Dell EMC CPSD & Splunk Keith Quebodeaux, Principal Architect-CPSD Specialists Alex Rodriguez, Sr. Mgr. CPSD Specialists 1 1 © Copyright 2016 Dell Inc. Why Dell EMC for Splunk? • EMC and Splunk partnership with co-investment – Dedicated Splunk Alliances Team – Dell EMC “Splunk Ninjas” › Over 35 global resources › Same training as Splunk internal sales and systems engineers – Dell EMC and Splunk events › Splunk .conf › Splunk Live › Splunk partner conferences › Dell EMC Forum • Dell EMC-Splunk joint validation and certification – Vxblock 540 and XtremIO – VxRack Flex and ScaleIO – VxRail – Isilon – DSSD 2 2 © Copyright 2016 Dell Inc. WHY DELL EMC - DAS PRESENTS CHALLENGES Dedicated Infrastructure SPLUNK DAS ENVIRONMENT 1 • Silo that only runs Splunk Compromised Availability • SSDs & servers fail 1x 1x 2 • Index rebuilds can take hours to days Lack of Enterprise Data Protection • No Snapshots or Compliance 3 • DR limited to Multisite Clustering 2x 2x Poor Storage Efficiency 4 • Indexer Clustering Increases Overhead Non-Optimized Growth 3x 3x • Fixed compute to storage ratio 5 • Servers must maintain storage symmetry Management complexity 6 • Multiple management points 3 © Copyright 2016 Dell Inc. Why Splunk? FAST TIME-TO-VALUE ONE PLATFORM, MULTIPLE USE CASES VISIBILITY ACROSS STACK, NOT JUST SILOS ASK ANY QUESTION OF DATA ANY DATA, ANY SOURCE OR DEPLOYMENT MODEL 4 © Copyright 2016 Dell Inc. Converged Systems DELL EMC HAS THE BROADEST CI PORTFOLIO IN THE INDUSTRY ENGINEERED MANUFACTURED MANAGED SUPPORTED SUSTAINED AS ONE PRODUCT 5 © Copyright 2016 Dell Inc. Converged infrastructure transforms IT COMPUTE STORAGE NETWORK VIRTUALIZATION MORE APPLICATIONS A FASTER TIME- 4.6X DEPLOYED TO- MARKET 4.4X REDUCTION IN LESS TIME KEEPING 96% DOWNTIME LIGHTS ON 41% CONVERGED OPERATIONS Source: IDC doc#255798, The Business Value of EMC Vblock Systems, May 2015 6 © Copyright 2016 Dell Inc. Use cases dictate solution approaches Easy to Use Scale Small to Big Scalability Low Cost Software Defined Rich Data Services Start Small & Grow Lowest TCO at Scale TCO GB-TB Ingest/Day 100sGB-PB Ingest/Day TBs-PB Ingest/Day Hyper-Converged Hyper-Converged Traditional Appliances at Rack-Scale Converged 7 © Copyright 2016 Dell Inc. WHY DELL EMC CPSD FOR SPLUNK OPTIMIZED INFRASTRUCTURE FOR BIG & FAST DATA Optimized Shared Cost-Effective & Powerful Data Storage & Tiering Flexible Scale-Out Services Hot & Warm Data Deployed Encyption & Index File On XtremIO or Security Compression ScaleIO, VxRail Cold & Frozen Data Deployed Scale-Out Capacity & Snapshots For Deduplication Of On Isilon Compute Independently Or Backups Clustered Indexes As Converged Platform 8 © Copyright 2016 Dell Inc. Dell EMC VxBlock and Vblock Systems PROVEN AND TRUSTED Best-in-class hardware and software Modular design for data center scale “Engineered system” experience 9 © Copyright 2016 Dell Inc. DELL EMC VxBLOCK 540 & SPLUNK ALL-FLASH INFRASTRUCTURE FOR HOT & WARM DATA High-Speed Search Search Heads Powerful Data Accelerate SuperSparse Services & Rare Searches Indexers Self-Encrypting Index File Flash Drives Compression Scale-Out Flash For I/O-Bound Data In-Memory Data Dedupe Clustered Copy Services Index Copies >1M IOPS & <1ms Latencies 10 © Copyright 2016 Dell Inc. Dell EMC VxRack System 1000 Built-in networking Fully integrated rack-scale fabric Simple to manage, upgrade and sustain Start small, Grow BIG Software-defined for workload flexibility 11 © Copyright 2016 Dell Inc. VxRail™ hyper-converged appliance Exclusive partnership between Dell EMC and VMware VIRTUAL DESKTOPS SERVER WORKLOADS HYBRID CLOUD DISTRIBUTED ENTERPRISE Deploy hundreds of desktops Standardize and consolidate Seamless backup and replication to Manage and Orchestrate across locations in minutes on one appliance infrastructure for all the cloud with no downtime remote/departmental workloads MULTIPLE CONFIGS NON-DISRUPTIVE DATA SERVICES INTEGRATED and SCALE POINTS SDDC SCALE OUT FOR EFFICIENCY REPLICATION 12 © Copyright 2016 Dell Inc. DELL EMC HYPERCONVERGED & SPLUNK CONVERGED ARCHITECTURE FOR HOT & WARM DATA Converged Splunk Search Heads Shared Capacity & Architecture Performance VxRail and VxRack Flex Indexers Remove Silos & Increase ROI On DAS Capacity & No Single Point Of Failure 5K IOPS 5K IOPS 5K IOPS 5K IOPS 5K IOPS 1 TB 1 TB 1 TB 1 TB 1 TB 25K IOPS & 5TB 13 © Copyright 2016 Dell Inc. Splunk Validation on VxRail All Flash • 3Q2016 VxRail All Flash Validated for Splunk • Meets or Exceeds Splunk Reference Hardware • Tested Single Instance and Distributed Splunk Deployment • Distributed Test Environment – 2 Forwarders – 2 Indexers – 1 Search Head – 1 Control VM – All Nodes Virtualized 14 © Copyright 2016 Dell Inc. DELL EMC ISILON STE & SPLUNK LOW-COST & SECURE SCALE-OUT FOR COLD DATA Search Heads Consolidate, Protect & Secure Cold Data Indexers High-Speed Ingest Self-Encrypting SmartLock Protects & Long-Term Retention With Drives Cold & Frozen Data Native HDFS Integration Snapshots IQ SmartDedupe For Scale-Out Capacity For Backups Clustered Indexes Up To 50PB Of Highly Available Capacity 15 © Copyright 2016 Dell Inc. Dell EMC Splunk Applications Free on Splunkbase to drive insight of converged platforms • Dell • Dell EMC • Isilon • Health • OneFS Audit • XtremIO • VNX • Cisco 16 © Copyright 2016 Dell Inc. Resources • DellEMC.com/EMC.com • VCE.com • EMC Community Network • BigDataBeard.com (Dell EMC Splunk Ninja External Blog) • .conf 2015 and 2016 Recorded Sessions • Dell EMC Splunk Ninjas (Dell EMC Account Manager) • Splunkbase 17 © Copyright 2016 Dell Inc. Q & A 19 © Copyright 2016 Dell Inc..