Splunk Adds Ability To Search And Monitor Real-Time IT Data

Splunk 4.1 lets users search, monitor and analyze live streaming IT data as well as terabytes of historical data

April 5, 2010

4 Min Read


SAN FRANCISCO " APRIL 5, 2010 " Splunk, the IT Search company, today announced the availability of Splunk 4.1, providing the unique ability for users to search, monitor and analyze live streaming IT data as well as terabytes of historical data, all from the same interface, delivering the best of both worlds for IT data management.

The ability to search, analyze and create live dashboards with streaming data from the IT infrastructure delivers immediate visibility to operational, application, security and compliance issues. Now users can see incidents and attacks as they occur, monitor application SLAs in real time, correlate and analyze events on streaming data and track live transactions and online activity.

"Splunk has proven to be one of the best purchases the Enterprise Information Services (EIS) team at Autodesk has made in the past ten years. It's given us unprecedented visibility across our infrastructure and enabled us to answer any IT question," said Steve Litras, Senior Architect, Autodesk. "With Splunk 4.1 we now also have the ability to search, monitor and report on live streaming data," said Litras, adding, "this will enable Autodesk to deliver higher availability, track and analyze transactions and better monitor firewall and network traffic."

"Traditional technologies direct users down two separate paths: either data warehouses for big data historical analysis or tools specifically for real-time monitoring, resulting in serious tradeoffs due to separate systems with fundamentally different technology architectures," said Erik Swan, co-founder and chief technology officer, Splunk. "Splunk 4.1 is unique in that it combines in one solution with one user interface the ability to search, monitor and analyze all streaming data sources with Splunk's proven strengths searching unlimited amounts of historical IT data."

Last year Splunk introduced Splunk 4.0, re-architected to deliver an order-of-magnitude improvement in speed and scale, as well as enable the creation of custom views and dashboards extending the benefits of Splunk to business users and IT professionals alike. The Splunk'4.0 release accelerated adoption across enterprises " with 650 new customers being added in 2009 alone. Splunk 4.1 is based on a unique and patent-pending implementation of real-time search using MapReduce techniques, which delivers extreme scalability and enables the new real-time capabilities to scale linearly across commodity hardware.

"Splunk is delivering a powerful way for organizations to manage dynamic IT environments and identify data patterns, thwart security breaches, and correlate information across massive data sets, using live streaming data. Real-time IT Search allows organizations to gain immediate visibility into all of their IT infrastructure data and deliver visibility and meaning to all layers of the organization," stated Rachel Chalmers, Research Director, The 451 Group.

In addition to new real-time capabilities, Splunk 4.1 includes new features designed to support enterprise deployments and individual user productivity, such as:

Single Sign-on (SSO) Integrates with enterprise single sign-on solutions for transparent authentication of third-party credentials and simplifies credential management. Event-level workflows Create workflows directly from data in search results and automate required next steps, such as opening a trouble ticket, blocking an IP address, or looking up a product ID in an external database. Automatic and configurable data drilldown Drill down from charts to original events and determine root causes faster. Click on sections of charts to automatically refine searches without having to do so manually. Scheduled PDF report delivery Create, schedule and deliver PDFs of any Splunk dashboard, view, search or report and share meaningful information across the organization, even non-Splunk users. Event type finder and builder Automatically identify new event types based on recurring patterns in the data.

For more on the Splunk 4.1 release, including the new real-time search architecture: Attend the Splunk 4.1 global webcast: http://www.splunk.com/goto/productlaunch

View the product demo video: http://www.splunk.com/view/new-in-splunk-4-1/SP-CAAAFD5

View the technical overview video: http://www.splunk.com/view/real-time-in-splunk/SP-CAAAFD7

About Splunk Splunk is software that provides unique visibility across your entire IT infrastructure from one place in real time. Only Splunk enables you to search, report, monitor and analyze all your real-time streaming and historical IT data. Now you can troubleshoot application problems and investigate security incidents in minutes instead of hours or days, monitor to avoid service degradation or outages, deliver compliance at lower cost and gain new business insights from your IT data. Over 1,750 enterprises, service providers and government organizations in 67 countries use Splunk to realize new levels of service quality, reduce IT operations costs and mitigate security risks in record time. The world's leading technology providers and over 50 system integrator, value-added reseller and managed service provider partners are driving new business and fueling their offerings with Splunk. Download your own free copy of Splunk today at http://www.splunk.com/download.

For more information, please contact: Media Contacts: Joe Fitzpatrick Splunk Inc. 415.848.8553

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.

You May Also Like

More Insights