The Fintech Company had a remarkable payment infrastructure, but no matter how good the system seemed to be, there were always problems. Despite having the latest and greatest technology available, their systems kept going down, resulting in data loss. The reports and alerts were also delayed, causing a lack of real-time monitoring. The Company collaborated with Positka, a Splunk Cloud partner, to resolve the issue.
Challenges:
- Frequent Infrastructure downtime which resulted in Data loss
- Delayed Alerts and Reports which had an impact on real-time monitoring
- Improper index retention settings
- Applications were deployed on Kubernetes and the logs were ingested into Splunk, due to the frequent downtime data loss that occurred.
- Historical data migration of 16 TB
- Splunk Cloud configuration and migration of Knowledge Objects
- Vetting of customs apps, add-ons, and knowledge objects
- Preparing and migrating custom apps, KOs, and add-ons from on-prem to Splunk Cloud stack
Solution:
- A holistic review of the existing Splunk architecture and implemented Splunk deployment best practices wherever applicable for a smooth migration path to Splunk Cloud
- Identifying potential pitfalls clearly to take any remediation actions
- Collaborative engagement to thoroughly execute a plan to migrate configurations and historical data content.
- Following a prescriptive approach to identify and prioritize the migration with defined milestones
- Adhering to Splunk Cloud Security best practices
- Online smart store data migration
Benefits:
- Retired On-prem Splunk and moved to Splunk Cloud stack by migrating successfully
- No downtime on the Infra side and data loss is evicted
- Have all the configurations, apps, and K0’s for full functionality as it was before
- Migration of historical data which allows searching old data
- Improved search performance
- Moving to Splunk Cloud, the customer now can reallocate their time to focusing higher value tasks that are tied to business outcomes rather than spending effort on platform management which is now taken care of by Splunk on Cloud
Users: Information Security Team
Product: Splunk Cloud
