A Real AI-ML Enabled Platform

Splunk is being used by our infrastructure monitoring team to review events from different sets of infrastructure devices such as Networks, Servers, Storage, Databases and Security devices. Splunk is helping out our IT team by collecting the events from multiple data sources and aggregating all of them in a single glass pane.

Since Splunk is capable of receiving data and events stream from almost all sorts of IT infrastructure tools our IT team is getting a lot of help through correlation, grouping of alerts and data events. This is eventually reducing the MTTR and time to identify the root cause analysis. Almost all of our monitoring tools are integrated with Splunk ITSI.

Although Splunk has a powerful machine-learning engine with its own proprietary algorithm, there is room for improvement. However within its current state Splunk has no match with other AI-enabled products. We are using Splunk ML feature for predicting the number of events that we are going to receive in the next day, week and month. Also we are not able to see actionable vs non-actionable alerts.

Because of its unique capabilities we are getting benefits in below forms:

1. Reduced MTTR.
2. Root cause analysis.
3. Maximize performance.
4. Reduced mean time to identify issues.

Because Splunk ITSI is helping us find the root cause of the problem we are not more focused on next deliverable and features we want to have in our IT rather than whole team spending time in finding the problem source.