Splunk, Service

What is Splunk at Illinois?

Splunk is a streaming data analytics platform to help organizations turn event stream data (logs, metrics, traces) in to insights — to inform decisions, to alert you to issues, and even to take action on your behalf. Splunk can be used to develop reports and visualizations (dashboards), to generate alerts and to build automations that include other systems. Splunk supports advanced analytics capabilities including Machine Learning, and is very extensible.  Spearheaded by the Chief Information and Security Officer (CISO) to provide the service widely across the institution, Splunk at Illinois is intended to provide units a means to improve use of their own data and to support a more rapid and informed response to emerging issues. It is also intended to help units comply with IT 4.6.1 and to support the growth of each unit's -- and the institution's overall -- security maturity index.

• Splunk at Illinois: splunk.illinois.edu
• Direct link to Illinois' Splunk Cloud: illinois.splunkcloud.com
• Service Catalog Entry: splunk-service-catalog
• Service Documentation: https://splunk.illinois.edu
  • Support (Contact Us): splunk-contacts
  • Resources (Training, etc.): splunk-resources 

Benefits of using Splunk at Illinois:

• Comply with IT 4.6.1 by sending your logs off-host
• Aggregate your machine (event / log) data from various sources and leverage the advantage of correlational analysis across those sources ... and with sources from campus.
• Develop your own (or use others') analyses to detect or even predict service degradations and outages. Alerts and automations available.
• Provide service analytics to unit / institution leadership.
• Use Machine Learning for predictive analysis and anomaly detection.
• For many technologies, Splunk "apps" are available (usually at no additional cost) that deliver pre-built field extraction, normalization, reports, alerts, dashboards, automations, etc.
• Take advantage of UIUC-specific enrichment data (in the form of 'lookups') such as org codes from codebook, etc.
• Approved for FERPA regulated data (but not HIPAA regulated data)