Splunk @ Swisscom

1. Copyright © 2015 Splunk Inc.
Philipp Moser, Team Lead Enterprise Cloud
Engineering & Operations
Splunk @ Swisscom for End to
End Operational Intelligence to
deliver critical cloud services to
customers

2. 2 2
• Swisscom is Switzerland’s leading telecom provider and one of its foremost IT
companies, headquartered in Worblaufen, close to the capital city, Bern. Its
subsidiary Fastweb has built up a strong position on the Italian market.
Swisscom brooks no compromise when it comes to serving customer needs; it
focuses on service and quality and invests massively in the networks of the
future.
• Today, its mobile network covers 99 per cent of the Swiss population whilst its
high speed fiber to the home network reaches 1 Million households already.

3. 3 3
Based in Ittigen, Bern
Joined Swisscom in May 2011
Became Team Lead for the Enterprise Cloud Team in in July 2015
Direct the engineering support team managing the entire cloud
infrastructure
Background and Role

4. 4
Our Splunk Journey
4
2009
•First Splunk
purchase
2013
•2TB expansion
Today
•Multiple use cases
•5TB expansion
Looking ahead
•Moving towards
increased use of
analytics

5. 5
Our Original Challenge
1. We needed to have a central platform for
System Status, System Monitoring, Analytics
and Troubleshooting our cloud products
5

6. 6
Our Original Challenge
2. We needed to improve troubleshooting
across a complex cloud infrastructure
6

7. 7 7
Splunk at Swisscom
Began using Splunk Enterprise in 2009 to
ensure that all IT-related data was
available in a central place
Quickly extended to providing visibility
into new cloud services Swisscom offers
including PaaS, IaaS and SaaS products
Now Splunk is an integral part of the
broader Swisscom Operation Control
Center with multiple dashboards
providing insight into cloud performance

8. 8
Indexers
Single Search Head
Searching
Splunk Topology
Reporting Alerting Dashboards
Swisscom Technologies
Software-Defined Networking (SDN)
Network Connectivity
Software-Defined Storage (SDS)Hypervisors
Cloud Management Platform
Compute

9. 9
Our Data Sources
9
Online
Services
Performance
Counters from
Windows and
LINUX
Network Switch
Virtual machines
Network
Virtual server

10. 10
Our Use Cases
Troubleshooting
Monitoring IT
Operations
License
Management
10

11. 11 11
Providing customers with multiple cloud products requires an extensive
cloud infrastructure
Monitoring potential issues without Splunk would previously require
data being viewed for each individual component
With Splunk, Swisscom now not only has a central environment but also
has the capacity to spot issues before they affect customers
IT Operations and troubleshooting

12. 12 12
IT Operations and troubleshooting

13. 13
Live Performance Stats on Display
All cloud related data feeds data into the Swisscom Operation Control
Centre, with a series of dashboards established to provide improved
visibility
13

14. 14 14
Splunk will be used for license
management across cloud operations.
When Swisscom is audited we have
instant visibility over the license situation
for Windows installations across the
entire infrastructure.
The longer term aim is to automate the
entire process across multiple license
requirements.
License management

15. 15
Value from Splunk
“Splunk is more than just a monitoring tool,
it is a platform that allows you to collect
information from your surroundings and
rationalize it to make you quicker.”
15

16. 16
Value from Splunk
Visibility over
entire cloud
operations
Speeds up
troubleshooting
Improves
customer
experience
16

17. 17
Additional benefits
Splunk fits into the
Swisscom DevOps
culture
Fewer resources
required than open
source alternatives
Availability of pre-
built apps speeds
time to value
17

18. 18
Future Plans
Move towards
using Splunk for
predictive analytics
Extend Splunk
usage to the wider
business using the
same data
18
Make data available to the business

19. 19
Key takeaways
Start project in one
tech corner, build from
there
Allow time to build the
platform
Build usage around
people
19

20. Thank You