>> Narrator: Live from Orlando, Florida. It's theCUBE! Covering .conf18. Brought to you by Splunk. >> Welcome back to Orlando, everybody. Splunk .conf18. This is theCUBE, the leader in live tech coverage. I'm Dave Vellante with my co-host, Stu Miniman. Carnival Cruise Lines is back. We heard from them yesterday, we heard them on the main stage of .conf. CEO is up there with Doug Merritt. Sheldon White is here. He's an enterprise architect at Carnival Cruise Line And Alex Taberras, who's the director of threat intelligence at Carnival. Gents, welcome to theCUBE. >> Thank you. >> Doing a lot of talk on security today. They've lined us up, which is great. We love the conversation. So much to learn. Alex, I'll start with you. When you think about security and threat intelligence, what are the big changes that you've seen over the last, whatever, pick a time. Half a decade? Decade? Couple of years even. >> Alex: So, it's just the amount of threats that are coming in now and how fast they're coming in, right? We can't seem to be keeping up with everything that's happening in the environment, everything that's happening outside, trying to get into our environment and cause all that damage, right? So, that's why Splunk is awesome, right? I get to see everything come in, real time. I'm able to quickly pinpoint any action I need to take, send it to my team and have them immediate right away. >> So, Sheldon, yesterday we had ship and shore from Carnival and he was talking about really different problems. You know, the folks on the ship, they got 250 thousand people on the ocean at any one point in time collecting data, trying to make a better experience, keep them connected. Folks on the shore, obviously, websites and things like that. Where do you fit into that mix of ship and shore? >> Sheldon: Right, so there's an entire value stream that we map out as enterprise architects. And so, what we do there is analyze all the customer touch points. And then we aggregate all of that information into a pipeline that we then address our audiences with those critical KPIs. Operational and infrastructure, the entire stack. >> Dave: You guys obviously have very strong relationship with Splunk. We heard from your CEO, Arnold Donald, right? >> Alex: Correct. >> Interesting name, I haven't messed that up yet so. (laughing) And so, where did that relationship start? Did it start in SecOps? Did it start in IT operations management? >> Alex: So, it really started in Devops, right? And they started... They purchased Splunk, I think back in like 2007, 2008. And they started looking at it, right? And I think I was talking to one of our other architects and it was one gig is what we started at, right? Now, we're upwards of 600 gigs. Just for security. So, it started there and it just kind of morphed into this huge relationship where we're partnering and touching all aspects of our business with Splunk. You know, and the Cloud and everything else. >> So, we heard, I don't know if you guys saw the key notes today, but we saw some announcements building on yesterday's Splunk next announcement. We heard some business workflow and some industrial IOT. I would think both of those are relevant for you guys. Not industrial IOT, but your IOT. Do you see Splunk permeating further into the organization? I guess, the answer's yes. You kind of already said that. But I'm interested in what role you guys play in facilitating that ? Are you kind of champions, evangelist, experts, consultants? How does that work? How do you see that (mumbles)? >> Sheldon: So, we see ourselves as internal consultants. We have our internal customers that depend on our guidance and our end-to-end view of the business processes. So, and now as enter our Cloud journey, into the second year of our Cloud journey, just we're able to accelerate our time to value for our internal customers to gain even greater insights into what's happening ship and shore. >> Dave: I wonder how, if you can talk about, how enterprise architecture has changed over the last decade even. You know, it used to be you were trying to harden the two tier or three tier architecture and harden top, don't touch it, it works. And then, of course, we all know, it created a lot of different stove pipes and a lot of data was locked into those stove pipes. That's changed, obviously. Cloud, now the Edge. Maybe because you guys were always sort of a distributed data company, you approached it differently. But I wondered if you could gives us (mumbles)? >> Sheldon: No, that's an interesting question. Because the evolution is not so much enterprise architect as it is eco system architect, right? So, now you have these massively distributed systems. So, you're really managing an eco system of internal and third party. And then all the relevant touch points, right? Like Alex mentioned, all that perimeters constantly shifting now. So, yeah, our focus is always aligning with the on-time business process and our internal customers. >> Yeah, wonder if we could dig into the Cloud a little. Alex, can we start with you? How does Cloud fit into your world of security? >> Alex: So, for me, the Cloud, as far as Splunk goes, it allows me to expand and contract as needed, right? So before, we used to have our on premise hardware, very finite RAM memory, I mean, disk space everything. So now, with the Cloud, I'm able to expand my environment as I move across all my North American brands, European brands, to be able to gather all that data, look at it and take action on it, right? >> Stu: And Sheldon, you're using AWS. We see they're, every software provider lives in AWS. It's often in the marketplace. We been seeing a lot this week that there's a deeper partnership. There's actually a lot of integration. Maybe give us your viewpoint on what you've seen on how Splunk and AWS work together to meet your requirements. >> Yeah. So, that's an interesting evolution as well of that partnership, right? So, you're starting to see things like the S3 API integration. So that you're removing storage from the critical path. And now that opens up different scale of possibilities, right? And internal opportunities. But yes, as you can see, leveraging the machine learning toolkit. I saw that one coming. It's going to be interesting to see how that keeps evolving, right? And also, like I was speaking to Alex, about the natural language capability. So, that also is well brought into the dimension of how our senior leadership with interact with these operational platforms. >> Yeah, I got to thank you. You're going to have your customer's natural language has to get into some of their rooms. It's definitely future. >> Sheldon: Oh, it's going to be apart of that value chain. Yeah, for sure. >> Dave: How does the S3 API integration affect you guys? Obviously, you got to put Syntax in an object store, which is going to scale. What does that mean for you guys? >> Sheldon: So, using the Splunk developer Cloud, we could develop all sorts of solutions to manage it intelligently how our storage, right? In near real time. So, we can completely automate and that end-to-end just integration with Splunk, how it ingest, how long that data stays relevant and how we offload it into things like Glacier. >> Dave: In the enablement, there is the S3 API. So, you're taking advantage of all the AWS automation tooling. >> Sheldon: Correct. >> Is that right? >> Sheldon: Correct. >> Alright. >> Sheldon: That's another example of that side integration. Not only with the S3 API. Lex, for the natural language. Obviously, TensorFlow and the machine learning toolkit. So, I think you're going to see that type of... those type of capabilities expanding as Splunk evolves. Next year, I'm sure they're going to have a ton of more, you know, announcements around how this evolution continues, right? >> Dave: So, you know, I was interested in the TensorFlow and Spark integration. And Stu and I were talking in an earlier segment. It's great, developers love that. We saw a lot of demos today that was like, looks so simple. Anybody could do it. Even I might be able to do it. But as practitioners of Splunk, is it really going to be that easy? Are business users actually going to be able to pick this stuff up and what are they going to have to do in order to take advantage of Splunk? Some training involved? >> Sheldon: Right, right. >> What's the learning curve going to be like? >> Sheldon: That's a great question, because there's a dual focus to this, right? First, is offloading from the developer. All that heavy lifting of creating this user interface and the dashboards, per say. Now, its all API driven. So, as you saw, maybe in the keynote this morning, that within the demo, was an API driven dashboard came together in several minutes. But one is offloading that and the second part is just enabling the business user with other capabilities, like natural language process. And they don't necessarily need to be on that screen. They can get acception reporting through emails and voice commands. So, training is also part of it, obviously. So, it's a multifaceted approach to leveraging these new capabilities. >> Dave: Are you guys responsible for the physical infrastructure of your ships? I mean, is that part of your purview? Okay. So, really there's is an industrial IOT component big time for you guys. >> Absolutely. >> Alex: And there's a huge push now for Maritime security, right? We saw what happened with Maersk and NotPetya virus, right? So, how it took them out of operation for about three weeks. So, this IOT is very, I think, awesome, right? I was speaking to some of the Splunk guys yesterday about it. How we could leverage that on our ships to gather that data, right, from our SCADA systems. And from our bridge and engine control systems to be able to view any kind of threat. Any kind of vulnerability that we might be seeing in the environment. How we can control that and how we can predict anything from happening, right? So, that's going to be very key to us. >> Dave: So, Splunk is going to take that data right off the machines. Which Stu and I were talking, that to us is a huge advantage. So many IT companies are coming and saying, "Hey! We're going to put a box at the edge". That's nice, but what about the data? So, Splunk's starting with the data, but it's the standards of that data. They're really driven by engineers and operations technology folks. Is Splunk sort of standard agnostic? Can they be able to ingest that data? What has to be done for you guys to take advantage of that? >> So, we'll have to ingest that data. And we'll have to, you know, look at it and see what we're seeing, right? This is all brand new to us as well. >> Dave: Right. >> Right. This whole Maritime thing has risen up in the past year, year and a half. So, we're going to have to look at the data and then kind of figure out what we want to see. Normalize it, you know, we'll probably get some PS services or something to assist us. Some experts. And then we just go from there, right? We build our dashboards and our reports. >> Dave: And predictive maintenance is a huge use case for you guys. >> Alex: Absolutely. >> I mean, to me, it's as important as the airlines. >> Alex: Absolutely, yes. >> So, I would think, anytime you... Well, first of all, real time during a journey. But anytime that journey is completed, you must bring in the inspectors and, I'm sure, very time consuming and precise. >> So, I know that some of our senior leadership, especially in the Maritime space, has now looking towards Splunk to do some of that predictive maintenance. To make sure that we have that right nuts and bolts, right? Per say, on the ship. To be able to fix any issue that might arise at sea while we're on there. >> Dave: Now, it's expect that the drive is going to be for human augmentation and of drive efficiency. >> Alex: Correct. >> You're not just going to trust the machines right out of the box. No way, right? >> Alex: No. But it's empowering those engineers, right? As we see with some of the dashboards that they're coming up with at the keynote. Empowering some of the those engineers that are in the engine room. That are in bridge. To be able to see those issues come up, right? And be able to track. >> Dave: Plus, I would imagine this is the kind of thing like an airline pilot. You're double checking, you're triple checking. So, you might catch misses earlier on in the cycle. >> Alex: Yeah. I could see it having huge impact. >> Stu: Yeah. Sheldon, I was just thinking through the other next announcement. I wonder if Splunk business flows sounds like something that might fit into your data pipeline? Get insights, understand satisfaction. Seems like it might be a fit. Is that of interest to you? >> Sheldon: Yeah, it sure is. Because we definitely want to, since we've evolved with kind of fragmented systems. We still have main frames, we still have whole call center environment that we need to ensure that it's parts of the end-to-end guest experience. So, for sure, we're getting into the whole early adopter program on the process flow. >> Yeah. Can you give us little insight? What kind of back and forth do you have with Splunk? What sort of things are you asking that would help make your jobs easier going forward? >> So, going forward, I know they're addressing a lot so the ingestion and data standardization. And now, with the decoupling of the storage, which is awesome, makes our lives a lot easier. But the evolution of the natural language and the integration with AWS natively is huge for us, as well as our Cloud program matures. And we start enabling Serverless architectures, for example. So, yeah. No, it's a very important part. >> Stu: Yeah. I mean, Serverless is actually something we're pretty interested. What are some of the early places that you're finding value there? >> Well, many people don't know this, but Carnival's also one of the largest travel agencies in the United States. So, we have the whole... Well, it's the whole global air travel platform that we're currently migrating to a Serverless architecture, integrates with Sabre. So, we're looking at things like open trace for that. And I know that our friends at Splunk are enabling capabilities for that type of management. >> Dave: And what's the business impact of Serverless there? You're just better utilization of resources? Faster time to value? Maybe you could describe. >> Yeah. Near real time processing. Scaling up and scaling down seasonally. Our key aspects of that. Removing the constraints of CPU and storage and-- >> Dave: Alex, has it changed the security paradigm at all? Serverless? How does it change it? >> Alex: So, it does. It let's me not have to worry so much about on premise stuff, right? As I did before. So, that helps a lot, right? And being able to scale up and down quickly as much data as we're ingesting is very key for us. >> Dave: You guys are heavy into Cloud, it's obvious. I wonder if you could share with us how you decide, kind of, what goes? If you're not all in on Cloud, right? It's not 100 percent Cloud? >> Sheldon: No, we could never be all in. >> No. >> Dave: And we've put forth that notion for years. We call it "true private cloud". That what you want to do is bring the Cloud experience to your data, wherever that data lives. There's certain data and workloads that you're not just going to put into the Cloud. >> Sheldon: That's correct. >> So, you would confirm that. That's the case. Like, you just said it. >> Correct. >> Dave: You're never going to put some of these workloads on Cloud. >> Well, we have floating data centers. So, we'll always be in a hybrid model. But there is a decision framework around how we create those application, migration pipelines. And the complexity and interdependencies between these platforms, some are easier to move than others. So, yeah. No, we're quite aware of-- >> Dave: And so, my follow up question is are you trying to bring that Cloud experience to those... to the floating data centers, wherever possible? And how is the industry doing? If you had a grade them in terms of their success. I mean, you certainly hear this from the big tech suppliers. "Oh, yes! We've got private Cloud" and "It's just like the public Cloud". And we know it's not and it doesn't have to be. >> Sheldon: Right. >> But if it can substantially mimic that public Cloud experience, it's a win for you guys. So, how is the industry doing in your view? >> So, I think it's a crawl, walk, run type of thing. Obviously, you have these floating cities and satellite bandwidth is a precious resource that we have to use wisely, right? So, we definitely are Edge computing strategy is evolving rapidly. What do we act upon at the Edge? What do we send to the Cloud? When do we send it? There also some business drivers behind this. For example, one of our early Cloud forays was in replicating a guest activity aboard the ship. So, we know if somebody buys a margarita off the coast of Australia, we know it five seconds later. And then, we could act upon that data. Casino or whatever data it may be in near real time. >> So, a lot of data stays at the floating data center, obviously. >> Correct. >> Much of it comes back to the Cloud. When it comes back to the Cloud is a decision, 'cause of the expense of the bandwidth. What do you do? You part the ship at the data center and put a big fire hose in there? (laughing) >> Alex: I wish it was that easy. >> You got a bunch of disc drives that you just take and load up? That's got to be a challenge. >> So, there business requirements, right? So, we have to figure out what application is more important, right? So, usually like our ship property management system, right. Where we have all our guests data, as far as their names, birth dates, all that stuff. That takes priority over a lot of other things, right. So, we have to use, like Sheldon said, that bandwidth wisely. 'Cause we don't really own a lot of the ports that we go into. So, we can't, just like you say, plug in a cable and move on, right? We still rely heavily on our satellites. So, bandwidth is our number on constraint and we have to, you know, we share it with our revenue generating guests as well. So, obviously, they take priority and a lot of factors go into that. >> Dave: And data's not shrinking. So, I'll give you guys the last word, if you could just sort of summarize, in your view, some of the big challenges that you're going to try to apply Splunk towards solving in the next near to mid term. >> Alex: Well, I'm more security focused. So, for me, its just making sure that I can get that data as fast as possible. I know that I saw yesterday at the keynote, the mobile app. That for me is going to be like one of the things I'm going to go like, research right away, right? 'Cause for me, its' getting that alert right away when something's going on, so that I can mitigate quickly, move fast and stop those threats from hitting our environment. >> Dave: Sheldon? >> Yes, I think the challenges are, like you mentioned earlier, about the stove pipes and how organizations evolve. Now, with this massive influx of data, that just making sense of it from a people, technology and processes standpoint. So that we could manage the chaos, so to speak, right? And make sure that we have an orderly end-to-end view of all the activity on the ships. >> Dave: Well, thank you guys. Stu and I are like kids in a candy shop, 'cause we getting to talk to so many customers this week. So, we really appreciate your time and your insights and the inspiration for your peers. So, thank you. >> Oh, thank you very much. >> Alex: Thank you for having us. >> Dave: You're welcome. Alright, keep it right there everybody. Stu and I will be back right after this short break. You're watching theCUBE Live from .conf18. Be right back. (techno music)