![]() Like any other business units, GIS must archive historical data in case they need to re-index it for auditing purposes. The screenshot shows GIS’s Dynamic Data Active Searchable (DDAS) in GB usage in the last 90 days taken from the storage dashboard. We can clearly see that GIS exceeded their quota the first week of October and may need to adjust their index retention to stay within their allocation. We also see an overlay of their entitlement the Splunk team set up in the App. Here we can see the amount of storage GIS used by departments. ![]() This screenshot shows GIS’s daily ingestion in GB in the last 90 days taken from the storage dashboard. Below, we can see how much data the GIS team has been ingesting on a daily basis by index: Storage is also an important part of The Splunk T-Shirt Company’s environment. This screenshot shows GIS’s SVC usage in the last 30 days with an overlay of their entitlement. We can also use the App’s executive or reports dashboards to review SVC usage by business unit over time and split that usage by department within the business unit we are analyzing. This screenshot shows a departmental and user SVC usage breakdown for the GIS business unit. ![]() Let’s drill down on GIS, an important business unit in the Splunk T-Shirt company organization, and see a departmental breakdown of SVC usage: Like any other organization, The Splunk T-Shirt Company needed to have some way to measure that usage and put a process in place for Showback and Chargeback use cases.Īll screenshots in this blog were taken from a demo environment, and we will be focusing on one business unit in particular called Global Information Security, or GIS for short.Ī screenshot from the App’s Showback dashboard showing SVC usage at the highest level of the business with drilldown capability at the departmental and user levels. Workload allowed them to have more flexibility on how their business units are consuming Splunk Cloud resources. The Splunk T-Shirt Company is on the Splunk Cloud Workload (SVC) model. Let us showcase how The Splunk T-Shirt Company used the App to give the Splunk team the visibility they needed in their Splunk Cloud stack. Here is an example of an out-of-the-box dashboard to get you started quickly. Means to automatically determine and drill-down on how SVCs and/or vCPUs are being used by the various Business Units.Ībility to forecast SVC or vCPU consumption and storage usage for the entire organization or by business unit using Splunk Machine Learning.Ĭustomization to Fit any Business HierarchyĬustomers can build their Showback framework based on the app’s unique 8 Enrichment Principles ( Click here for more info)Īre you interested in building a powerful executive dashboard to showcase how your business units are consuming Splunk resources? If yes, you are in the right place. Means to determine how many resources SVCs and/or vCPUs are allocated towards a company's business units, departments, and users associated with them. Splunk App for Chargeback: Key Highlights Business Processįramework for customers to build their own Chargeback and/or Showback models. Choose Volume or Compute-Based Pricing Plans for Ultimate Flexibility.The Splunk App for Chargeback provides the framework necessary to analyze Splunk Cloud workload or ingest license models and Splunk Enterprise vCPU or ingest license models.Ĭlick on the links below to learn more about Splunk Cloud Workload Pricing and the different types of licensing the App supports: The Splunk App for Chargeback is a free app on Splunkbase for customers on Splunk Cloud Platform or Splunk Enterprise, regardless of your license type. The end result is a straightforward view into your Splunk utilization across your business hierarchy. The Splunk App for Chargeback analyzes the same utilization information provided in your Cloud Monitoring Console (CMC) and Monitoring Console (MC) regardless if you are a Splunk Cloud Platform or Splunk Enterprise customer. (SVC: Splunk Virtual Compute DDAS: Splunk Cloud Dynamic Data: Active Searchable DDAA: Splunk Cloud Dynamic Data: Active Archive) You can use Splunk App for Chargeback to focus on any business unit, department, or an individual user.Ī screenshot from the App’s executive dashboard showing SVC/DDAS/DDAA usage. ![]() The Splunk App for Chargeback allows you to manage, monitor, and forecast resource utilization in your shared Splunk environment.
0 Comments
Leave a Reply. |