Dell EMC CPSD & Splunk

Keith Quebodeaux, Principal Architect-CPSD Specialists

Alex Rodriguez, Sr. Mgr. CPSD Specialists

1 1 © Copyright 2016 Dell Inc. Why Dell EMC for Splunk?

• EMC and Splunk partnership with co-investment – Dedicated Splunk Alliances Team – Dell EMC “Splunk Ninjas” › Over 35 global resources › Same training as Splunk internal sales and systems engineers – Dell EMC and Splunk events › Splunk .conf › Splunk Live › Splunk partner conferences › Dell EMC Forum

• Dell EMC-Splunk joint validation and certification – Vxblock 540 and XtremIO – VxRack Flex and ScaleIO – VxRail – Isilon – DSSD

2 2 © Copyright 2016 Dell Inc. WHY DELL EMC - DAS PRESENTS CHALLENGES

Dedicated Infrastructure SPLUNK DAS ENVIRONMENT 1 • Silo that only runs Splunk Compromised Availability • SSDs & servers fail 1x 1x 2 • Index rebuilds can take hours to days Lack of Enterprise Data Protection • No Snapshots or Compliance 3 • DR limited to Multisite Clustering 2x 2x Poor Storage Efficiency 4 • Indexer Clustering Increases Overhead Non-Optimized Growth 3x 3x • Fixed compute to storage ratio 5 • Servers must maintain storage symmetry Management complexity 6 • Multiple management points

3 © Copyright 2016 Dell Inc. Why Splunk?

FAST TIME-TO-VALUE

ONE PLATFORM, MULTIPLE USE CASES

VISIBILITY ACROSS STACK, NOT JUST SILOS

ASK ANY QUESTION OF DATA

ANY DATA, ANY SOURCE OR DEPLOYMENT MODEL

4 © Copyright 2016 Dell Inc. Converged Systems DELL EMC HAS THE BROADEST CI PORTFOLIO IN THE INDUSTRY

ENGINEERED MANUFACTURED MANAGED SUPPORTED SUSTAINED

AS ONE PRODUCT

5 © Copyright 2016 Dell Inc. Converged infrastructure transforms IT

COMPUTE STORAGE NETWORK

MORE APPLICATIONS A FASTER TIME- 4.6X DEPLOYED TO- MARKET 4.4X

REDUCTION IN LESS TIME KEEPING 96% DOWNTIME LIGHTS ON 41%

CONVERGED OPERATIONS

Source: IDC doc#255798, The Business Value of EMC Vblock Systems, May 2015

6 © Copyright 2016 Dell Inc. Use cases dictate solution approaches

 Easy to Use  Scale Small to Big  Scalability  Low Cost  Software Defined  Rich Data Services  Start Small & Grow  Lowest TCO at Scale  TCO  GB-TB Ingest/Day  100sGB-PB Ingest/Day  TBs-PB Ingest/Day Hyper-Converged Hyper-Converged Traditional Appliances at Rack-Scale Converged

7 © Copyright 2016 Dell Inc. WHY DELL EMC CPSD FOR SPLUNK OPTIMIZED INFRASTRUCTURE FOR BIG & FAST DATA

Optimized Shared Cost-Effective & Powerful Data Storage & Tiering Flexible Scale-Out Services

Hot & Warm Data Deployed Encyption & Index File On XtremIO or Security Compression ScaleIO, VxRail

Cold & Frozen Data Deployed Scale-Out Capacity & Snapshots For Deduplication Of On Isilon Compute Independently Or Backups Clustered Indexes As Converged Platform

8 © Copyright 2016 Dell Inc. Dell EMC VxBlock and Vblock Systems PROVEN AND TRUSTED

Best-in-class hardware and software

Modular design for scale

“Engineered system” experience

9 © Copyright 2016 Dell Inc. DELL EMC VxBLOCK 540 & SPLUNK ALL-FLASH INFRASTRUCTURE FOR HOT & WARM DATA

High-Speed Search Search Heads Powerful Data Accelerate SuperSparse Services & Rare Searches Indexers

Self-Encrypting Index File Flash Drives Compression

Scale-Out Flash For I/O-Bound Data In-Memory Data Dedupe Clustered Copy Services Index Copies >1M IOPS & <1ms Latencies

10 © Copyright 2016 Dell Inc. Dell EMC VxRack System 1000

Built-in networking Fully integrated rack-scale fabric

Simple to manage, upgrade and sustain

Start small, Grow BIG

Software-defined for workload flexibility

11 © Copyright 2016 Dell Inc. VxRail™ hyper-converged appliance Exclusive partnership between Dell EMC and VMware

VIRTUAL DESKTOPS SERVER WORKLOADS HYBRID CLOUD DISTRIBUTED ENTERPRISE Deploy hundreds of desktops Standardize and consolidate Seamless backup and replication to Manage and Orchestrate across locations in minutes on one appliance infrastructure for all the cloud with no downtime remote/departmental workloads

MULTIPLE CONFIGS NON-DISRUPTIVE DATA SERVICES INTEGRATED and SCALE POINTS SDDC SCALE OUT FOR EFFICIENCY REPLICATION

12 © Copyright 2016 Dell Inc. DELL EMC HYPERCONVERGED & SPLUNK CONVERGED ARCHITECTURE FOR HOT & WARM DATA

Converged Splunk Search Heads Shared Capacity & Architecture Performance VxRail and VxRack Flex Indexers Remove Silos & Increase ROI On DAS Capacity & No Single Point Of Failure

5K IOPS 5K IOPS 5K IOPS 5K IOPS 5K IOPS 1 TB 1 TB 1 TB 1 TB 1 TB 25K IOPS & 5TB

13 © Copyright 2016 Dell Inc. Splunk Validation on VxRail All Flash

• 3Q2016 VxRail All Flash Validated for Splunk

• Meets or Exceeds Splunk Reference Hardware

• Tested Single Instance and Distributed Splunk Deployment

• Distributed Test Environment – 2 Forwarders – 2 Indexers – 1 Search Head – 1 Control VM – All Nodes Virtualized

14 © Copyright 2016 Dell Inc. DELL EMC ISILON STE & SPLUNK LOW-COST & SECURE SCALE-OUT FOR COLD DATA

Search Heads Consolidate, Protect & Secure Cold Data Indexers

High-Speed Ingest Self-Encrypting SmartLock Protects & Long-Term Retention With Drives Cold & Frozen Data Native HDFS Integration

Snapshots IQ SmartDedupe For Scale-Out Capacity For Backups Clustered Indexes Up To 50PB Of Highly Available Capacity

15 © Copyright 2016 Dell Inc. Dell EMC Splunk Applications

Free on Splunkbase to drive insight of converged platforms

• Dell

• Dell EMC

• Isilon

• Health

• OneFS Audit

• XtremIO

• VNX

• Cisco

16 © Copyright 2016 Dell Inc. Resources

• DellEMC.com/EMC.com

• VCE.com

• EMC Community Network

• BigDataBeard.com (Dell EMC Splunk Ninja External Blog)

• .conf 2015 and 2016 Recorded Sessions

• Dell EMC Splunk Ninjas (Dell EMC Account Manager)

• Splunkbase

17 © Copyright 2016 Dell Inc. Q & A 19 © Copyright 2016 Dell Inc.