狠狠撸

狠狠撸Share a Scribd company logo
Machine Data for the Masses
WHO I AM
Co-Founder & CTO, Sumo Logic
Cloud-based Machine Data Analytics Service
Applications, Operations, Security
Chief Architect, ArcSight
Major SIEM player in the enterprise space
Log Management for security and compliance
AGENDA
Paradox 1
Nach dem Spiel ist immer vor dem Spiel
Paradox 2
Processing data creates exponentially more data
Conclusion
Machine Data is Continuous Intelligence
Machine Data for the Masses
Machine Data for the Masses
Machine Data for the Masses
Machine Data for the Masses
Machine Data for the Masses
OPTIMIZATION
PARADOX 1
Nach dem Spiel
ist immer vor dem Spiel
“After the game is before the game”
SOFTWARE IS EATING THE WORLD
DATA IS EATING YOUR BUSINESS
Data is growing 2X YoY
Machine Data for the Masses
5%Analyzed
95% Underground
Machine Data for the Masses
MACHINE DATA
Data generated by machines (d’oh!)
Machine Data is data that was produced entirely by
machines, or data that is more about observing
humans than recording their choices
Curt Monash, Database Analyst Guru
MACHINE DATA
Data generated by machines (d’oh!)
Logs, CDR, Trades, Telemetry, Security Events
Machine Data for the Masses
MACHINE DATA
Data generated by machines (d’oh!)
Logs, CDR, Trades, Network & Security Events
Poly-structured, instructions not included
Comes at you in real-time
A lot of it, and growing exponentially
Machine Data for the Masses
PARADOX 2
Processing data creates
exponentially more data
Machine Data for the Masses
THIS IS PRODUCTION
YOU ARE HERE
? CEO / Board / Shareholders
? Customers
? Partners
? Customer Success
? CSO / VP Security
? Product Management
App Log
App
Monitoring
Infra
Monitoring
Ad-hoc Tools
Cloud
Management
Infra Log
Security
Tools
Compliance
Reporting
Dev Tools
Modern
Application
OpsDevOps
LOBSecurity
MACHINE DATA IN 3 DIMENSIONS
Data
Use Case
Actor
DIMENSION: USE CASE
Reactive
Predictive
Proactive
Complex Fault & Root Cause Analysis
REACTIVE
How Long Until Problem Identified & Resolved?
Watch What Happens Live
PROACTIVE
How Long Until You Know You Have A Problem?
Attempt To Prevent Bad Things
PREDICTIVE
How Can We Not Have A Problem At All?
DIMENSION: DATA
Data Surfing
Aggregation
DIMENSION: ACTOR
Machine
Man
Correlation
Causation
1,200+ ENTERPRISE CUSTOMERS WITH OVER 10,000 USERS
Financial	&	
Prof.	Services
Travel SaaS	&	Cloud Media	&	Entertainment
Retail,	Industrials	&	Mfg. Gov.	&	Education Tech.	&	Communications Healthcare
As	of	March	2016
SUMMARY
Machine Data is
Continuous Intelligence
@raychaser

More Related Content

Similar to Machine Data for the Masses (20)

DSS and Security Intelligence @IBM_Connect_2014_April
DSS and Security Intelligence @IBM_Connect_2014_AprilDSS and Security Intelligence @IBM_Connect_2014_April
DSS and Security Intelligence @IBM_Connect_2014_April
Andris Soroka
?
20170613 iasa architecture - Tim Willoughby presentation
20170613   iasa architecture  - Tim Willoughby presentation20170613   iasa architecture  - Tim Willoughby presentation
20170613 iasa architecture - Tim Willoughby presentation
Tim Willoughby
?
1 big datacampdell2013
1 big datacampdell20131 big datacampdell2013
1 big datacampdell2013
Valerie Akinson Brown
?
1 big datacampdell2013
1 big datacampdell20131 big datacampdell2013
1 big datacampdell2013
Valerie Akinson Brown
?
1 big datacampdell2013
1 big datacampdell20131 big datacampdell2013
1 big datacampdell2013
BigDataCamp
?
1 big datacampdell2013
1 big datacampdell20131 big datacampdell2013
1 big datacampdell2013
Valerie Akinson Brown
?
Upgrade Your SOC with Cortex XSOAR & Elastic SIEM
Upgrade Your SOC with Cortex XSOAR & Elastic SIEMUpgrade Your SOC with Cortex XSOAR & Elastic SIEM
Upgrade Your SOC with Cortex XSOAR & Elastic SIEM
Elasticsearch
?
Computer conceptsok
Computer conceptsokComputer conceptsok
Computer conceptsok
Nasreen Akhtar
?
Tech 101
Tech 101Tech 101
Tech 101
Ramon Ray
?
ESET on cybersecurity.
ESET on cybersecurity.ESET on cybersecurity.
ESET on cybersecurity.
SOCIALware Benelux
?
Productivity and Security with Microsoft 365 and the Modern Desktop
Productivity and Security with Microsoft 365 and the Modern DesktopProductivity and Security with Microsoft 365 and the Modern Desktop
Productivity and Security with Microsoft 365 and the Modern Desktop
David J Rosenthal
?
Big security for big data
Big security for big dataBig security for big data
Big security for big data
Giuliano Tavaroli
?
"Evolving Cybersecurity Strategies" - Identity is the new security boundary
"Evolving Cybersecurity Strategies" - Identity is the new security boundary"Evolving Cybersecurity Strategies" - Identity is the new security boundary
"Evolving Cybersecurity Strategies" - Identity is the new security boundary
Dean Iacovelli
?
Using Big Data to Counteract Advanced Threats
Using Big Data to Counteract Advanced ThreatsUsing Big Data to Counteract Advanced Threats
Using Big Data to Counteract Advanced Threats
Zivaro Inc
?
Bringing Mainframe Security Information Into Your Splunk Security Operations ...
Bringing Mainframe Security Information Into Your Splunk Security Operations ...Bringing Mainframe Security Information Into Your Splunk Security Operations ...
Bringing Mainframe Security Information Into Your Splunk Security Operations ...
Precisely
?
BOSS deploy presentation
BOSS deploy presentationBOSS deploy presentation
BOSS deploy presentation
Sue Baxter
?
Retail IT 2013: Data Security & PCI Compliance Briefing
Retail IT 2013: Data Security & PCI Compliance BriefingRetail IT 2013: Data Security & PCI Compliance Briefing
Retail IT 2013: Data Security & PCI Compliance Briefing
Kaseya
?
Core Code Introduction
Core Code IntroductionCore Code Introduction
Core Code Introduction
joohwannoh
?
Presentation2
Presentation2Presentation2
Presentation2
Jerin Antony
?
AI & ML in Cyber Security - Welcome Back to 1999 - Security Hasn't Changed
AI & ML in Cyber Security - Welcome Back to 1999 - Security Hasn't ChangedAI & ML in Cyber Security - Welcome Back to 1999 - Security Hasn't Changed
AI & ML in Cyber Security - Welcome Back to 1999 - Security Hasn't Changed
Raffael Marty
?
DSS and Security Intelligence @IBM_Connect_2014_April
DSS and Security Intelligence @IBM_Connect_2014_AprilDSS and Security Intelligence @IBM_Connect_2014_April
DSS and Security Intelligence @IBM_Connect_2014_April
Andris Soroka
?
20170613 iasa architecture - Tim Willoughby presentation
20170613   iasa architecture  - Tim Willoughby presentation20170613   iasa architecture  - Tim Willoughby presentation
20170613 iasa architecture - Tim Willoughby presentation
Tim Willoughby
?
1 big datacampdell2013
1 big datacampdell20131 big datacampdell2013
1 big datacampdell2013
BigDataCamp
?
Upgrade Your SOC with Cortex XSOAR & Elastic SIEM
Upgrade Your SOC with Cortex XSOAR & Elastic SIEMUpgrade Your SOC with Cortex XSOAR & Elastic SIEM
Upgrade Your SOC with Cortex XSOAR & Elastic SIEM
Elasticsearch
?
Productivity and Security with Microsoft 365 and the Modern Desktop
Productivity and Security with Microsoft 365 and the Modern DesktopProductivity and Security with Microsoft 365 and the Modern Desktop
Productivity and Security with Microsoft 365 and the Modern Desktop
David J Rosenthal
?
"Evolving Cybersecurity Strategies" - Identity is the new security boundary
"Evolving Cybersecurity Strategies" - Identity is the new security boundary"Evolving Cybersecurity Strategies" - Identity is the new security boundary
"Evolving Cybersecurity Strategies" - Identity is the new security boundary
Dean Iacovelli
?
Using Big Data to Counteract Advanced Threats
Using Big Data to Counteract Advanced ThreatsUsing Big Data to Counteract Advanced Threats
Using Big Data to Counteract Advanced Threats
Zivaro Inc
?
Bringing Mainframe Security Information Into Your Splunk Security Operations ...
Bringing Mainframe Security Information Into Your Splunk Security Operations ...Bringing Mainframe Security Information Into Your Splunk Security Operations ...
Bringing Mainframe Security Information Into Your Splunk Security Operations ...
Precisely
?
BOSS deploy presentation
BOSS deploy presentationBOSS deploy presentation
BOSS deploy presentation
Sue Baxter
?
Retail IT 2013: Data Security & PCI Compliance Briefing
Retail IT 2013: Data Security & PCI Compliance BriefingRetail IT 2013: Data Security & PCI Compliance Briefing
Retail IT 2013: Data Security & PCI Compliance Briefing
Kaseya
?
Core Code Introduction
Core Code IntroductionCore Code Introduction
Core Code Introduction
joohwannoh
?
AI & ML in Cyber Security - Welcome Back to 1999 - Security Hasn't Changed
AI & ML in Cyber Security - Welcome Back to 1999 - Security Hasn't ChangedAI & ML in Cyber Security - Welcome Back to 1999 - Security Hasn't Changed
AI & ML in Cyber Security - Welcome Back to 1999 - Security Hasn't Changed
Raffael Marty
?

Recently uploaded (20)

Rosa_Ivelisse_PublishingCompanyPitch(1).docx
Rosa_Ivelisse_PublishingCompanyPitch(1).docxRosa_Ivelisse_PublishingCompanyPitch(1).docx
Rosa_Ivelisse_PublishingCompanyPitch(1).docx
irramos8843
?
RAGing Against the Literature: LLM-Powered Dataset Mention Extraction-present...
RAGing Against the Literature: LLM-Powered Dataset Mention Extraction-present...RAGing Against the Literature: LLM-Powered Dataset Mention Extraction-present...
RAGing Against the Literature: LLM-Powered Dataset Mention Extraction-present...
suchanadatta3
?
+data_warehousing_hoffer_edm_pp_ch09.ppt
+data_warehousing_hoffer_edm_pp_ch09.ppt+data_warehousing_hoffer_edm_pp_ch09.ppt
+data_warehousing_hoffer_edm_pp_ch09.ppt
aaarashsaadati
?
加拿大成绩单购买原版(鲍颁毕业证书)卡尔加里大学毕业证文凭
加拿大成绩单购买原版(鲍颁毕业证书)卡尔加里大学毕业证文凭加拿大成绩单购买原版(鲍颁毕业证书)卡尔加里大学毕业证文凭
加拿大成绩单购买原版(鲍颁毕业证书)卡尔加里大学毕业证文凭
taqyed
?
stages-of-moral-development-lawrence-kohlberg-pdf-free.pdf
stages-of-moral-development-lawrence-kohlberg-pdf-free.pdfstages-of-moral-development-lawrence-kohlberg-pdf-free.pdf
stages-of-moral-development-lawrence-kohlberg-pdf-free.pdf
esguerramark1991
?
exampleexampleexampleexampleexampleexampleexampleexample
exampleexampleexampleexampleexampleexampleexampleexampleexampleexampleexampleexampleexampleexampleexampleexample
exampleexampleexampleexampleexampleexampleexampleexample
lembiczkat
?
办理魁北克大学成绩单触购买加拿大鲍蚕础惭成绩单文凭定制
办理魁北克大学成绩单触购买加拿大鲍蚕础惭成绩单文凭定制办理魁北克大学成绩单触购买加拿大鲍蚕础惭成绩单文凭定制
办理魁北克大学成绩单触购买加拿大鲍蚕础惭成绩单文凭定制
taqyed
?
原版复刻加拿大多伦多大学成绩单(UTSG毕业证书) 文凭
原版复刻加拿大多伦多大学成绩单(UTSG毕业证书) 文凭原版复刻加拿大多伦多大学成绩单(UTSG毕业证书) 文凭
原版复刻加拿大多伦多大学成绩单(UTSG毕业证书) 文凭
taqyed
?
Valkey 101 - SCaLE 22x March 2025 Stokes.pdf
Valkey 101 - SCaLE 22x March 2025 Stokes.pdfValkey 101 - SCaLE 22x March 2025 Stokes.pdf
Valkey 101 - SCaLE 22x March 2025 Stokes.pdf
Dave Stokes
?
Class 3-Workforce profile updated P.pptx
Class 3-Workforce profile updated P.pptxClass 3-Workforce profile updated P.pptx
Class 3-Workforce profile updated P.pptx
angelananalucky
?
IFRS Finance Powerpoint ppt Finance D.pptx
IFRS Finance Powerpoint  ppt Finance D.pptxIFRS Finance Powerpoint  ppt Finance D.pptx
IFRS Finance Powerpoint ppt Finance D.pptx
amantiwari2091
?
the data analytics process:Real life applications
the data analytics process:Real life applicationsthe data analytics process:Real life applications
the data analytics process:Real life applications
jhanvisaxena30
?
data mining tools.pptxvdvjdggmgmgelmgleg
data mining tools.pptxvdvjdggmgmgelmglegdata mining tools.pptxvdvjdggmgmgelmgleg
data mining tools.pptxvdvjdggmgmgelmgleg
1052LaxmanrajS
?
Presentation.2 .reversal. reversal. pptx
Presentation.2 .reversal. reversal. pptxPresentation.2 .reversal. reversal. pptx
Presentation.2 .reversal. reversal. pptx
siliaselim87
?
Deep-QPP: A Pairwise Interaction-based Deep Learning Model for Supervised Que...
Deep-QPP: A Pairwise Interaction-based Deep Learning Model for Supervised Que...Deep-QPP: A Pairwise Interaction-based Deep Learning Model for Supervised Que...
Deep-QPP: A Pairwise Interaction-based Deep Learning Model for Supervised Que...
suchanadatta3
?
The truth behind the numbers: spotting statistical misuse.pptx
The truth behind the numbers: spotting statistical misuse.pptxThe truth behind the numbers: spotting statistical misuse.pptx
The truth behind the numbers: spotting statistical misuse.pptx
andyprosser3
?
2025-03-03-Philly-AAAI-GoodData-Build Secure RAG Apps With Open LLM
2025-03-03-Philly-AAAI-GoodData-Build Secure RAG Apps With Open LLM2025-03-03-Philly-AAAI-GoodData-Build Secure RAG Apps With Open LLM
2025-03-03-Philly-AAAI-GoodData-Build Secure RAG Apps With Open LLM
Timothy Spann
?
Stasiun kernel pabrik kelapa sawit indonesia
Stasiun kernel pabrik kelapa sawit indonesiaStasiun kernel pabrik kelapa sawit indonesia
Stasiun kernel pabrik kelapa sawit indonesia
fikrimanurung1
?
Developing a Music Distribution Plan for Bri La Pelúa
Developing a Music Distribution Plan for Bri La PelúaDeveloping a Music Distribution Plan for Bri La Pelúa
Developing a Music Distribution Plan for Bri La Pelúa
irramos8843
?
Optimizing Common Table Expressions in Apache Hive with Calcite
Optimizing Common Table Expressions in Apache Hive with CalciteOptimizing Common Table Expressions in Apache Hive with Calcite
Optimizing Common Table Expressions in Apache Hive with Calcite
Stamatis Zampetakis
?
Rosa_Ivelisse_PublishingCompanyPitch(1).docx
Rosa_Ivelisse_PublishingCompanyPitch(1).docxRosa_Ivelisse_PublishingCompanyPitch(1).docx
Rosa_Ivelisse_PublishingCompanyPitch(1).docx
irramos8843
?
RAGing Against the Literature: LLM-Powered Dataset Mention Extraction-present...
RAGing Against the Literature: LLM-Powered Dataset Mention Extraction-present...RAGing Against the Literature: LLM-Powered Dataset Mention Extraction-present...
RAGing Against the Literature: LLM-Powered Dataset Mention Extraction-present...
suchanadatta3
?
+data_warehousing_hoffer_edm_pp_ch09.ppt
+data_warehousing_hoffer_edm_pp_ch09.ppt+data_warehousing_hoffer_edm_pp_ch09.ppt
+data_warehousing_hoffer_edm_pp_ch09.ppt
aaarashsaadati
?
加拿大成绩单购买原版(鲍颁毕业证书)卡尔加里大学毕业证文凭
加拿大成绩单购买原版(鲍颁毕业证书)卡尔加里大学毕业证文凭加拿大成绩单购买原版(鲍颁毕业证书)卡尔加里大学毕业证文凭
加拿大成绩单购买原版(鲍颁毕业证书)卡尔加里大学毕业证文凭
taqyed
?
stages-of-moral-development-lawrence-kohlberg-pdf-free.pdf
stages-of-moral-development-lawrence-kohlberg-pdf-free.pdfstages-of-moral-development-lawrence-kohlberg-pdf-free.pdf
stages-of-moral-development-lawrence-kohlberg-pdf-free.pdf
esguerramark1991
?
exampleexampleexampleexampleexampleexampleexampleexample
exampleexampleexampleexampleexampleexampleexampleexampleexampleexampleexampleexampleexampleexampleexampleexample
exampleexampleexampleexampleexampleexampleexampleexample
lembiczkat
?
办理魁北克大学成绩单触购买加拿大鲍蚕础惭成绩单文凭定制
办理魁北克大学成绩单触购买加拿大鲍蚕础惭成绩单文凭定制办理魁北克大学成绩单触购买加拿大鲍蚕础惭成绩单文凭定制
办理魁北克大学成绩单触购买加拿大鲍蚕础惭成绩单文凭定制
taqyed
?
原版复刻加拿大多伦多大学成绩单(UTSG毕业证书) 文凭
原版复刻加拿大多伦多大学成绩单(UTSG毕业证书) 文凭原版复刻加拿大多伦多大学成绩单(UTSG毕业证书) 文凭
原版复刻加拿大多伦多大学成绩单(UTSG毕业证书) 文凭
taqyed
?
Valkey 101 - SCaLE 22x March 2025 Stokes.pdf
Valkey 101 - SCaLE 22x March 2025 Stokes.pdfValkey 101 - SCaLE 22x March 2025 Stokes.pdf
Valkey 101 - SCaLE 22x March 2025 Stokes.pdf
Dave Stokes
?
Class 3-Workforce profile updated P.pptx
Class 3-Workforce profile updated P.pptxClass 3-Workforce profile updated P.pptx
Class 3-Workforce profile updated P.pptx
angelananalucky
?
IFRS Finance Powerpoint ppt Finance D.pptx
IFRS Finance Powerpoint  ppt Finance D.pptxIFRS Finance Powerpoint  ppt Finance D.pptx
IFRS Finance Powerpoint ppt Finance D.pptx
amantiwari2091
?
the data analytics process:Real life applications
the data analytics process:Real life applicationsthe data analytics process:Real life applications
the data analytics process:Real life applications
jhanvisaxena30
?
data mining tools.pptxvdvjdggmgmgelmgleg
data mining tools.pptxvdvjdggmgmgelmglegdata mining tools.pptxvdvjdggmgmgelmgleg
data mining tools.pptxvdvjdggmgmgelmgleg
1052LaxmanrajS
?
Presentation.2 .reversal. reversal. pptx
Presentation.2 .reversal. reversal. pptxPresentation.2 .reversal. reversal. pptx
Presentation.2 .reversal. reversal. pptx
siliaselim87
?
Deep-QPP: A Pairwise Interaction-based Deep Learning Model for Supervised Que...
Deep-QPP: A Pairwise Interaction-based Deep Learning Model for Supervised Que...Deep-QPP: A Pairwise Interaction-based Deep Learning Model for Supervised Que...
Deep-QPP: A Pairwise Interaction-based Deep Learning Model for Supervised Que...
suchanadatta3
?
The truth behind the numbers: spotting statistical misuse.pptx
The truth behind the numbers: spotting statistical misuse.pptxThe truth behind the numbers: spotting statistical misuse.pptx
The truth behind the numbers: spotting statistical misuse.pptx
andyprosser3
?
2025-03-03-Philly-AAAI-GoodData-Build Secure RAG Apps With Open LLM
2025-03-03-Philly-AAAI-GoodData-Build Secure RAG Apps With Open LLM2025-03-03-Philly-AAAI-GoodData-Build Secure RAG Apps With Open LLM
2025-03-03-Philly-AAAI-GoodData-Build Secure RAG Apps With Open LLM
Timothy Spann
?
Stasiun kernel pabrik kelapa sawit indonesia
Stasiun kernel pabrik kelapa sawit indonesiaStasiun kernel pabrik kelapa sawit indonesia
Stasiun kernel pabrik kelapa sawit indonesia
fikrimanurung1
?
Developing a Music Distribution Plan for Bri La Pelúa
Developing a Music Distribution Plan for Bri La PelúaDeveloping a Music Distribution Plan for Bri La Pelúa
Developing a Music Distribution Plan for Bri La Pelúa
irramos8843
?
Optimizing Common Table Expressions in Apache Hive with Calcite
Optimizing Common Table Expressions in Apache Hive with CalciteOptimizing Common Table Expressions in Apache Hive with Calcite
Optimizing Common Table Expressions in Apache Hive with Calcite
Stamatis Zampetakis
?

Machine Data for the Masses