806f70487b02/html5/thumbnails/14.jpg)
© 2019 SPLUNK INC.
“Red Hat Universal Base Image”The aim is to be the highest quality and most flexible base container image available
![Page 15: © 2019 SPLUNK INC. OpenShift and Splunk - Better Together! · During the course of this presentation, we may make forward‐looking statements regarding future events or plans of](https://reader034.vdocuments.site/reader034/viewer/2022042219/5ec5830b9f76806f70487b02/html5/thumbnails/15.jpg)
© 2019 SPLUNK INC.
Can Be Build & Deployed AnywhereBuilding on UBI is the first step
“Certification provides the highest level of support.”
“Trusted base for any environment”
“Enterprise support when run on Red Hat platforms”
![Page 16: © 2019 SPLUNK INC. OpenShift and Splunk - Better Together! · During the course of this presentation, we may make forward‐looking statements regarding future events or plans of](https://reader034.vdocuments.site/reader034/viewer/2022042219/5ec5830b9f76806f70487b02/html5/thumbnails/16.jpg)
© 2019 SPLUNK INC.
“On The Shoulders of Giants!”Leaving the the OS & Infra to the Pros so we can Splunk!
![Page 17: © 2019 SPLUNK INC. OpenShift and Splunk - Better Together! · During the course of this presentation, we may make forward‐looking statements regarding future events or plans of](https://reader034.vdocuments.site/reader034/viewer/2022042219/5ec5830b9f76806f70487b02/html5/thumbnails/17.jpg)
© 2019 SPLUNK INC.
![Page 18: © 2019 SPLUNK INC. OpenShift and Splunk - Better Together! · During the course of this presentation, we may make forward‐looking statements regarding future events or plans of](https://reader034.vdocuments.site/reader034/viewer/2022042219/5ec5830b9f76806f70487b02/html5/thumbnails/18.jpg)
© 2019 SPLUNK INC.
SplunkAny Question. Any Data. One Splunk.
![Page 19: © 2019 SPLUNK INC. OpenShift and Splunk - Better Together! · During the course of this presentation, we may make forward‐looking statements regarding future events or plans of](https://reader034.vdocuments.site/reader034/viewer/2022042219/5ec5830b9f76806f70487b02/html5/thumbnails/19.jpg)
© 2019 SPLUNK INC.
![Page 20: © 2019 SPLUNK INC. OpenShift and Splunk - Better Together! · During the course of this presentation, we may make forward‐looking statements regarding future events or plans of](https://reader034.vdocuments.site/reader034/viewer/2022042219/5ec5830b9f76806f70487b02/html5/thumbnails/20.jpg)
© 2019 SPLUNK INC.
Splunk OperatorDeploying the Splunk Platform on Openshift with Red Hat Universal Base Image
![Page 21: © 2019 SPLUNK INC. OpenShift and Splunk - Better Together! · During the course of this presentation, we may make forward‐looking statements regarding future events or plans of](https://reader034.vdocuments.site/reader034/viewer/2022042219/5ec5830b9f76806f70487b02/html5/thumbnails/21.jpg)
© 2019 SPLUNK INC.
apiVersion: enterprise.splunk.com/v1alpha1kind: SplunkEnterprisemetadata: name: cluster finalizers: - enterprise.splunk.com/delete-pvcspec: splunkVolumes: - name: licenses configMap: name: splunk-licenses licenseUrl: /mnt/licenses/enterprise.lic resources: splunkVarStorage: 10Gi splunkIndexerStorage: 50Gi topology: indexers: 3 searchHeads: 3
Splunk OperatorEncoding Operational Knowledge
![Page 22: © 2019 SPLUNK INC. OpenShift and Splunk - Better Together! · During the course of this presentation, we may make forward‐looking statements regarding future events or plans of](https://reader034.vdocuments.site/reader034/viewer/2022042219/5ec5830b9f76806f70487b02/html5/thumbnails/22.jpg)
© 2019 SPLUNK INC.
Splunk App for Infrastructure
The easy button for OpenShift Integration
![Page 23: © 2019 SPLUNK INC. OpenShift and Splunk - Better Together! · During the course of this presentation, we may make forward‐looking statements regarding future events or plans of](https://reader034.vdocuments.site/reader034/viewer/2022042219/5ec5830b9f76806f70487b02/html5/thumbnails/23.jpg)
© 2019 SPLUNK INC.
Insert your own screenshot here.For best results, use an image sized at 1450 x 850
![Page 24: © 2019 SPLUNK INC. OpenShift and Splunk - Better Together! · During the course of this presentation, we may make forward‐looking statements regarding future events or plans of](https://reader034.vdocuments.site/reader034/viewer/2022042219/5ec5830b9f76806f70487b02/html5/thumbnails/24.jpg)
© 2019 SPLUNK INC.
Splunk Connect for Kubernetes
Kubernetes Data Collection by Splunk & the open source Community!
![Page 25: © 2019 SPLUNK INC. OpenShift and Splunk - Better Together! · During the course of this presentation, we may make forward‐looking statements regarding future events or plans of](https://reader034.vdocuments.site/reader034/viewer/2022042219/5ec5830b9f76806f70487b02/html5/thumbnails/25.jpg)
© 2019 SPLUNK INC.
Kubernetes Logging ArchitectureNode Agent
![Page 26: © 2019 SPLUNK INC. OpenShift and Splunk - Better Together! · During the course of this presentation, we may make forward‐looking statements regarding future events or plans of](https://reader034.vdocuments.site/reader034/viewer/2022042219/5ec5830b9f76806f70487b02/html5/thumbnails/26.jpg)
© 2019 SPLUNK INC.
Kubernetes Logging ArchitectureSidecar Agent
![Page 27: © 2019 SPLUNK INC. OpenShift and Splunk - Better Together! · During the course of this presentation, we may make forward‐looking statements regarding future events or plans of](https://reader034.vdocuments.site/reader034/viewer/2022042219/5ec5830b9f76806f70487b02/html5/thumbnails/27.jpg)
© 2019 SPLUNK INC.
Splunk Connect for Kubernetes
Splunk KubernetesLogging
Splunk Kubernetes Metrics
Splunk KubernetesObjects
Kubernetes Data Sources
![Page 28: © 2019 SPLUNK INC. OpenShift and Splunk - Better Together! · During the course of this presentation, we may make forward‐looking statements regarding future events or plans of](https://reader034.vdocuments.site/reader034/viewer/2022042219/5ec5830b9f76806f70487b02/html5/thumbnails/28.jpg)
© 2019 SPLUNK INC.
Architecture
•Logging DaemonSet•Metrics DaemonSet•Metrics-Agg Deployment•Objects Deployment•OpenShift Web Console
Logging, Metrics, Objects
![Page 29: © 2019 SPLUNK INC. OpenShift and Splunk - Better Together! · During the course of this presentation, we may make forward‐looking statements regarding future events or plans of](https://reader034.vdocuments.site/reader034/viewer/2022042219/5ec5830b9f76806f70487b02/html5/thumbnails/29.jpg)
© 2019 SPLUNK INC.
Splunk Kubernetes LoggingApplication & OpenShift Cluster Logging
Docker/CRI-O LogsJournald
Custom Log Sources
in_tailsystemd
jq_transformerfluentd-hec
HTTP Event CollectorEvent Index
![Page 30: © 2019 SPLUNK INC. OpenShift and Splunk - Better Together! · During the course of this presentation, we may make forward‐looking statements regarding future events or plans of](https://reader034.vdocuments.site/reader034/viewer/2022042219/5ec5830b9f76806f70487b02/html5/thumbnails/30.jpg)
© 2019 SPLUNK INC.
Splunk Kubernetes ObjectsOpenShift Metadata Collection
Kubernetes ObjectsOAPI Objects
Kubernetes_objectsjq_transformer
fluentd-hec
HTTP Event CollectorEvent Index
![Page 31: © 2019 SPLUNK INC. OpenShift and Splunk - Better Together! · During the course of this presentation, we may make forward‐looking statements regarding future events or plans of](https://reader034.vdocuments.site/reader034/viewer/2022042219/5ec5830b9f76806f70487b02/html5/thumbnails/31.jpg)
© 2019 SPLUNK INC.
Splunk Kubernetes MetricsOpenShift Platform Metrics
Kubernetes API Metrics Kubelet Metrics
kubernetes_metricskubernetes_metrics_aggregator
record_modifierfluentd-hec
HTTP Event CollectorMetrics Index
![Page 32: © 2019 SPLUNK INC. OpenShift and Splunk - Better Together! · During the course of this presentation, we may make forward‐looking statements regarding future events or plans of](https://reader034.vdocuments.site/reader034/viewer/2022042219/5ec5830b9f76806f70487b02/html5/thumbnails/32.jpg)
© 2019 SPLUNK INC.
OpenShift Web ConsoleExtending OpenShift Console
![Page 33: © 2019 SPLUNK INC. OpenShift and Splunk - Better Together! · During the course of this presentation, we may make forward‐looking statements regarding future events or plans of](https://reader034.vdocuments.site/reader034/viewer/2022042219/5ec5830b9f76806f70487b02/html5/thumbnails/33.jpg)
© 2019 SPLUNK INC.
“Make the Data Dance!”OpenShift Use Case Demos
![Page 34: © 2019 SPLUNK INC. OpenShift and Splunk - Better Together! · During the course of this presentation, we may make forward‐looking statements regarding future events or plans of](https://reader034.vdocuments.site/reader034/viewer/2022042219/5ec5830b9f76806f70487b02/html5/thumbnails/34.jpg)
© 2019 SPLUNK INC.
Demo
![Page 35: © 2019 SPLUNK INC. OpenShift and Splunk - Better Together! · During the course of this presentation, we may make forward‐looking statements regarding future events or plans of](https://reader034.vdocuments.site/reader034/viewer/2022042219/5ec5830b9f76806f70487b02/html5/thumbnails/35.jpg)
© 2019 SPLUNK INC.
Red Hat & Splunk
•Enterprise Platforms•Simple, Secure & Scalable•Hybrid – Any Data Center. Any Data. •Open source & Community
Red Hat + Splunk partnership delivers key outcomes for our customers!
![Page 36: © 2019 SPLUNK INC. OpenShift and Splunk - Better Together! · During the course of this presentation, we may make forward‐looking statements regarding future events or plans of](https://reader034.vdocuments.site/reader034/viewer/2022042219/5ec5830b9f76806f70487b02/html5/thumbnails/36.jpg)
© 2019 SPLUNK INC.
Q&AMattia Mascia | Red HatMatthew Modestino | Splunk
![Page 37: © 2019 SPLUNK INC. OpenShift and Splunk - Better Together! · During the course of this presentation, we may make forward‐looking statements regarding future events or plans of](https://reader034.vdocuments.site/reader034/viewer/2022042219/5ec5830b9f76806f70487b02/html5/thumbnails/37.jpg)
© 2019 SPLUNK INC.
Demohttps://www.openshift.com
https://docs.splunk.com/Documentation/InfraApp/latest/Admin/AddDataOpenShift
https://github.com/splunk/splunk-connect-for-kubernetes
https://github.com/splunk/docker-splunk
https://github.com/splunk/splunk-operator
![Page 38: © 2019 SPLUNK INC. OpenShift and Splunk - Better Together! · During the course of this presentation, we may make forward‐looking statements regarding future events or plans of](https://reader034.vdocuments.site/reader034/viewer/2022042219/5ec5830b9f76806f70487b02/html5/thumbnails/38.jpg)
RATE THIS SESSIONGo to the .conf19 mobile app to
© 2019 SPLUNK INC.
You!
Thank