Image Title

Search Results for Splunk .conf21:

Spiros Xanthos, Splunk | Splunk .conf21


 

(Upbeat music) >> Hi everyone and welcome back to the Cube's coverage of Splunk.conf 2021, virtual. We are here, live in the Splunk studios here in Silicon valley. I'm John Furrier, host of the Cube. Spiros Xanthos VP of product management of observability with Splunk is here inside the cube, Spiros, thanks for coming on. Great to see you. [Spiros Xanthos]- John, thanks for having me glad to be here. >> We love observability. Of course we love Kubernetes, but that was before observability became popular. We've been covering cube-con since it was invented even before, during the OpenStack days, a lot of open source momentum with you guys with observability and also in the customer base. So I want to thank you for coming on. Give us the update. What is the observability story its clearly in the headlines of all the stories SiliconANGLE's headline is multi-cloud observability security Splunk doubling down on all three. >> Correct. >> Big part of the story is observability. >> Correct. And you mentioned CubeCon. I was there last week as well. It seems that those observability and security are the two most common buzzwords you hear these days different from how it was when we started it. But yeah, Splank actually has made the huge investment in observability, starting with the acquisition of Victor ops three years ago, and then with Omnition and Signalfx. And last year with Plumbr synthetics company called Rigor and Flowmill and a network monitoring company. And plus a lot of organic investment we've made over the last two years to essentially build an end-to-end observability platform that brings together metrics, traces, and logs, or otherwise infrastructure monitoring, log analytics, application monitoring. Visual experience monitoring all in one platform to monitor let's say traditional legacy and modern cloud native apps. >> For the folks that know SiliconANGLE, the Cube know we've been really following this from the beginning for signal effects, remember when they started they never changed their course. they've had the right They have the right history and from spot by spot, you guys, same way open source and cloud was poo-pooed upon, people went like, oh, it's not secure, they never were. Now it's the center of all the action. [Spiros Xanthos]- Yes >> And so that's really cool. And thanks for doing that. The other thing I want to get your point on is what does end-to-end observability mean? Because there's a lot of observability companies out there right now saying, Hey, we're the solution We're the utility, we're the tool, but I haven't seen a platform. So what's your answer to that? >> Yes. So observability, in my opinion, in the context of what you're describing means two things. One is that when, when we say internal durability, it means that instead of having, let's say multiple monitoring tools that are silent, let's say one for monitoring network, one for monitoring infrastructure, a separate one for monitoring APM that do not work with each other. We bring all of these telemetry in one place we connect it and exactly because actually applications and infrastructure themselves are becoming one. You have a way to monitor all of it from one place. So that's observability. But the other thing that observability also is because these environments tend to be a lot more complex. It's not just about connecting them, right? It's also about having enough data and enough analytics to be able to make sense out of those environments and solve problems faster than you could do in the past with traditional monitoring. >> That's a great definition. I've got to then ask you one of the things coming up that came out of CoopCon was clear, is that the personnel to hire, to run this stuff, it's not everyone can get the skills gap problem. At the same time, automation is at an all time high people are automating and doing AI ops, get outs. What do you want to call this a buzz word for that basically automating the data observability into the CICB pipeline, huge trend right now. And the speed of developers is fast now. They're coding fast. They don't want to wait. >> I agree. So, and that's exactly what's happening, right? We want essentially from traditional IT where developers would develop something a little bit deployed months later by some IT professional, of course, all of this coming together, But we're not stopping that as you say, right, that the shifting left is going earlier into the pipeline. Everyone expect, essentially let's say monitoring to happen at the speed of deployment. And I guess observability again, is this not, as a requirement. Observability is this idea. Let's say that I should be able to monitor my applications in real time and, you know, get information as soon as something happens. >> With the evolution of the shift left trend. I would say for the people don't know what shift left is you put security the beginning, not bolted on at the end and developers can do it with automation, all that good stuff that they have. But how, how real is that right now in terms of it happening? Can you, can you share some vision and ideas and anecdotal data on how, how fast shift left is, or is there still bottlenecks and security groups and IT groups? >> So there are bottlenecks for sure. In my opinion, we are aware with, let's say the shift left or the dev sec ops trend, whether IT and devs maybe a few years ago. And this is both a cultural evolution that has to happen. So security teams and developers have to come closer together, understand like, say the consensus of the requirements of each other so they can work better together the way it happened with DevOps and all sorts of tooling problem, right? Like still observability or monitoring solutions are not working very well with security yet. We at Splunk of course, make this a priority. And we have the platform to integrate all the data in one place. But I don't think is generally something that we'll have achieved as well as an industry yet. And including the cultural aspects of it. >> Is that why you think end to end is important to hit that piece there so that people feel like it's all working together >> I think end to end is important for two reasons. actually one is that essentially, as you say, you hit all the pieces from the point of deployment, let's say all the way to production, but it's also because I think applications and infrastructure, FMLA infrastructure with Kubernetes, microservices are in traditional so much more complexity that you need to step function improvement in the tooling as well. Right? So that you need keep up with the complexity. So bringing everything together and applying analytics on top is the way essentially to have this step function improvement in how your monitoring solution works so that it can keep up with the complexity of the underlying infrastructure and application. >> That is a huge, huge points Spiros. I got to double down on that with you and say, let's expand that because that's the number one problem, taming the complexity without slowing down. Right? So what is the best practice for that? What do people do? Cause, I mean, I know it's evolving, it's going faster than that, but it's still getting better, but not always there, but what can people do to go faster? >> So, and I will add that it's even more complex than just what the cloud, let's say, native applications introduced because especially large enterprises have to maintain their routine, that on-prem footprint legacy applications that are still in production and then still expand. So it's additive to what they have today, right? If somebody was to start from a clean slate, let's say started with Kubernetes today, maybe yes, we have the cloud native tooling to monitor that, but that's not the reality of most, most enterprises out there. Right? So I think our goal at Splunk at least is to be able to essentially work with our customers through their digital, digital transformation and cloud journey. So to be able to support all their existing applications, but also help them bring those to the cloud and develop new applications in a cloud native fashion, let's say, and we have the tooling, I think, to support all of that, right between let's say our original data platform and our metrics and traces platform that we develop further. >> That's awesome. And then one quick question on the customer side, if I'm a customer, I want observability, I want this, I want everything you just said. How do I tell the difference between a pretender and a player, the good solution and a bad solution? What are the signals that this is the real deal, that's a fake product >> Agreed. So, I mean, everyone obviously believes that original (laughing) I'm not sure if I will. >> You don't want to name names? Here's my, my perspective on what truly is a requirement for absorb-ability right? First of all, I think we have moved past the time where let's say proprietary instrumentation and data collection was a differentiator. In fact, it actually is a problem today, if you are deploying that because it creates silos, right? If I have a proprietary instrumentation approach for my application, that data cannot be connected to my infrastructure or my logs, let's say, right. So that's why we believe open telemetry is the future. And we start there in terms of data collection. Once we standardize, let's say data collection, then the problem moves to analytics. And that's, I think where the future is, right? So observability is not just about collecting a bunch of data and that bring it back to the user. It's about making sense out of this data, right? So the name of the game is analytics and machine learning on top of the data. And of course the more data you can collect, the better it is from that perspective. And of course, then when we're talking about enterprises, scale controls, compliance all of these matter. And I think real time matters a lot as well, right? We cannot be alerting people after minutes of a problem that has happened, but within a few seconds, if we wanted to really be pro-active. >> I think one thing I like to throw out there, maybe get your reaction to it, I think maybe one other thing might be enabling the customer to code on top of it, because I think trying to own the vertical stack as well as is also risky as a vendor to sell to a company, having the ability to add programming ability on top of it. >> I completely agree actually, You do? In general giving more control to the users and how, what do they do with their data, let's say, right? And even allowing them to use open source, whatever is appropriate for them, right? In combination, maybe with a vendor solution when they don't want to invest themselves. >> Build their own apps, build your own experience. That's the way the world works. That's software. >> I agree. And again, Splunk from the beginning was about that, right? Like we'll have thousands of apps built ontop of our platform >> Awesome. Well, I want to talk about open source and the work you're doing with open telemetry. I think that's super important. Again, go back even five, 10 years ago. Oh my God. The cloud's not secure. Oh my God, open source has got security holes. It turns out it's actually the opposite now. So, you know finally through the people woke up. No, but it's gotten better. So take us through the open telemetry and what you guys are doing with that. >> Yes. So first of all, my belief, my personal belief is that if there is no future where infrastructure is anything about open source, right? Because people do not trust actually close our solutions in terms of security. They prefer open source at this point. So I think that's the future. And in that sense, a few years ago, I guess our belief was that all data collection instrumentations with standards based first of all, so that the users have control and second should be open source. That's why we, at Omnition the company I co-founded that was acquired by Splunk. We we're one of the main tenders of open sensors and that we brought together open sensors and OpenTracing in creating open telemetry. And now , Open telemetry is pretty much the de facto. Every vendor supports it, its the second most active project in CNCF. And I think it's the future, right? Both because it frees up the data and breaks up the silos, but also because, has support from all the vendors. It's impossible for any single vendor to keep up with all this complexity and compete with the entire industry when we all come together. So I think it's a great success it's I guess, kudos to everybody, kudos to CNCF as well, that was able to actually create and some others. >> And props to CNCF. Yeah. CNC has done an amazing job and been going to all those events all the years and all the innovations has been phenomenal. I got to ask what the silos, since you brought it up, come multiple times. And again, I think this is important just to kind of put an exclamation point on, machine learning is based upon data. Okay. If you have silos, you have the high risk of having bad machine learning. >> Yes. >> Okay. That's you agree with that? >> Completely. >> So customers, they kind of understand this, right. If you have silos that equals bad future >> Correct >> because machine learning is baked into everything now. >> And I will add to that. So silos is the one problem, and then not being able to have all the data is another problem, right? When it comes to being able to make sense out of it. So we're big believers in what we call full fidelity. So being able to connect every byte of data and do it in a way that makes sense, obviously economically for the customer, but also have, let's say high signal to noise ratio, right? By structuring the data at the source. Overt telemetry is another contributor to that. And by collecting all the data and by having an ability, let's say to connect the data together, metrics, traces, logs, events, incidents, then we can actually build a little more effective tooling on top to provide answers back to the user with high confidence. So then users can start trusting the answers as opposed to they themselves, always having to figure out what the problem is. And I think that's the future. And we're just starting. >> Spiros I want to ask you now, my final question is about culture And you know, when you have scale with the cloud and data, goodness, where you have people actually know the value of data and they incorporate into their application, you have advantages. You have competitive advantages in some cases, but developers were just coding love dev ops because it's infrastructure as code. They don't have to get into the weeds and do the under the hood, datas have that same phenomenon right now where people want access to data. But there's certain departments like security departments and IT groups holding back and slowing down the developers who are waiting days and weeks when they want it in minutes and seconds for have these kinds of things. So the trend is, well there's, first of all, there's the culture of people aren't getting along and they're hating each other or they're not liking each other. >> Yes >> There's a little conflict, always kind of been there, but now more than ever, because why wait? >> I agree. >> How can companies shorten that cycle? Make it more cohesive, still decouple the groups because you've got, you got compliance. How do you maximize the best of a good security group, a good IT group and enables as fast as possible developers. >> I agree with you, by the way, this is primarily cultural. And then of course there is a tooling gap as well. Right. But I think we have to understand, let's say as a security group, instead of developers, what are the needs of each other, right. Why we're doing the things we're doing because everybody has the right intentions to some extent, right? But the truth is there is pain. We are me and myself. Like as we develop our own solutions in a cloud native fashion, we see that right. We want to move as fast as possible, but at the same time, want to be compliant and secure, right. And we cannot compromise actually on security or compliance. I mean, that's really the wrong solution here. So I think we need to come together, understand what each other is trying to do and provide. And actually we need to build better tooling that doesn't get into the way. Today, oftentimes it's painful to have, let's say a compliance solution or a secure solution because it slows down development. I think we need to actually, again, maybe a step function improvement in the type of tooling we'll have in this space. So it doesn't get into the way Right? It does the work it provides. Let's say the security, the security team requires, it provides the guarantees there, but doesn't get in the way of developers. And today it doesn't happen like this most of the time. So we have some ways to go. >> And Garth has mentioning how you guys got some machine learning around different products is one policy kind of give some, you know, open, you know, guardrails for the developers to bounce around and do things until they, until they have to put a new policy in place. Is that an answer automated with automation? >> Big time. Automation is a big part of the answer, right? I think we need to have tooling that first of all works quickly and provides the answers we need. And we'll have to have a way to verify that the answer are in place without slowing down developers.Splunk is, I mean, out of a utility of DevSecOps in particular is around that, right? That we need to do it in a way that doesn't get in the way of, of let's say the developer and the velocity at which they're trying to move, but also at the same time, collect all the data and make sure, you know, we know what's going on in the environment. >> Is AI ops and dev sec ops and GET ops all the same thing in your mind, or is it all just labels >> It's not necessarily the same thing because I think AI ops, in my opinion applies, let's say to even more traditional environments, what are you going to automate? Let's say IT workflows in like legacy applications and infrastructure. Getops in my mind is maybe the equivalent when you're talking about like cloud native solutions, but as a concept, potentially they are very close I guess. >> Well, great stuff. Great insight. Thanks for coming on the Cube. Final point is what's your take this year of the live we're in person, but it's virtual, we're streaming out. It's kind of a hybrid media environment. Splunk's now in the media business with the studios, everything great announcements. What's your takeaway from the keynote this week? What's your, you got to share to the audience, this week's summary. >> First of all, I really hope next year, we're all going to be in one place, but still given the limitations we had I think it was a great production and thanks to everybody who was involved. So my key takeaway is that we truly actually have moved to the data age and data is at the heart of everything we do. Right? And I think Splunk has always been that as a company, but I think we ourselves really embraced that and everything we do is everything. Most of the problems we solve are data problems, whether it's security, observability, DevSecOps, et cetera. So. >> Yeah, and I would say, I would add to that by saying that my observations during the pandemic now we're coming, hopefully to the end of it, you guys have been continuing to ship code and with real, not vaporware real product, the demos were real. And then the success on the open source. Congratulations. >> Thank you. >> All right. Thanks for coming on and we appreciate it >> Thanks alot _Cube coverage here at dot com Splunk annual conference. Virtual is the Cube. We're here live at the studios here at Splunk studios for their event. I'm John Farrow with the Cube. Thanks for watching. (joyful tune)

Published Date : Oct 20 2021

SUMMARY :

Splunk is here inside the cube, Spiros, of all the stories SiliconANGLE's and security are the two Now it's the center of all the action. We're the utility, we're the tool, in the context of what you're is that the personnel to that the shifting left is going of the shift left trend. And including the cultural aspects of it. let's say all the way to production, that's the number one problem, but that's not the reality of most, on the customer side, everyone obviously believes that original And of course the more having the ability to add And even allowing them to use open source, That's the way the world Splunk from the beginning source and the work you're doing so that the users have control all the innovations has been If you have silos that equals bad future is baked into everything now. the answers as opposed to So the trend is, still decouple the groups but doesn't get in the way of developers. guardrails for the developers that doesn't get in the way It's not necessarily the same thing the keynote this week? Most of the problems we the pandemic now we're coming, Thanks for coming on and we appreciate it Virtual is the Cube.

SENTIMENT ANALYSIS :

ENTITIES

EntityCategoryConfidence
JohnPERSON

0.99+

John FurrierPERSON

0.99+

John FarrowPERSON

0.99+

OmnitionORGANIZATION

0.99+

two reasonsQUANTITY

0.99+

GarthPERSON

0.99+

TodayDATE

0.99+

last yearDATE

0.99+

last weekDATE

0.99+

SplunkORGANIZATION

0.99+

Silicon valleyLOCATION

0.99+

SignalfxORGANIZATION

0.99+

todayDATE

0.99+

Spiros XanthosPERSON

0.99+

BothQUANTITY

0.99+

next yearDATE

0.99+

CNCFORGANIZATION

0.99+

SplankORGANIZATION

0.99+

secondQUANTITY

0.99+

one problemQUANTITY

0.99+

OneQUANTITY

0.98+

three years agoDATE

0.98+

oneQUANTITY

0.98+

two thingsQUANTITY

0.98+

this weekDATE

0.98+

one placeQUANTITY

0.98+

SpirosPERSON

0.98+

bothQUANTITY

0.98+

one quick questionQUANTITY

0.98+

one policyQUANTITY

0.97+

single vendorQUANTITY

0.97+

one platformQUANTITY

0.97+

thousands of appsQUANTITY

0.97+

CNCORGANIZATION

0.97+

FirstQUANTITY

0.97+

pandemicEVENT

0.96+

one placeQUANTITY

0.94+

DevSecOpsTITLE

0.94+

dot comORGANIZATION

0.93+

Victor opsORGANIZATION

0.92+

two most common buzzwordsQUANTITY

0.91+

CubeConORGANIZATION

0.91+

10 years agoDATE

0.9+

few years agoDATE

0.9+

OpenTracingORGANIZATION

0.87+

firstQUANTITY

0.85+

SiliconANGLEORGANIZATION

0.85+

threeQUANTITY

0.85+

Plumbr syntheticsORGANIZATION

0.81+

months laterDATE

0.8+

FlowmillORGANIZATION

0.78+

KubernetesORGANIZATION

0.74+

CubeCOMMERCIAL_ITEM

0.73+

five,DATE

0.72+

last two yearsDATE

0.71+

Rigor andORGANIZATION

0.71+

CICBORGANIZATION

0.69+

CubeORGANIZATION

0.68+

yearDATE

0.68+

SplunkEVENT

0.64+

_CubePERSON

0.63+

KubernetesPERSON

0.57+

CoopConORGANIZATION

0.5+

Garth Fort, Splunk | Splunk .conf21


 

(upbeat music) >> Hello everyone, welcome back to theCUBE's coverage of splunk.com 2021 virtual. We're here live in the Splunk studios. We're all here gettin all the action, all the stories. Garth Fort, senior vice president, Chief Product Officer at Splunk is here with me. CUBE alumni. Great to see you. Last time I saw you, we were at AWS now here at Splunk. Congratulations on the new role. >> Thank you. Great to see you again. >> Great keynote and great team. Congratulations. >> Thank you. Thank you. It's a lot of fun. >> So let's get into the keynote a little bit on the product. You're the Chief Product Officer. We interviewed Shawn Bice, who's also working with you as well. He's your boss. Talk about the, the next level, cause you're seeing some new enhancements. Let's get to the news first. Talk about the new enhancements. >> Yeah, this was actually a really fun keynote for me. So I think there was a lot of great stuff that came out of the rest of it. But I had the honor to actually showcase a lot of the product innovation, you know, since we did .conf last year, we've actually closed four different acquisitions. We shipped 43 major releases and we've done hundreds of small enhancements, like we're shipping code in the cloud every six weeks and we're shipping new versions twice a year for our Splunk Enterprise customers. And so this was kind of like if you've seen that movie Sophie's Choice, you know, where you have to pick one of your children, like this was a really hard, hard thing to pick. Cause we only had about 25 minutes, but we did like four demos that I think landed really well. The first was what we call ingest actions and you know, there's customers that are using, they start small with gigabytes and they go to terabytes and up to petabytes of data per day. And so they wanted tools that allow them to kind of modify filter and then route data to different sort of parts of their infrastructure. So that was the first demo. We did another demo on our, our visual playbook editor for SOAR, which has improved quite a bit. You know, a lot of the analysts that are in the, in the, in the SOC trying to figure out how to automate responses and reduce sort of time to resolution, like they're not Python experts. And so having a visual playbook editor that lets them drag and drop and sort of with a few simple gestures create complex playbooks was pretty cool. We showed some new capabilities in our APM tool. Last year, we announced we acquired a company called Plumbr, which has expertise in basically like code level analysis and, and we're calling it "Always On" profiling. So we, we did that demo and gosh, we did one more, four, but four total demos. I think, you know, people were really happy to see, you know, the thing that we really tried to do was ground all of our sort of like tech talk and stuff that was like real and today, like this is not some futuristic vision. I mean, Shawn did lay out some, some great visions, visionary kind of pillars. But, what we showed in the keynote was I it's all shipping code. >> I mean, there's plenty of head room in this market when it comes to data as value and data in motion, all these things. But we were talking before you came on camera earlier in the morning about actually how good Splunk product and broad and deep the product portfolio as well. >> Garth: Yeah. >> I mean, it's, I mean, it's not a utility and a tooling, it's a platform with tools and utilities. >> Garth: Yeah >> It's a fully blown out platform. >> Yeah. Yeah. It is a platform and, and, you know, it's, it's one that's quite interesting. I've had the pleasure to meet a couple of big customers and it's kind of amazing, like what they do with Splunk. Like I was meeting with a large telco on the east coast and you know, they actually, for their set top boxes, they actually have to figure out in real time, which ads to display and the only tool they could find to process 15 million events in real time, to decide what ad to display, was Splunk. So that was, that was like really cool to hear. Like we never set out to be like an ad tech kind of platform and yet we're the only tool that operates at that level of scale and that kind of data. >> You know, it's funny, Doug Merritt mentioned this in my interview with him earlier today about, you know, and he wasn't shy about it, which was great. He was like, we're an enabling platform. We don't have to be experts in all these vertical industries >> Garth: Yep >> because AI takes care of that. That's where the machine learning >> Garth: Yeah >> and the applications get built. So others are trying to build fully vertically integrated stacks into these verticals when in reality they don't have to, if they don't want it. >> Yeah, and Splunk's kind of, it's quite interesting when you look across our top 100 customers, you know, Doug talks about like the, you know, 92 of the fortune 100 are kind of using Splunk today, but the diversity across industries and, you know, we have government agencies, we have, you know, you name the retail or the vertical, you know, we've got really big customers, they're using Splunk. And the other thing that I kind of, I was excited about, we announced the last demo I forgot was TruSTAR integration with Enterprise Security. That's pretty cool. We're calling that Splunk Threat Intelligence. And so That was really fun and we only acquired, we closed the acquisition to TruSTAR in May, but the good news is they've been a partner with us like for 18 months before we actually bought em. And so they'd already done a lot of the work to integrate. And so they had a running start in that regard, But other, one other one that was kind of a, it was a small thing. I didn't get to demo it, but we talked about the, the content pack for application performance monitoring. And so, you know, in some ways we compete in the APM level, but in many ways there's a ton of great APM vendors out there that customers are using. But what they wanted us to do was like, hey, if I'm using APM for that one app, I still want to get data out of that and into Splunk because Splunk ends up being like the core repository for observability, security, IT ops, Dev Sec Ops, et cetera. It's kind of like where the truth, the operational truth of how your systems works, lives in Splunk. >> It's so funny. The Splunk business model has actually been replicated. They call it data lake, whatever you want to call it. People are bringing up all these different metaphors. But at the end of the day, if you guys can create a value proposition where you can have data just be, you know, stored and dumped and dumped into whatever they call it stored in a way >> Garth: We call it ingest >> Ingested, ingested. >> Garth: Not dumped. >> Data dump. >> Garth: It's ingested. >> Well, I mean, well you given me a plan, but you don't have to do a lot of work to store just, okay, we can only get to it later, >> Garth: Yep. >> But let the machines take over >> Garth: Yep. >> With the machine learning. I totally get that. Now, as a pro, as a product leader, I have to ask you your, your mindset around optimization. What do you optimize for? Because a lot of times these use cases are emerging. They just pop out of nowhere. It's a net new use case that you want to operationalize. So balancing the headroom >> Yep. >> Or not to foreclose those new opportunities for customers. How are customers deciding what's important to them? How do you, because you're trying to read the tea leaves for the future >> Garth: A little bit, yeah. >> and then go, okay, what do our customers need, but you don't want to foreclose anything. How do you think about product strategy around that? >> There's a ton of opportunity to interact with customers. We have this thing called the Customer Advisory Board. We run, I think, four of them and we run a monthly. And so we got an opportunity to kind of get that anecdotal data and the direct contact. We also have a portal called ideas.splunk.com where customers can come tell us what they want us to build next. And we look at that every month, you know, and there's no way that we could ever build everything that they're asking us to, but we look at that monthly and we use it in sort of our sprint planning to decide where we're going to prioritize engineering resources. And it's just, it's kind of like customers say the darndest things, right? Sometimes they ask us for stuff and we never imagined building it in a million years, >> John: Yeah. >> Like that use case around ads on the set top box, but it's, it's kind of a fun place to be like, we, we just, before this event, we kind of laid out internally what, you know, Shawn and I kind of put together this doc, actually Shawn wrote the bulk of it, but it was about sort of what do we think? Where, where can we take Splunk to the next three to five years? And we talked about these, we referred to them as waves of innovation. Cause you know, like when you think about waves, there's multiple waves that are heading towards the beach >> John: Yeah. >> in parallel, right? It's not like a series of phases that are going to be serialized. It's about making a set of investments. that'll kind of land over time. And, and the first wave is really about, you know, what I would say is sort of, you know, really delivering on the promise of Splunk and some of that's around integration, single sign-on things about like making all of the Splunk Splunk products work together more easily. We've talked a lot in the Q and a about like edge and hybrid. And that's really where our customers are. If you watch the Koby Avital's sort of customer keynote, you know, Walmart by necessity, given their geographic breadth and the customers they serve has to have their own infrastructure. They use Google, they use Azure and they have this abstraction layer that Koby's team has built on top. And they use Splunk to manage kind of, operate basically all of their infrastructure across those three clouds. So that's the hybrid edge scenario. We were thinking a lot about, you mentioned data lakes. You know, if you go back to 2002, when Splunk was founded, you know, the thing we were trying to do is help people make sense of log files. But now if you talk to customers that are moving to cloud, everybody's building a data lake and there's like billions of objects flowing into millions of these S3 buckets all over the place. And we're kind of trying to think about, hey, is there an opportunity for us to point our indexing and analytics capability against structured and unstructured data and those data lakes. So that that'll be something we're going to >> Yeah. >> at least start prototyping pretty soon. And then lastly, machine learning, you know, I'd say, you know, to use a baseball metaphor, like in terms of like how we apply machine learning, we're like in the bottom of the second inning, >> Yeah. >> you know, we've been doing it for a number of years, but there's so much more. >> There's so, I mean, machine learning is only as good as the data you put into the machine learning. >> Exactly, exactly. >> And so if you have, if you have gap in the data, the machine learning is going to have gaps in it. >> Yeah. And we have, we announced a feature today called auto detect. And I won't go into the gory details, but effectively what it does is it runs a real-time analytics job over whatever metrics you want to look at and you can do what I would consider more statistics versus machine learning. You can say, hey, if in a 10 minute period, like, you know, we see more errors than we see on average over the last week, throw an alert so I can go investigate and take a look. Imagine if you didn't have to figure out what the right thresholds were, if we could just watch those metrics for you and automatically understand the seasonality, the timing, is it a weekly thing? Is it a monthly thing? And then like tell you like use machine learning to do the anomaly detection, but do it in a way that's more intelligent than just the static threshold. >> Yeah. >> And so I think you'll see things like auto detect, which we announced this week will evolve to take advantage of machine learning kind of under the covers, if you will. >> Yeah. It was interesting with cloud scale and the data velocity, automations become super important. >> Oh yeah. >> You don't have a lot of new disciplines emerge, like explainable AI is hot right now. So you got, the puck is coming. You can see where the puck is going. >> Yeah >> And that is automation at the app edge or the application layer where the data has got to be free-flowing or addressable. >> Garth: Yeah. >> This is something that is being talked about. And we talked about data divide with, with Chris earlier about the policy side of things. And now data is part of everything. It's part of the apps. >> Garth: Yeah. >> It's not just stored stuff. So it's always in flight. It should be addressable. This is what people want. What do you think about all of that? >> No, I think it's great. I actually just can I, I'll quote from Steve Schmidt in, in sort of the keynote, he said, look like security at the end of the day is a human problem, but it kind of manifests itself through data. And so being able to understand what's happening in the data will tell you, like, is there a bad actor, like wreaking havoc inside of my systems? And like, you can use that, the data trail if you will, of the bad actor to chase them down and sort of isolate em. >> The digital footprints, if you will, looking at a trail. >> Yeah. >> All right, what's the coolest thing that you like right now, when you look at the treasure trove of, of a value, as you look at it, and this is a range of value, Splunk, Splunk has had customers come in with, with the early product, but they keep the customers and they always do new things and they operationalize it >> Garth: Yep. >> and another new thing comes, they operationalize it. What's the next new thing that's coming, that's the next big thing. >> Dude that is like asking me which one of my daughters do I love the most, like that is so unfair. (laughing) I'm not going to answer that one. Next question please. >> Okay. All right. Okay. What's your goals for the next year or two? >> Yeah, so I just kind of finished roughly my first 100 days and it's been great to, you know, I had a whole plan, 30, 60, 90, and I had a bunch of stuff I wanted to do. Like I'm really hoping, sort of, we get past this current kind of COVID scare and we get to back to normal. Cause I'm really looking forward to getting back on the road and sort of meeting with customers, you know, you can meet over Zoom and that's great, but what I've learned over time, you know, I used to go, I'd fly to Wichita, Kansas and actually go sit down with the operators like at their desk and watch how they use my tools. And that actually teaches you. Like you, you come up with things when you see, you know, your product in the hands of your customer, that you don't get from like a CAB meeting or from a Zoom call, you know? >> John: Yeah, yeah. >> And so being able to visit customers where they live, where they work and kind of like understand what we can do to make their lives better. Like that's going to, I'm actually really excited to gettin back to travel. >> If you could give advice to CTO, CISO, or CIO or a practitioner out there who are, who is who's sitting at their virtual desk or their physical desk thinking, okay, the pandemic, were coming through the pandemic. I want to come out with a growth strategy, with a plan that's going to be expansive, not restrictive. The pandemic has shown what's what works, what doesn't work. >> Garth: Sure. >> So it's going to be some projects that might not get renewed, but there's doubling down on, certainly with cloud scale. What would advice would you give that person when they start thinking about, okay, I got to get my architecture right. >> Yeah. >> I got to get my playbooks in place. I got to get my people aligned. >> Yeah >> What's what do you see as a best practice for kind of the mindset to actual implementation of data, managing the data? >> Yeah, and again, I'm, I'm, this is not an original Garth thought. It actually came from one of our customers. You know, the, I think we all, like you think back to March and April of 2020 as this thing was really getting real. Everybody moved as fast as they could to either scale up or scale scaled on operations. If you were in travel and hospitality, you know, that was, you know, you had to figure how to scale down quickly and like what you could shut down safely. If you were like in the food delivery business, you had to figure out how you could scale up, like Chipotle hit two, what is it? $2 billion run rate on delivery last year. And so people scrambled as fast as they could to sort of adapt to this new world. And I think we're all coming to the realization that as we sort of exit and get back to some sense of new normal, there's a lot of what we're doing today that's going to persist. Like, I think we're going to have like flexible rules. I don't think everybody's going to want to come back into the office. And so I think, I think the thing to do is you think about returning to whatever this new normal looks like is like, what did we learn that was good. And like the pandemic had a silver lining for folks in many ways. And it sucked for a lot. I'm not saying it was a good thing, but you know, there were things that we did to adapt that I think actually made like the workplace, like stronger and better. And, and sort of. >> It showed that data's important, internet is important. Didn't break, the internet didn't break. >> Garth: Correct. >> Zoom was amazing. And the teleconferencing with other tools. >> But that's kind of, just to sort of like, what did you learn over the last 18 months that you're going to take for it into the next 18 years? You know what I mean? Cause there was a lot of good and I think people were creative and they figured out like how to adapt super quickly and take the best of the pandemic and turn it into like a better place to work. >> Hybrid, hybrid events, hybrid workforce, hybrid workflows. What's what's your vision on Splunk as a tier one enterprise? Because a lot of the news that I'm seeing that's, that's the tell sign to me in terms of this next growth wave is big SI deals, Accenture and others are yours working with and you still got the other Partnerverse going. You have the ecosystems emerging. >> Garth: Yep. >> That's a good, that means your product's enabling people to make money. >> Garth: Yeah. Yeah, yeah, yeah. >> And that's a good thing. >> Yeah, BlueVoyant was a great example in the keynote yesterday and they, you know, they've really, they've kind of figured out how, you know, most of their customers, they serve customers in heavily regulated industries kind of, and you know, those customers actually want their data in a Splunk tenant that they own and control and they want to have that secure boundary around that. But BlueVoyant's figured out how they can come in and say, hey, I'm going to take care of the heavy lifting of the day-to-day operations, the monitoring of that environment with the security. So, so BlueVoyant has done a great job sort of pivoting and figuring out how they can add value to customers and do, you know, because they they're managing not just one Splunk instance, but they're managing 100s of Splunk cloud instances. And so they've got best practices and automation that they can play across their entire client base. And I think you're going to see a lot more of that. And, and Teresa's just, Teresa is just, she loves Partners, absolutely loves Partners. And that was just obvious. You could, you could hear it in her voice. You could see it in her body language, you know, when she talked about Partnerverse. So I think you'll see us start to really get a lot more serious. Cause as big as Splunk is like our pro serve and support teams are not going to scale for the next 10,000, 100,000 Splunk customers. And we really need to like really think about how we use Partners. >> There's a real growth wave. And I, and I love the multiples wave in parallel because I think that's what everyone's consensus on. So I have to ask you as a final question, what's your takeaway? Obviously, there's been a virtual studio here where all the Splunk executives and, and, and customers and partners are here. TheCUBE's here doing all the presentations, live by the way. It was awesome. What would you say the takeaway is for this .conf, for the people watching and consuming all the content online? A lot of asynchronous consumption would be happening. >> Sure. >> What's your takeaway from this year's Splunk .conf? >> You know, I, it's hard cause you know, you get so close to it and we've rehearsed this thing so many times, you know, the feedback that I got and if you look at Twitter and you look at my Slack and everything else, like this felt like a conf that was like kind of like a really genuine, almost like a Splunk two dot O. But it's sort of true to the roots of what Splunk was true to the product reality. I mean, you know, I was really careful with my team and to avoid any whiff of vaporware, like what were, what we wanted to show was like, look, this is Splunk, we're acquiring companies, you know, 43 major releases, you know, 100s of small ones. Like we're continuing to innovate on your behalf as fast as we can. And hopefully this is the last virtual conf. But even when we go back, like there was so much good about the way we did this this week, that, you know, when we, when we broke yesterday on the keynote and we were sitting around with the crew and it kind of looking at that stage and everything, we were like, wow, there is a lot of this that we want to bring to an in-person event as well. Cause so for those that want to travel and come sit in the room with us, we're super excited to do that as soon as we can. But, but then, you know, there may be 25, 50, 100,000 that don't want to travel, but can access us via this virtual event. >> It's like a time. It's a moment in time that becomes a timeless moment. That could be, >> Wow, did you make that up right now? >> that could be an NFT. >> Yeah >> We can make a global cryptocurrency. Garth, great to see you. Of course I made it up right then. So, great to see you. >> Air bump, air bump? Okay, good. >> Okay. Garth Fort, senior vice president, Chief Product Officer. In theCUBE here, we're live on site at Splunk Studio for the .conf virtual event. I'm John Furrier. Thanks for watching. >> All right. Thank you guys. (upbeat music)

Published Date : Oct 20 2021

SUMMARY :

Congratulations on the new role. Great to see you again. Great keynote and great It's a lot of fun. a little bit on the product. But I had the honor to But we were talking before you it's a platform with tools and utilities. I've had the pleasure to meet today about, you know, and That's where the machine learning and the applications get built. the vertical, you know, be, you know, stored and dumped I have to ask you your, your the tea leaves for the future but you don't want to foreclose anything. And we look at that every month, you know, the next three to five years? what I would say is sort of, you know, you know, to use a baseball metaphor, like you know, we've been doing as the data you put into And so if you have, if if in a 10 minute period, like, you know, under the covers, if you will. with cloud scale and the data So you got, the puck is coming. the app edge or the application It's part of the apps. What do you think about all of that? of the bad actor to chase them you will, looking at a trail. that's coming, that's the next I love the most, like that is so unfair. the next year or two? 100 days and it's been great to, you know, And so being able to visit If you could give advice to CTO, CISO, What would advice would you I got to get my playbooks in place. And like the pandemic had Didn't break, the internet didn't break. And the teleconferencing what did you learn over the that's the tell sign to me in people to make money. and you know, So I have to ask you as a final question, this year's Splunk .conf? I mean, you know, It's like a time. So, great to see you. for the Thank you guys.

SENTIMENT ANALYSIS :

ENTITIES

EntityCategoryConfidence
ShawnPERSON

0.99+

Steve SchmidtPERSON

0.99+

JohnPERSON

0.99+

Doug MerrittPERSON

0.99+

John FurrierPERSON

0.99+

Garth FortPERSON

0.99+

ChrisPERSON

0.99+

TeresaPERSON

0.99+

GarthPERSON

0.99+

Sophie's ChoiceTITLE

0.99+

MarchDATE

0.99+

DougPERSON

0.99+

25QUANTITY

0.99+

10 minuteQUANTITY

0.99+

Last yearDATE

0.99+

100sQUANTITY

0.99+

Shawn BicePERSON

0.99+

WalmartORGANIZATION

0.99+

SplunkORGANIZATION

0.99+

MayDATE

0.99+

fourQUANTITY

0.99+

$2 billionQUANTITY

0.99+

2002DATE

0.99+

AWSORGANIZATION

0.99+

BlueVoyantORGANIZATION

0.99+

ChipotleORGANIZATION

0.99+

yesterdayDATE

0.99+

last yearDATE

0.99+

30QUANTITY

0.99+

TruSTARORGANIZATION

0.99+

43 major releasesQUANTITY

0.99+

ideas.splunk.comOTHER

0.99+

first demoQUANTITY

0.99+

this weekDATE

0.99+

CUBEORGANIZATION

0.99+

oneQUANTITY

0.99+

twoQUANTITY

0.99+

next yearDATE

0.99+

60QUANTITY

0.99+

18 monthsQUANTITY

0.99+

PlumbrORGANIZATION

0.98+

firstQUANTITY

0.98+

90QUANTITY

0.98+

first 100 daysQUANTITY

0.98+

50QUANTITY

0.98+

last weekDATE

0.98+

pandemicEVENT

0.98+

todayDATE

0.98+

PartnerverseORGANIZATION

0.98+

four demosQUANTITY

0.98+

this weekDATE

0.97+

millionsQUANTITY

0.97+

second inningQUANTITY

0.97+

PythonTITLE

0.97+

.confEVENT

0.97+

GoogleORGANIZATION

0.97+

AzureTITLE

0.97+

Kriss Dieglmeier, Splunk | Splunk .conf21


 

okay welcome back to thecube's coverage at splunk.com 2021 virtual i'm john furrier with thecube we're here live in the studios of splunk's event here we're all together broadcasting out all over the world here with chris dieglemeyer chief social impact officer for splunk great to see you thanks for coming on great thanks for having me today i love the title chief social impact officer because we're bringing in data unlocks value well you know that and yes it's the theme of the show society has really been impacted by misinformation what context we've seen examples of how data has been good and been bad yes so there's a divide there so you're this is a big part of your talk yes it it's a big part of me and it's going to be even a bigger part of splunk going forward so as many people know they've heard of the digital divide right and that was about access to information communication technologies and it was coined 20 years ago 2001 and we've made progress on that digital divide but now we have all that infrastructure or a lot of it and so on top of that we have the data divide and that's the increasing and expanding use of data and the gap between using that to solve commercial and provide commercial value in contrast to solving our social and environmental challenges and so the the important thing about it is we're early enough that with urgent action we can try to close that gap um and really make a difference in the world so let's get started let's define the data divide and give some specific examples where you see it in action on the pro side and where there's some work needed yeah so all so the definition is again that that gap between using we we have all this data being used for commercial value and a relatively weak use of data being used to solve our social and environmental challenges and we've got four kind of key barriers that we've identified that need to be addressed which will get to you know the questions and how we solve it one is access so think about it think of the data that google has and where that is in access compared to probably the department of education in any country around the world so access is big second is capacity we need both financial resources investing in solving our social and environmental problems and we need data scientists data stewards great data people working to solve our social and environmental problems just as we are in the corporate sector and then the third one is investment choices and this one is a little bit of a be in my bonnet and this happens mostly in the private sector so we all know you know every year it's like what what hits the return on investment criteria and solving social and environmental challenges often does not uh doesn't have that quite time frame return on investment and think about if we'd identified this data divide 20 years ago for climate because companies are doing phenomenal work now about climate what if we had been doing that work 20 years ago around sustainability around efficiency and then the last piece is actionable solutions that we can replicate so those are kind of the four barriers um and again i think we've got a lot of potential and examples there isn't one issue i can think of where more data isn't going to help us you know this is so important i feel very strongly about this because i've seen examples where i've seen really strong people start ngos or non-profits or just building an app and they abandon it because they can't get there fast enough so the idea that cloud and data accessibility can be there you get to see some success and you can double down on that's the cloud way yes so i think this is something that people want to know the playbook so you know where where are people being successful what can people do yeah to take advantage of it yeah so i think that's a really good important point um is transitioning to the cloud so think of the nonprofit sector it's barely there yet so all of us who are investors philanthropists we need to be supporting the nonprofit sector be cloud enabled and cloud forward similarly with government i i you know there's example after example where you know whether it's health whether it's child and human services their data is in file cabinets think about that think of prime so we need to digitize those then we need to data enable that so that we can see those insights that are coming out around those solutions you know it's always the you know it's always a discussion in the industry inside the ropes and now on mainstream but getting data to the right place at the right time yeah is a really important thing it's a technical latency all these things but practically it has societal impact where would you rank the progress bar in terms of where we are on the digital divide because i can see healthcare for instance having access to the right information or it could be something on the government side where it could be related to climate change or hey get this involved where are we on this so i i would say on the digital divide which is the infrastructure piece um for most definitely high-income countries mid-income countries we've actually made progress and so they have that they're all you know network they're cloud but now they have all this data they don't know what to do with right and so what we need to kind of now build on that infrastructure to solve for that data and i'll just you know a splunk example one of our customers the netherlands um in their court system right with using splunk they were able to enable real-time data to inform court decisions so historically the judge would ask you know this happened in covid where are we on bankruptcy cases right and historically somebody would call somebody they'd call somebody they go dig the files and they get the information three months real time this is what's happening with bankruptcy in real time with covid is going to change those decisions that impact people's lives so you add that on top i mean we have environmental examples working with net zero schools we have it and we worked with the healthcare coalition with mitre to enable real-time data with a number of other companies so um where so i would say we're further along on the digital divide we're at step one on the data divide yeah doug merritt was talking earlier today about how you know this data plan that splunk has evolved into this catch basin for all the data and then it becomes useful and really taking us through the journal now security and it's this control plane that's enabling yeah i think to me that's a real key thing here so i have to ask do you see envision a future where we have a data commons where um citizens and could tap into the data and in the gov 2.0 is kind of on that vision yeah what do you where do you see this what do you say well i i think and i i know doug has talked about this before too from a values standpoint of especially with government moving to open data and then what we have to do is we have to protect privacy which actually splunk is really good at doing uh so you've got to take that individual data out of there but then once you get these big data pools into these big data lakes you'll be able to see insights that you couldn't see before you know it's interesting that i remember when the internet came around and how the u.s government's very active it seems now that that tech policy has always been kind of like oh yeah we're kind of involved in dc but now tech is so important and with all the backlash on the facebooks of the world of you know how democracy was broken there's an opportunity yeah and the lawmakers and the people who make the laws are kind of lawyers they're not really techies so so like policy's got to change how do we do that yeah oh gosh if i could solve that one on policy change but but i want to make a comment because i think it's really important because you reference and the situation facebook is in is common knowledge i give a lot of credit to splunk as you know a data platform company saying we see this data divide coming and we're going to step to the table now and do something about it because there's a lot of other companies that knew these challenges if they looked out three five years and they made personal or company choices not to do something about it so transparency is super important getting that out there and and being again in data and just saying it's not all roses right and and so take being a purpose-driven company is about making those decisions as a company to have an impact so then to answer your question on policy um i would say i think it's really complicated and tricky because data moves at the speed of sound and policy moves kind of like a turtle and so i think what we need to have happen is companies going to sometimes have to lead the way and hold themselves accountable and then work in partnership with policy to make you know policy changes that impact everybody so again we're strong advocates of open data you know we we can't make the government do it but we can be a voice for it in service of bridging the state this data divide is a great conversation i wish we had more time for the last minute just give a quick plug for what splunk's doing specifically and how people could get involved and participate yeah so i'll kind of i'd say three things one is at this early stage we're kind of raising the flag to governments out there to philanthropy to nonprofits like we all need to be paying attention to this we're going to be investing in more research on it because it is at such an early stage we've identified these barriers but we've got to go much deeper and build collaborations around the solution so we're going to be mobilizing our partners and our customers we have a 100 million dollar pledge where we donate our product nonprofits we and the equally important thing as i talked about it's our talent right it's getting the talent to help these organizations it's our strategic giving so we're mobilizing you know all of our assets around this pledge we have a 50 million dollar impact fund which is around four purpose data enabled companies so we're trying to do it across a multitude of platforms is that investment fund deploying now or has it been making investments in companies already yeah we've made um three investments refrain ai is one about using machine learning and ai around the jobs of the future and retraining so it's still or it was launched just a couple years ago so we're still early in the 50 million dollar fund so we'll be doing more of that sounds like a great opportunity for people out there watching enable enable the people to change the world yeah that's what splunk's all about right now exactly chris thanks for coming on appreciate great thank you okay the data divide we're bringing you all the data here from the cube live here in the splunk studios i'm john furrier with thecube thanks for watching thank you

Published Date : Oct 20 2021

SUMMARY :

the facebooks of the world of you know

SENTIMENT ANALYSIS :

ENTITIES

EntityCategoryConfidence
chris dieglemeyerPERSON

0.99+

Kriss DieglmeierPERSON

0.99+

splunkORGANIZATION

0.99+

three monthsQUANTITY

0.99+

john furrierPERSON

0.99+

chrisPERSON

0.99+

facebookORGANIZATION

0.99+

20 years agoDATE

0.98+

50 million dollarQUANTITY

0.98+

20 years ago 2001DATE

0.97+

100 million dollarQUANTITY

0.97+

u.sORGANIZATION

0.97+

googleORGANIZATION

0.97+

2021DATE

0.96+

bothQUANTITY

0.96+

todayDATE

0.96+

one issueQUANTITY

0.93+

step oneQUANTITY

0.93+

net zero schoolsORGANIZATION

0.92+

oneQUANTITY

0.92+

merrittPERSON

0.9+

three five yearsQUANTITY

0.88+

third oneQUANTITY

0.88+

SplunkOTHER

0.87+

earlier todayDATE

0.84+

SplunkORGANIZATION

0.84+

chiefPERSON

0.83+

secondQUANTITY

0.82+

a couple years agoDATE

0.76+

three thingsQUANTITY

0.74+

three investmentsQUANTITY

0.73+

a lot of other companiesQUANTITY

0.72+

primeCOMMERCIAL_ITEM

0.71+

barriersQUANTITY

0.69+

chief social impactPERSON

0.65+

splunk.comOTHER

0.63+

facebooksORGANIZATION

0.63+

four purposeQUANTITY

0.62+

netherlandsLOCATION

0.62+

dougPERSON

0.6+

covidORGANIZATION

0.6+

covidTITLE

0.49+

playbookTITLE

0.47+

Doug Merritt, Splunk | Splunk .conf21


 

>>Welcome back to the cubes cover dot com. Splunk annual conference >>Virtual this year. I'm john for >>your host of the cube as always we're being the best stories. The best guest to you and the best guest today is the ceo Doug merit of course, Top Dog. It's great to see you. Thanks for coming on to be seen. >>So nice. I can't believe it. We had a whole year without seeing each other. >>I love this conference because it's kind of like a studio taking over a full virtual studio multiple sets, cubes here. You have the main stage, you've got rooms upstairs, tons of virtual interactions. Great numbers. Congratulations. >>Thank you. Thank you. We were, we wanted this to be primarily live where we are live, primarily on site. Um, and we pivoted some private marketing team. How quickly they pivoted and I love the environment they've created as I know next year we will be always have virtual now we've all learned but will be on site, which is great. >>It's good to see kind of you guys telling the story a lot, a lot more stories happening and You know, we've been covering splint since 2012 on the Cube. I think longer than aws there was 2013 our first cube seeing Splunk emerge is the trend has been, it's new, it's got value and you operationalize it for customers. Something new happens. You operationalized for customers and it just keeps on the Splunk way, the culture of innovation. It just seems now more than ever. You guys were involved in security early 2015 I think that was the year we started kind of talking about it your first year and now it just feels like something bigger is right here in front of us. It's and people are trying to figure out multi cloud observe ability. We see that what that's a big growth wave coming. What's the wave that's happening? >>So uh the beauty of Splunk and the kind of culture and how we were born was we have this non structured backbone um what I would call the investigative lake where you just dump garbage into it and then get value out of it through the question asking which means you can traverse anywhere because you're not taking a point of view on the data it's usable all over the place. And that's how we went up in security. As we had the I. T. Systems administrators pinging that thing with with questions. And at that point in time the separate teams were almost always part of the I. T. Teams like hey can we ask questions that thing. It's like yeah go ahead. And also they got value. And then the product managers and the app dev guys started asking questions. And so a lot of our proliferation has been because of the underlying back bonus blank the ability for new people to come to the data and find value in the data. Um as you know and as our users know we have tried to stay very focused on the go to market basis on serving the technical triumphant the cyber teams, the infrastructure management, 90 ops teams and the abdomen devoPS teams and on the go to market basis and the solutions we package that is, we're trying to stay super pure to that. That's $90 billion of total addressable market. We're super excited will be well over three billion an error this year, which is amazing is 300 million when I started seven years ago so that 10 x and seven years is great. But three billion and 90 billion like we're all just getting going right now with those Corbyn centers. The were on top of what sean bison as we tell you about, hey, we've got to continue to focus on multi cloud and edge is really important. Machine learning is important. That the lever that we've been focused on for a long time that we'll continue to gain better traction on is making sure that we've got the right data plane and application platform layer so that the rest of the world can participate in building high quality reusable and recyclable applications so that operate operationalization that we have done officially around cyber it and devops and unofficially on a one off basis for marketing and supply chain and logistics and manufacturing that those other use cases can be packaged repeated, sold and supported by the people that really know those domains because we're not manufacturing experts. It's we're honored that portion BMW are using us to get operational insight into the manufacturing floor. But they lead that we just were there is the technical Splunk people to help bring that to life. But there are lots of firms out there, no manufacturing cold process versus the screed and they can create with these packages. They're appropriate for automotive, automotive versus paint versus wineries versus having that. I think the big Accelerant over the next 10 years response, we gotta keep penetrating our core use cases but it would be allowing our ecosystem and so happy Teresa Karlsson's here is just pounding the table and partners to take the other probably 90% of the market that is not covered by by our core market. >>Yeah, I think that's awesome. And the first time we get to the partner 1st and 2nd the rebranding of the ecosystem as it's growing. But you mentioned you didn't know manufacturing as an example where the value is being created. That's interesting because you guys are enabling that value, their adding that because they know their apps then they're experts. That's where the ecosystem is really gonna shine because if you can provide that enablement this control plane as you mentioned, that's going to feed the ecosystem. So the question I have for you is as you guys have become essentially the de facto control playing for most companies because they were using spring for a lot of other great reasons now you have set them up that way is the pattern to just keep building machine learning apps on top of it or more querying what's the what's the customer next level trends that you're seeing. >>So the two core focus areas that we will stay on top of is enriching that data platform and ensure that we continue to provide better at peace and better interfaces so that when people want to build a really interesting automotive parts, supply chain optimization app that they're able to do that, we've got the right A. P. S. We've got the right services, we've got the right separation between the application of platforms so they can get that done, we'll continue to advance that platform so that there's modernization capabilities and there's advertising capabilities and other pieces that they can make their business. The other piece that will stay very focused on is within the cyber realm within I. T. Ops within devops, ensuring that we're leveraging that platform, but baking ml and baking all the advanced edge and other capabilities into those solutions because the cyber teams as where you started with a You know, we really started reporting on cyber 2015, those guys have got such a hard job and while there's lots of people pretending like they're going to come in and serve them, it's the difficulty is there are hundreds of tools and technologies that the average C so deals with and the rate of innovation is not slowing down and those vendors that have a vested interest and I want to maintain my footprint and firewalls, I want to maintain an implant, I want to maintain. It's really hard for them to say, you know what? There are 25 other categories of tools and there's 500 vendors. You gotta play nicely with your competitors and know all those folks if you really want to provide the ml the detection, the remediation, The investigation capabilities. And that's where I'm really excited about the competition. The fake competition in many cases because like, yeah, bring it on. Like I've got 2000 engineers, all they do all day long is focused on the data layer and making sure that we're effective there and I'm not diverting my engineers with any other tasks that I've got a it's hard enough to do what we do in the day layers. Well, >>it's interesting. I just had some notes here, I had one data driven innovation you've been talking about since you've been here. We've been talking about data driven innovation, cybersecurity mentioned for many years, it's almost like the balance of you gotta have tools, but you gotta have the platform. If you have too many tools and no platform, then there's a mix match here and you get hung up with tools and these blind spots. You can't have blind spots, you can't have silos. This is what kind of everyone's pretty much agreeing on right now. It's not a debate. It's more like, okay, I got silos and I got blind spots. Well how do I solve >>the difficulty? And I touched a little bit of the sun my keynote of There are well over 60 and I was using 16 because DB engines categorizes 16 different database tools. But there's actually more if you go deeper. So there's different 16 different categories of database tools. Think relational database, data warehouse, ledger databases, graph database, et cetera over 16 categories those 350 vendors. That's not because we're all stupid in tech like a graph DB is different than a relational database, which is different than what we do with our stimulus index. So there's those categories that many vendors because they're trying to solve different problems within the swim lane that you are in which for us is this non structured, high volume difficult data to manage Now. The problem is how do you create that non broken that end to end view. So you can handle your use cases effectively. Um and then the customer is still going to do with the fact that we're not a relational database engine company. We're not a data warehousing company where we were beginning to use graph DB capabilities within our our solution sets. We're gonna lean on open source other vendors use the tool for the job >>you need. But I think that what you're thinking hitting on my like is this control plane idea. I want to get back to that because if you think about what the modern application developers want is they want devops and deVOps kind of one infrastructures codes there. But if I'm a modern developer, I just want to code, >>I don't want to configure >>the data or the infrastructure. So the data value now is so much more important for the developer, whether that's policy based innovation, get options, some people call it A I ops, these are big trends. This is fairly new in the sense of being mainstream. It's been around for a couple of years, but this time, how do you see the data being much more of a developer input. >>People talk about deVOps is a new thing when I was running on the HR products at Peoplesoft in 2000 and four, we had a deVOPS teams. So that is, you know, there's always been a group of people whether Disney or not that are kind of managing the manufacturing floor for your developers, making sure they got the right tools and databases and what's new is because the ephemeral nature of cloud, that app dev work and devops and everyone that surrounds those or is now 100% data driven because you have ephemeral services, they're popping up and popping down. And if you're not able to trap the data that are each one of those services are admitting and do it on a real time basis and a thorough, complete basis, you can't sample then you are flying blind and that's not gonna work when you've got a critical code push for a feature your customers demanding and if you don't get it out, your competitors are, you need to have assurance that you've done the right things and that the quality and and the actual deployment actually works And that's where what lettuce tubes or ability Three years ago as we roughly started doing our string of acquisitions is we saw that transition from a state full world where it was all transaction engine driven. I've got to insert transaction and engines in a code. Very different engineering problem to I've got to grab data and it's convoluted data. It's chaotic data. It's changing all the time. Well, jeez that sounds and latency >>issues to they're gonna be doing fast. >>I've got to do it. You literally millisecond by millisecond. You've got are are bigger customers were honored because of how we operate. Splunk to serve some of the biggest web properties in the in the globe and they're dealing with hundreds of terabytes to petabytes of data per day that are traversing these pipes and you've got to be able to extract metrics that entire multi petabyte or traces that entire multi pedal extreme and you can't hope you're guessing right by only extracting from portions of it because again, if you missed that data you've missed it forever. So for us that was a data problem, which is why we stepped in and >>other things That data problem these days, it's almost it's the most fun to talk about if you love the problem statement that we're trying to solve. I want to get your reaction something if you don't mind. I was talking to a C. So in the C. I. O. We have a conversation kind of off camera at an event recently and I said what's the biggest challenge that you have? Just curious? I asked him, it's actually it's personnel people are mad at each other. Developers want to go faster because there are ci cd pipeline is devops their coding. They're having to wait for the security groups in some cases weeks and days when they could do it in minutes they want to do it on the in the pipelines, shifting left as some call it and it's kind of getting in the way. So it's kind of like it's not they're not getting along very well uh meaning they're slowing things down. I can say something what they really said, but they weren't getting along. What's your reaction? Because that seems to be a speed scale problem. That's developer centric, not organizational, you've got organizational challenges and being slowed down. >>So uh while we all talk about this converted landscape and how exciting is going to be. You do have diametrically opposed metrics and you're never going to have, it's very difficult to get a single person to have the same allegiance to those diametrically a virgin metrics as you want. So you've got checks and balances and the reality of what the cyber teams need to be doing to ensure that you aren't just coding effective functions with the right delivery timeframe. But that's also secure is I think going to make the security team is important forever and the same thing. You can't just write sloppy code that consumes, that blows your AWS budget or G. C. P budget within the first week of deploying it because you've still got to run a responsible business. So there are different dimensions that we all have to deal with quality time and feature functionality that different groups represent. So we, I believe a converged landscape is important. It's not that we're gonna blow it up and one person is going to do it all if you've got to get those groups talking better and you've got to reduce cycle times now we believe it's plunk is with a common data plane, which is the backbone and then solutions built from that common data plane to serve those groups. You're lessening the lack of understanding and you're reducing the cycle time. So now I can look when I'm publishing the code. If it's done properly, is it also secure And the cyber teams can kind of be flying in saying, hey, wait, wait, wait, we just saw something in the data says we're not quite ready. I'm sorry. I know you want to push, you can't push now, but there'll be a data driven conversation and not this, you shouldn't be waiting a week or two weeks, like we can't operate that scale and you've got to address people with facts and data and logic and that's what we're trying to get done. And you >>guys have a good policy engine, you can put up that up into the pipeline. So awesome. That's great, great insight there. Thanks for sharing. Final question. Um looking back in your time since you've been Ceo the culture kind of hasn't changed at Splunk, it's still they have fun, hard charging laid back a little bit and public company now, he's still got to meet the numbers, but your growing business is good, but there's a lot more coming as a big wave coming talk about the Splunk culture. >>So the core elements of culture that I love that. I think all of us agree you don't want to change one where curiosity driven culture, our tool is an investigative tool, so I never want to lose. I think that threat of grit, determination, tenacity and curiosity is paramount in life and I think literally what we push out represents that and I want our people represent that and I think the fun element is really the quirkiness of the fund, like that is one of the things I love about Splunk but we are a serious company, we are in the data plane of tens of thousands of organizations globally and what we do literally makes a difference on whether they're successful or not. As organizations, we're talking about walmart is example And how one second latency can have a, have a 10% drop off in fulfillment of transaction for wal mart that's like a billion dollars a week if you cannot get their system to perform at the level it needs to so what we do matters and the change that we've been driving that I think is a great enhancement to the culture is as we are now tip into the 50% cloud company, you have the opportunity to measure millisecond by millisecond, second by second, minute by minute, hour by hour and that's a different level of help that you get. You can literally see patterns happening over the course of minutes within customers and that's not something we were born with. We were an on premise solution, we had beautiful tools and it was the C E O. S problem, the CSS problem um and their opportunity to get that feedback. Now we get that feedback so we're trying to measure that crunchiness, the fun, the cool part about Splunk with. We also have got to be very operationally disciplined because we carry a heavy responsibility set from our customers and we're in the middle of that as well as the world knows, we're halfway through our transition to be a cloud first company but I'm excited with the results I'm seeing, so I think curiosity and tenacity go with that operational rigor. Like we should all be growth mindset oriented and very excited about, Hey, can I improve? I guess there's some information that I need that I'm not getting that will make me serve my customers better and that is the tone and tenor. I want to cross all the Splunk of whether in HR legal or engineering or sales or we serve customers and we've got to be so excited every day about getting better feedback and how to serve them better. >>Doug. Thanks for coming on the Cuban, sharing that inside. I know you had to cancel your physical event, pulled off an exceptionally strong virtual event here in person. Thanks for having the Cuban. Thanks for coming on. >>Thank you for being here and I can't wait to do this in person. Next >>to mary the ceo of Splunk here inside the cube cube coverage continues stay with us for more. We've got more interviews all the rest of the day, Stay with us. I'm john for your host. Thanks for watching. Mm >>mm mhm >>mhm >>Yeah

Published Date : Oct 20 2021

SUMMARY :

Welcome back to the cubes cover dot com. I'm john for The best guest to you and the best guest today is the I can't believe it. You have the main stage, you've got rooms upstairs, tons of virtual interactions. Um, and we pivoted some private marketing team. It's good to see kind of you guys telling the story a lot, a lot more stories happening and You know, and so happy Teresa Karlsson's here is just pounding the table and partners to take the So the question I have for you is as you guys have become essentially the de facto control playing for most companies solutions because the cyber teams as where you started with a You of you gotta have tools, but you gotta have the platform. So you can handle your use cases effectively. I want to get back to that because if you think It's been around for a couple of years, but this time, how do you see the data being much more of a developer So that is, you know, there's always been a group of people right by only extracting from portions of it because again, if you missed that data you've missed it other things That data problem these days, it's almost it's the most fun to talk about if you love the problem statement that we're trying It's not that we're gonna blow it up and one person is going to do it all if you've got to get those groups talking better guys have a good policy engine, you can put up that up into the pipeline. driving that I think is a great enhancement to the culture is as we are now tip into the 50% I know you had to cancel your physical event, pulled off an exceptionally strong Thank you for being here and I can't wait to do this in person. We've got more interviews all the rest of the day, Stay with us.

SENTIMENT ANALYSIS :

ENTITIES

EntityCategoryConfidence
$90 billionQUANTITY

0.99+

100%QUANTITY

0.99+

10%QUANTITY

0.99+

Doug MerrittPERSON

0.99+

BMWORGANIZATION

0.99+

walmartORGANIZATION

0.99+

2013DATE

0.99+

three billionQUANTITY

0.99+

50%QUANTITY

0.99+

2012DATE

0.99+

90%QUANTITY

0.99+

wal martORGANIZATION

0.99+

AWSORGANIZATION

0.99+

500 vendorsQUANTITY

0.99+

2000DATE

0.99+

350 vendorsQUANTITY

0.99+

300 millionQUANTITY

0.99+

a weekQUANTITY

0.99+

DougPERSON

0.99+

90 billionQUANTITY

0.99+

two weeksQUANTITY

0.99+

hundreds of terabytesQUANTITY

0.99+

PeoplesoftORGANIZATION

0.99+

2000 engineersQUANTITY

0.99+

Teresa KarlssonPERSON

0.99+

2ndQUANTITY

0.99+

next yearDATE

0.99+

1stQUANTITY

0.99+

DisneyORGANIZATION

0.99+

2015DATE

0.99+

16 different categoriesQUANTITY

0.99+

25 other categoriesQUANTITY

0.99+

first timeQUANTITY

0.99+

16QUANTITY

0.98+

todayDATE

0.98+

90 opsQUANTITY

0.98+

16 different database toolsQUANTITY

0.98+

Three years agoDATE

0.98+

early 2015DATE

0.98+

oneQUANTITY

0.98+

CorbynORGANIZATION

0.97+

seven years agoDATE

0.97+

first weekQUANTITY

0.97+

one personQUANTITY

0.97+

first yearQUANTITY

0.97+

this yearDATE

0.96+

hundreds of toolsQUANTITY

0.96+

SplunkORGANIZATION

0.95+

first companyQUANTITY

0.95+

single personQUANTITY

0.94+

seven yearsQUANTITY

0.94+

each oneQUANTITY

0.92+

secondQUANTITY

0.92+

first cubeQUANTITY

0.92+

over three billionQUANTITY

0.91+

johnPERSON

0.9+

one secondQUANTITY

0.9+

sean bisonPERSON

0.88+

billion dollars a weekQUANTITY

0.88+

over 60QUANTITY

0.83+

I. T.ORGANIZATION

0.83+

SplunkTITLE

0.82+

CubeCOMMERCIAL_ITEM

0.81+

10 xQUANTITY

0.81+

tens of thousands of organizationsQUANTITY

0.79+

SplunkPERSON

0.79+

two core focus areasQUANTITY

0.78+

Top DogORGANIZATION

0.76+

16 categoriesQUANTITY

0.72+

millisecondQUANTITY

0.68+

10 yearsQUANTITY

0.64+

petabytes of dataQUANTITY

0.64+

couple of yearsQUANTITY

0.63+

wellQUANTITY

0.61+

technologiesQUANTITY

0.57+

fourDATE

0.57+

multi petabyteQUANTITY

0.55+

waveEVENT

0.53+

CubanLOCATION

0.52+

ceoPERSON

0.5+

CubanOTHER

0.47+

I. T. OpsORGANIZATION

0.47+

springTITLE

0.4+

Shawn Bice, Splunk | Splunk .conf21


 

>>Hello, and welcome back to the cubes coverage of.com. Splunk's annual conference is virtual this year. I'm John furrier, host of the cube and a very special guest Sean vice president of product and technology cube, alumni, Sean, great to see you. Thanks for coming on the cube and chatting with us. Thanks. It's great to be here. It's been a while since we chatted, you were at AWS. Now it's Splunk heading up the entire products and technology group here, um, which we've been covering sponsors 2012. So we kinda know a lot about what's going on and, and followed your career. Um, your keynote, we kind of went into this cloud vision is hitting Splunk with the data because the cloud scale, which you know a lot about and data is now taking Splunk to a whole nother level. And that's the big theme you observability multi-cloud and security excuse has been for one there for a while. What's your, what's your assessment. >>Yeah, I mean, you know, uh, you and I have talked a number of times before, and what I found is that, you know, there's a lot of companies through this pandemic that, you know, some are thriving and some are not. And the ones that are really thriving, they have this strong data foundation. Like when you, when you talk to them, they're not stuck. Like they're there. When they talk about scaling or adding capacity or building new co uh, uh, customer experiences, they can, uh, their data platform allows that to happen. But the ones that are are stuck, you know, they just can't, they can't, they can't get to the data. They can't ask those questions that they otherwise, you know, love too. So that's, you know, I think Splunk is right in the middle of that. And that's the fun part of it. >>Yeah. You told me you have the strong foundation when thinking about Splunk is every inflection point in the industry. Over the past decade, you see Splunk do something new operationalized data, do something new, operationalize it. We saw security, I think around 2015, come on the radar at.com. And then since then a whole nother level of data, you've got edge. You have now cybersecurity, even, even more advanced than ever before. And then enterprise is just trying to develop modern applications. So you have this whole rapid scale of CICB pipeline, modern applications and the role of data. Isn't just storing it and managing it. It's like making it addressable. This is like, uh, the, the new current phenomenon of cloud. >>I mean, I liked the way you just put it, it, it really, you know, making data addressable, we put it in terms of like turn data into doing so, you know, if you have data that you're storing it, oh, that's one thing. If you don't, you don't want to leave data behind because you don't know what question you may want to ask. And when, but to your point making it addressable is if you and I decided, Hey, we want to build a new customer experience where we're thinking about doing this thing, and we're going to have a million questions to ask that data is going to help you be, uh, to know whether what you're trying to do for your customers is right or wrong. So it is a, it's remarkable to see how many customers are in pursuit of really turning data into >>Doing so. We've got to you, we had the formula one team on here, McLaren, um, Zach brown. I got a little selfie with, uh, the drivers that kind of cool. My son loved it, but that's an IOT application in my mind, first, the coolest of the sports. Awesome. But like the car going in real time, you know, driving that, driving an advantage with data. So it's an IOT IOT. Then you got just the blocking and tackling >>Data warehouse in the cloud. And then you got companies who are trying to transform a data. So I have to ask you as customers out there, look at Splunk and look at the next level of their architecture with multicloud coming around the corner. How should they be thinking about data? Get the foundation with Splunk. What's the next chapter in your mind? I mean, you know, a lot of customers that I meet they're in multiple clouds. They're not just in one. It means they've got data in Amazon or Google or Azure. A lot of them still have data on prem, you know, but when I talk to customers, they don't say things to me like, Hey, I'm in different clouds, I'm on prem. Can you make sure I have different observability and security experiences for each one? Like they don't, they really, at the end of the day, they're like, look, I need a consistent observability experience, consistent security, regardless of where my data is. >>So what that means to Splunk is, you know, wherever your data is, we're going to be Splunk will just work that that's kinda, as you know, it's how we think about it. And speaking that I had dinner with Lando the other night and it was, I hadn't met Lando before, but man, what an awesome, awesome person. We were just kind of hanging out, talking about data and I ask, this is the kind of stuff you wouldn't normally get. I asked him like, Hey, if you could, if technology could do anything to help you win formula one races, what would it be? A totally open-ended question. And I wasn't sure how he was going to answer it, but he didn't pause this guy. Like you talk about, you think of these scenarios. He's very quickly. He's like, oh man, if we had data, could help me do this and this and this and this because in his business, a millisecond can be the difference between winning or losing a race. And for some of you like, oh, that can't be, but for him, that's how his mind works. So it's crazy to see how excited he was to use tech, to get to data, ask questions that can ultimately help them. >>What was the number one thing pitting the right time or tires? What was he, what did he come up there? He is. >>You know, I can't, unfortunately >>I don't want to put you on the spot. I will be. >>This is like, you know, I, I wouldn't, uh, that would put him in a bad spot, but I will tell you though, I mean, this guy is, and that whole team is really about using data to win. >>Well, you know, I was joking. Um, but these guys can, they came on. Cause you know, I'm a big fan, obviously with the Netflix special driving two survives the name of the title. They become hugely popular to a new fan base, especially techies. Um, I said, Hey, you're driving the advantage with data kind of my little, little comeback to that, but that's really kind of a real encapsulates a real world scenario. I mean, well, there are 10,000 people working on McLaren. You have the driver in the car, you have the car itself with all this instrumentation that kind of encapsulates the enterprise experience right now. They don't have the right app doing the right thing with customers. It could be the difference between having a successful digital transformation or not. So it's kind of like parallel. I mean, I know that's kind of the tie in with the, with the sponsorship, but that's the real world now. >>Yeah, it is. And I mean, if you think about it, there's two drivers per car, 10 teams. There's so many races, there's a tremendous amount of money that they're all spending. But you know, when, when your season is really composed of a certain number of races and you got millions of people tuning in you're right. There's hundreds of people working behind the seat. Could you imagine if they didn't use data and you're trying to, you're, you're trying to race and formula one against the best drivers and the best engineers in the world. I just, you know, it goes to show you're right. It is, it's a perfect example of them transforming as any other enterprise, basically using data to get an advantage. >>And just before we move on to the next topic, the e-sports thing is fascinating as well, because now they're taking this memento verse kind of vibe where they're moving people on the e-sports, where they're having the shadow competition. It's a very interesting kind of bringing the fan base in, but there's probably gonna be a lot of data involved in that as well. Maybe identify the next driver who knows, hopefully, you know, good stuff. So Sean, you're in charge of process technology. I have to ask you, um, as customers look at all the different solutions out there, I'll say multicloud check, you guys have a good vision on that. Like that observability. I mean, that's the fashion right now. Let's talk about observability that there's so many companies out there doing quote observability. How should customers think about what that means in context to the decision of they make everyone's coming into the, the CSO or the CIO saying, um, your observability solution? >>Yeah, I mean first, um, you know, what is observability? I always like to just sort of map it back to things we might understand. So back in the day, monitoring really was connect to a machine. It has a monolith app, you know this and you just try to debug this one thing. That's not the world we live in today. Today when you're building apps in the cloud, you're you, you have hundreds of these services behind the scenes. Like no one person can actually comprehend all of it. So now all of a sudden tools become, they really matter. And what I would say is from a Splunk perspective, when we talk to customers, it's not like one person there, one team is quote, you know, working and making the whole system work. Oftentimes you have different teams like network teams, app teams, security teams, and they all kind of need to work together in one way shape or another. But this is why, you know, when rebuild our systems, it's off of shared data so that, you know, if I'm an operator, you're an app developer. And if I need to work with you, at least I can share something with you in context. So we, we, while there are individual tools to do certain things, our mental model is that they all do work together. That's super, super important for any observability thing you're looking at. You just want to make sure that you can see things end to end. Otherwise you get in trouble >>Quick. You know, I'd love to get your perspective being new to Splunk as you come in and new, the industry obviously has experienced that in the cloud has been well documented, certainly in the cube. What's it like there because as you come in, it's not a utility anymore. It's not a tool anymore. It's a platform and it's getting bigger and growing. So you have probably a lot of things going on. So you walk in and you, you say, okay, let me see the price of technology. Were you blown away? What was your reaction? What can you share some, uh, color around what's uh, what was it like when you open up the doors of the kingdom of the product? >>Yeah. Well, I mean, these t-shirts are real men and there's like ponies running around this. The Splunkers love to have fun. And you know, before I came to Splunk, the one thing I noticed, anytime I asked my thoughts long, they were fired up. Like they were really, really excited about the tech, but when I got into it, the truth is, you know, you don't know what you don't know until you see it, but I was just done to, to then sort of connect the dots like wow. Splunk is in the core data plane of tens of thousands of enterprises all over the world, like the data plane for all of their architecture and applications. So with that becomes a great responsibility, as you could imagine, but it is not just a tool. It is something that customers like. I dunno, the university of Illinois, you know, with COVID, they'll they'll track, uh, they'll track 3.2 million saliva tests just for contract tracing and behind the scenes, they're using Splunk for a real thing. Or we've talked about F1 or you think of slack, like we're all kind of using slack. These days, slack is using, um, uh, Splunk to make sure that their environment of slackers and everything's building it's all secure. So th it's those stories that go on and on are just incredible. When you learn that, >>I started at Teresa Carlson yesterday, and we were talking about the growth opportunity and I spent speculating that, you know, my opinion, my opinion, that's looking, hang on the cube is that Splunk's that this new inflection point that another elbow, another kickoff, the growth, the way it's positioned. If you look at kind of where it's been, kind of where it's going with security now as a platform with the enterprises, how do you describe that growth in your mind? Because obviously this market's changing an edge real time. All these things are happening. What's, what's the, where's the growth going to be? >>Yeah, I think it's in the cloud. I mean, if you think of Splunk, I think the company is about 18, 19 years old. So its history is an almost 20 years of on-premise software. In some sense, you might go, Hey, is that a liability? But Rio, the reality is it's a strength because we're already part of these enterprise infrastructures and application stacks. And then when you now move that group to the cloud, and then you got all others coming to the cloud, that's where they're, I mean, it is just the tip of what is happening. So, you know, if I'm a customer and I moved to the cloud in the cloud, it's like, I don't have to really scale or size anything. Like it just works. And it, to me, it's just an end point and I load data. So in that context, the number of new use cases that customers are able to get after is actually pretty awesome. But really at the end of the day it's cloud. >>Well, great to have you on, I know you've got to go. Thanks for coming on the queue. One final question. What's your vision for the next year or two, what's your to do items. What's the message to the marketplace. >>You know, I'm, I'm thrilled to be here, but at the end of the day, you know, my message to the marketplaces, we're all excited to work with our customers to really help them have that strong foundation so they can turn data into doing and actually pull off these digital transformation. >>One final final question for the companies that get the cloud scale combined with putting data into action for the, for the value what's the result going to be is they can put more competitive advantage. Is it more agility? What do you see happening when you combine the cloud scale with a great data plane? >>Yeah, I think at the end of the day, these companies would tell you that they can move faster than ever before. They're more competitive there. They have confidence that their environments secure, they can build new customer experiences. And when you put all of that together, honestly, that is what these digital transformations are all >>Great to be in the product and technology business these days. Isn't it a lot of fun, a lot of action. Thanks for coming on the cube. Really appreciate it. Yeah, you bet. Good to be here. It's the cube coverage here, here at the live studio for Splunk studios, for their virtual events, the cube bring you all the action. I'm John for a, your host. Thanks for watching.

Published Date : Oct 20 2021

SUMMARY :

And that's the big theme you observability multi-cloud and security excuse has been for one there for a while. Yeah, I mean, you know, uh, you and I have talked a number of times before, Over the past decade, you see Splunk do something new operationalized data, I mean, I liked the way you just put it, it, it really, you know, you know, driving that, driving an advantage with data. I mean, you know, a lot of customers that I meet So what that means to Splunk is, you know, wherever your data is, we're going to be Splunk will just What was he, what did he come up there? I don't want to put you on the spot. This is like, you know, I, I wouldn't, uh, that would put him in a bad spot, You have the driver in the car, you have the car itself with all this instrumentation that kind of encapsulates the enterprise I just, you know, it goes to show you're right. Maybe identify the next driver who knows, hopefully, you know, good it's not like one person there, one team is quote, you know, So you walk in and you, you say, okay, let me see the price of technology. I dunno, the university of Illinois, you know, with COVID, they'll they'll track, uh, I started at Teresa Carlson yesterday, and we were talking about the growth opportunity and I spent speculating that, you know, group to the cloud, and then you got all others coming to the cloud, that's where they're, I mean, Well, great to have you on, I know you've got to go. You know, I'm, I'm thrilled to be here, but at the end of the day, you know, What do you see happening when you combine the cloud scale with a great data And when you put all of that together, for their virtual events, the cube bring you all the action.

SENTIMENT ANALYSIS :

ENTITIES

EntityCategoryConfidence
SeanPERSON

0.99+

AWSORGANIZATION

0.99+

AmazonORGANIZATION

0.99+

JohnPERSON

0.99+

10 teamsQUANTITY

0.99+

SplunkORGANIZATION

0.99+

GoogleORGANIZATION

0.99+

10,000 peopleQUANTITY

0.99+

McLarenORGANIZATION

0.99+

yesterdayDATE

0.99+

TodayDATE

0.99+

next yearDATE

0.99+

Shawn BicePERSON

0.99+

John furrierPERSON

0.99+

one teamQUANTITY

0.99+

NetflixORGANIZATION

0.99+

Zach brownPERSON

0.99+

One final questionQUANTITY

0.99+

RioORGANIZATION

0.98+

LandoPERSON

0.98+

twoQUANTITY

0.98+

firstQUANTITY

0.98+

one personQUANTITY

0.98+

hundredsQUANTITY

0.97+

tens of thousandsQUANTITY

0.97+

2012DATE

0.97+

this yearDATE

0.97+

COVIDORGANIZATION

0.97+

each oneQUANTITY

0.96+

millions of peopleQUANTITY

0.95+

almost 20 yearsQUANTITY

0.94+

2015DATE

0.94+

oneQUANTITY

0.93+

CICBORGANIZATION

0.93+

todayDATE

0.93+

One final final questionQUANTITY

0.91+

one thingQUANTITY

0.9+

past decadeDATE

0.9+

hundreds of peopleQUANTITY

0.88+

one wayQUANTITY

0.87+

premORGANIZATION

0.86+

enterprisesQUANTITY

0.85+

SplunkPERSON

0.84+

F1ORGANIZATION

0.84+

AzureORGANIZATION

0.83+

3.2 million saliva testsQUANTITY

0.82+

a million questionsQUANTITY

0.82+

about 18, 19 years oldQUANTITY

0.8+

two drivers per carQUANTITY

0.79+

university of IllinoisORGANIZATION

0.78+

coverage of.comOTHER

0.72+

Splunk .conf21OTHER

0.7+

at.comOTHER

0.69+

one racesQUANTITY

0.6+

Teresa CarlsonORGANIZATION

0.58+

servicesQUANTITY

0.51+

formula one teamQUANTITY

0.49+

twoDATE

0.48+

Tony Pierce | Splunk .conf21


 

>>Mhm. Hey there. Welcome to the cubes coverage of Splunk dot com. 21. I'm lisa martin. I've got a new guest joining me on the cube for the first time please welcome 20 pierce the senior manager of cybersecurity at the Y 20. Welcome to the program. >>Hi, glad to be here. >>So your linked in profile. I wanted to ask you about this. It states that you are delivering an evidence based approach to cybersecurity. What does that mean? An evidence based approach? And how are you and spunk helping to deliver this approach? >>Yeah. And I'd like to call it like the out case outcome based the price basically you start with what you're trying to accomplish and work with backwards. A lot of people say I've got a problem and then they go try to buy a tool or whatever to go fix the problem. I go in and I'm like all right, I got a problem. Let me figure out what's realistically I can use in the environment. So it's just basically working back so you have, you know, a breach. What if I what are all the different things that I knew to leverage to meet the controls for that breach. Right? And so um think of mitre in a way as a layered way of looking things um and the full defense and depth. So that's kind of my approach, I go when I figure out what the problem is and I answer the question and I used to do that because funk is able to give me a big data to everything. Got a guy so I like to be able to pull in all the different data types that I need to answer our questions, um, to do that. Right. And so whether it's a vulnerability management, patching your networking a good, a good example of this, like most common hacks in the world go after known vulnerabilities, right? And we get kind of caught up in all that. Um, one of the things we like to do here do, why is like we like to combine what's happening in the network. So the threat landscape in which is the network guys, the vulnerability guys who are scanning the data and then actually the patching, who is, who is actually, you know, mitigating the problem putting all those into one screen has really helped people with their risk rating. >>Talk to me a little bit about some of the changes, we've seen massive changes in the threat landscape in cybersecurity in the last year and a half during the pandemic. We've seen massive increase in ransomware. DDoS attacks, ransomware becoming a household word, the executive order that just came down a few months ago. What are some of the things that you've seen? Have you seen the acceleration of organizations coming to help? We know that it's not a matter of if we get attacked. It's when how are you, how are you seeing the last 18 months influence what you're doing. >>Oh man, it's been quite a crazy, right? And so um, by trade, I'm a instant responder, you know, uh high level investigator and possible solutions architect. So I, I get called in a lot for those kind of things. It has been kind of nuts. But you know, one of the things I always tell them when it started understanding what your threat landscaping is, um, and identify your key cyber terrain. Unfortunately most, you know, most companies as they grow, they get really big, they don't really do that. So they don't, they miss the consolidation point, right? I always say, hey, you know, if you're, if you're going to do this, if you say you have a ransomware attack, the first thing you can do is, you know, there's so many different controls that you can do to stop that you really need to know where it is and ejecting and then you can isolate if you need to um, what we're seeing in the companies. They, because they don't all have full coverage, right? And they expect their endpoint protections to actually do its job, you know, and sometimes that's, you know, don't get me wrong, there are some amazing endpoint protections out there, but you really need to be able to log it, you need to know what it looks like and you need to know where it is. So if you need a in case of a ransomware attack as it spreads through the network, you're able to isolate it and rewrite it to like, I like to call it a black hole the land and just reroute it so I can isolate it and then I can go after it. Um instead of trying to try to do every endpoint at a time because you'll get you'll get whacked >>definitely. So talk to me about working and partnering with Splunk and it's full security stuff. How does that, how is that a differentiator for you and your rule? >>Okay. So one of the things that we do here any why is we can find simmons sores one combined offering. Right? So we we try to bring the data in, we operationalize it and then we try to do something with it, right? We we find that. And then if you really think about that in a situation where the spunk products, it's the spunk or funky s and then phantom, right? And so that's the automation play. So we try to combine all those into one combined offering. So that when when bad things happen where we make a decision, we say all right, So, hey, um what we're seeing in the industry is like a lot of times people spend so much time hunting the known to to forget about the unknown. Think about the target. Hack a couple of years ago. Um the oil and gas attack just recently, you know, they miss those core things. So we try to say all right, well let's automate a lot of that known stuff so that the incident responders can focus on the unknown. And so when you combine all three of those products, you get a pretty good security staff >>when you say automating The known, is that at all in any way like helping companies get back to basics. I've been hearing a lot in the last 18 months that some from a data protection perspective and from a ransomware attack perspective. So it's it's when not if but are you saying that companies are are sort of skipping past the basics where security is concerned? Yeah, >>Well, it's I don't say it's skipping past the basics. Right? I think that sometimes people get caught up in the definitions of what it is. Right? So there's there's so many, there's so many fair more shop there. Right? So like I'm a big fan of your trust. Um a lot of instant responded to using minor, I use minor for that as as it retains the instant response. Some people like to use high trust and I think a lot of what happens is they get lost in the confusion of all these different frameworks. Right? I like to go back to basics. I've been doing cyber for Oh, oh my oh my gosh, about 20 plus years. Right. Um I'm an active hacker. I like this is what I do. I like to call a defense in depth. Right? So when you're when you're doing that, if you follow the defense and depth Satur, it doesn't matter what framework you have, you can actually go back and you can Fix that problem. Right? So going back in the automation of unknown to an unknown, we know, and IOC is 100% now, you can say IOC it's like a hash, right? So when a bad thing happens like an exploit, first thing we try to do is we try to grab that hash and then we try to build a roll around it to stop that hash from spreading and going anywhere else. That's a We know 100% of it's bad. Now can exploits change their hash. Absolute. And it happens all the time, but for that Moment in time that hash is 100%. And so we try to say, hey look, you know, we got an endpoint protection but also why don't we use automation to block it at the boundary or why don't we keep it from doing lateral movement? Why don't we why don't we activate it from a defense and depth. So you have your network. Um I like to say, hey look you have your egress ingress and your lateral movement. So if you understand all those three fact factors, you can automate the control so that it doesn't spread, you know, you had mentioned ransomware, it's been really huge, right? And everybody goes, oh well, you know, if we do zero try zero trust, talks about, you know, segmentation a whole lot and then a segmentation is usually important. It won't stop everything but it will do a good job being able to you'll ever swung we actually pull that in and we say hey you know from and why are we take all that network? And we try to put it in a single pane of glass so that we can see everything. And then once we're able to see it, once we get a good robust data set and understand that operations were able to go in and automate it and so if I can go in and say hey look all these hashes are bad. Yeah I'm not going to rely on my end point, I'm going to put another control in place. So at the end point misses it, I have another control that will actually layer it and prevent it from spreading. >>Which is absolutely critical. Talk to me about some of the outcomes that Ey and Splunk are delivering to the end user customers. Everyone's always talking about it's all about outcomes. What are some of those? >>Yeah so we have um we really embraced like the data to everything right? So I I kind of have this opinion of like uh you know everything's data so everything needs to be secured right? Uh the people who missed that tend to get whacked pretty quickly. Um So what I like to do is I'm like all right so you know like IOT is huge out there right now O. T. Is doing it. So some of the things that we've done is like from a health care perspective um We've done we've combined I. O. T. And I. T. Into a commonality solution leveraging like network simple things like pulling in from the wind, pulling in um understanding what those Mac addresses are so that you can actually do like a workplace analytics around um say R. F. I. D. Tagging right? So you know where your people are at? Um Here we also do like a call a sock in a box where we put that put everything together that every like a from a tiered perspective like a tier one tier two analysts. You know what is that they need to do to mitigate mitigate observe something, What is the investigator need? Right? So we try to simplify those conversations so that you know exactly around like a threat hunting as well like threat hunter an investigator, they're totally different roles, right? So they need to be separated. We also like tie in like the um what is it? I really hate uh like power point. I'm not a big power point guy right? So I really like to be able to give the says oh he needs to understand what risk is, right? So we try to automated so we can get to that too. He can pull up his phone and pull up his punk app and he knows at any given time what his risk rating of his company, right? So we try to combine all those in. Like again, you know there is um we do stuff around Blockchain supply chain. You know, it doesn't really matter if it's a data analytics tool. You know a lot of people look at Funk as a sim. I don't just like look at it that way. I look at as a data analytics tool that does sim. It's just one of the functions this does. If you start understanding data and all the different things that data can do, then you need to go in and you can use Funk to basically answer those questions so that you can start putting in a control set. >>What what's the differentiated value that Ey and Splunk bring together to customers. What really sets this partnership and what it delivers apart. >>Well I'm I'm I'm biased on that right? Because I run the North America 17 for you like for consulting. So I would say that those two things is innovation and time to value. Right? So for let's start with innovation for a minute because Funk is so customizable right? Because it pretty much can integrate with just two. Anything we're able to go very fast, take data in and do something with it and operationalize. It doesn't matter who the customer is is they're going to give us a question. We'll break it all the way down and we'll understand what you're going to answer A good example that is like we were doing stuff around P. C. I. Compliance. The checklist. You know the financial sector, they get a huge amount of audits, right? Especially around PC. I. So we took all the Pc. I checklist and we said harry, what can we, what can we answer those questions? And so we built a dashboard that actually sends out a report to internal audit and we call it compliance over time, right? It's looking at data in a different perspective to answer a question. Now the other thing is that we like, we try to do here is, you know, with the, as we do is Funk and funk helps us with this, right? We have a great relationship with them is um, basically, oh I have a, I lost my train of thought there for me. So uh, innovations time to value, right? So from time to value what we do is we used to say, hey look, we have a lot of stuff in our lab. But one of the things I don't like to do is I don't like to um, go to clients and say, hey look, we were going to build this for the first time. I like to say, hey look, here's these questions in the industry. Get ahead of the question and go build in our labs so that when we when we actually get on site, our time to value is not in months. You know, we can begin weeks because we already have a huge repository of um use cases now those every use case is actually tied into an automation play. And so when we say that we say hey look here's everything is flowing, let's do this, let's go answer that question and let's go automate it and you let's make a decision where where we want to automate and where do we want a human interaction. Mhm. >>Talk to me about what's next for the partnership in terms of the future, what what can you tell us where E Y. And Splunk are going together? >>So we've been partying around um I think our next things that we're really looking at is A I um we're really getting kind of into that as well as A R. And D. R. Technology. Right? So um especially around like I'm looking at like the energy companies in the financial banking and one of the things I would love to do is like um go into you know a bank A. T. M. Right? And right now it takes somebody actually has to plug into that and to do a diagnostic on it. I would love to be able to get to a point where you can just take your camera scan the QR code on the on the device and then pull up an A. R. And it runs all the diagnostics on the device as its there. Another one is like the infrastructure um instead of actually going out, plugging into like say a solar panel going out pulling out of the tablet just scanning the solar panels and it tells you if it's good or bad and that's kind of the next step that we're trying to do. We're trying to really take that uh and dated everything and just kind of turn it on its end um like and you've got to remember everything is data nowadays, right? It's not the old days where you know, things are moving around and everything is in the file folders, it's gone right? Everything is data. So everything is security, right? And we know the first thing is we need to know what our threat landscape is. We need to know what that is and we need to apply that. All right. So if we can simplify answering questions, that's so much better. And one of the things I like about flunked is it scales really well, right? And I've looked at some of these fetters and don't get me wrong, I mean everybody has their place. The one thing I like about spunk is it doesn't mean it literally scales really well. So the more data you can get into it, it actually does better. Right? Um and how you do it now, that's just our approach. That's the next steps that we're really looking at from a technology standpoint, >>exciting stuff, Tony thank you for joining me sharing what ey and Splunk are doing together. Some of the unique use cases that you're helping to solve for customers and some of the things that you're excited about. We appreciate your time on your information. >>No, this is fun. You know, like I said, I'm a big fan. I even wore my spunk shirt just for this meeting. >>Fantastic. You're on brand well, Tony. Thank you. Again. We appreciate your time. >>All right. Thank you. You have a wonderful day. >>Thanks you as well for Tony Pierce. I'm Lisa Martin. You're watching the cubes coverage of splunk.com 21. Thanks for watching, >>enjoy. Bye bye mm. Mm hmm.

Published Date : Oct 20 2021

SUMMARY :

the cube for the first time please welcome 20 pierce the senior manager of cybersecurity at the Y 20. And how are you and spunk helping to deliver this approach? Um, one of the things we like to do here do, how are you seeing the last 18 months influence what you're doing. the first thing you can do is, you know, there's so many different controls that you can do to stop that you So talk to me about working and partnering with Splunk and Um the oil and gas attack just recently, you know, they miss those when you say automating The known, is that at all in any way like So you have your network. Talk to me about some of the outcomes that Ey and Splunk are delivering So we try to simplify those conversations so that you know exactly around What really sets this partnership and what it delivers apart. But one of the things I don't like to do is I don't like to Talk to me about what's next for the partnership in terms of the future, what what can you So the more data you can get into it, it actually does better. Some of the unique use cases that you're helping to solve for customers and some of the things that you're excited about. You know, like I said, I'm a big fan. We appreciate your time. You have a wonderful day. Thanks you as well for Tony Pierce.

SENTIMENT ANALYSIS :

ENTITIES

EntityCategoryConfidence
Tony PiercePERSON

0.99+

TonyPERSON

0.99+

Lisa MartinPERSON

0.99+

lisa martinPERSON

0.99+

two thingsQUANTITY

0.99+

100%QUANTITY

0.99+

oneQUANTITY

0.99+

threeQUANTITY

0.99+

SplunkORGANIZATION

0.99+

first timeQUANTITY

0.98+

about 20 plus yearsQUANTITY

0.98+

last year and a halfDATE

0.97+

harryPERSON

0.97+

MacCOMMERCIAL_ITEM

0.96+

one screenQUANTITY

0.96+

North AmericaLOCATION

0.96+

first thingQUANTITY

0.96+

twoQUANTITY

0.94+

few months agoDATE

0.93+

three fact factorsQUANTITY

0.92+

pandemicEVENT

0.92+

last 18 monthsDATE

0.91+

single paneQUANTITY

0.91+

IOCORGANIZATION

0.91+

zeroQUANTITY

0.9+

SplunkPERSON

0.88+

Y 20ORGANIZATION

0.86+

couple of years agoDATE

0.85+

EyORGANIZATION

0.85+

E Y.PERSON

0.82+

Splunk .conf21OTHER

0.79+

20PERSON

0.77+

EyPERSON

0.74+

FunkORGANIZATION

0.74+

17QUANTITY

0.74+

21OTHER

0.73+

FunkTITLE

0.73+

thingsQUANTITY

0.68+

tier twoQUANTITY

0.64+

funkORGANIZATION

0.6+

punkTITLE

0.58+

splunk.com 21TITLE

0.56+

tier oneQUANTITY

0.54+

IOTTITLE

0.49+

SaturORGANIZATION

0.43+

SplunkTITLE

0.42+

ransomwareTITLE

0.39+

Simon Davies, Splunk | Splunk .conf21


 

>>Hey, welcome to the cubes coverage of splunk.com 21. I'm licensed Lisa Martin here. I've got some in Demis with me, a VP in APAC at Splunk Simon. Welcome to the program. >>So here we are, unfortunately at another virtual conference, but there has been a tremendous amount of there's an understatement, right? That we've seen in the last 18 months. We've seen this massive distribution of the workforce. We've seen huge increases in the threat landscape. We've seen things like solar winds, ransomware, increasing significantly acceleration and digital transformation. As companies tried to do whatever they could to enable digital workspaces. I wanted to unpack with you, uh, this 20, 21 state of security report that Splunk has. What are some of the key findings? And then we'll dig into some of the things that you're seeing in the APAC region. >>Yeah, look, we're excited about the report. It really highlighted, I think what a lot of organizations are going through. Um, one of the statistics that stood out for me was, um, 75% of infrastructure users are multi-cloud, but expecting to get that these expecting to increase to 87% of customers will be using multicloud environments. So the reason why that's important is the complexity that creates, uh, for cyber professionals in terms of trying to protect and defend, um, becomes exponentially harder with every new iteration or generation of infrastructure that companies consume. Um, most interesting. Um, we actually saw about a third of users or already using three cloud providers, but that is going to grow to 50% of, of customers will grow to being using three cloud providers or more within the next two years. So again, just that, that trend is going to continue. Uh, the leveraging of cloud infrastructures is a core way of businesses digitizing and modernizing. Um, and as cyber professionals, we have to think about how we're going to address that. >>Definitely. One of the things that I've been seeing and hearing in the last 18 months from a security perspective is that organizations say, you know, it's, it's really not a matter of if we get hit with ransomware, it's when, and I was really surprised to see the, that the state of security report found that 70% of security and it leaders worry they're going to be hit by a solar winds style attack. So the security landscape changing dramatically in the last 18 months. >>Yeah, absolutely. I think the, the, the research is feeding back what we were already hearing from the customers, um, around how this is a critical, uh, motion. And I think the one thing that we've seen as well as the board level agenda now, the risk and cyber has, and, uh, an organization's ability to react or recover. Um, when you have an, an event, um, is now becoming a high priority for organizations, we're seeing a lot of increased spending in cybersecurity as this becomes more and more, um, pretty for organizations for breasts. So yeah, the, the, on the ground experiences certainly matching what we're seeing in the research there. Um, and all of that is a data problem, right? Security is a data problem when something happens, how do I, how do I know? Where, how do I know when, how do I know what, and then how do I know what actions to take based upon the data that we need to get? >>So security being a data problem talked about the complexity of the multi-cloud environments, that percentages of organizations that are adopting that now what that trend is moving towards. Also complexity, I can imagine with data volumes only increasing, what are some of the key challenges that APAC organizations specifically are seeing as they are accelerating digital transformation and doing what they can to enable this distributed workforce? >>Yeah. So, so the hybrid multicloud environment you use, I guess, an indicator of increased complexity, I think we often overlook the fact that I think the hybrid world is here to stay as well. So nobody is a hundred percent cloud and nobody's a hundred percent on prem anymore. It's very much an environment now where I need to, um, I need to protect and defend across that entire surface area and increasingly with edge computing. Um, and as we're looking at, uh, organizations pushing, processing out to the edge of their, um, their operations and whether that's a distributed workforce or sensor-based environments, um, that becomes critical as well. We've got organizations like Intel, uh, that use us to basically monitor not only the cyber infrastructure, but the entire customer infrastructure that they're providing the fabric by census of course, environments, where you can imagine that the security becomes even more important. >>So I think that complexity and the data sources that are now being generated and the explosion of that is, is kind of critical. Um, for apex specifically, we saw some interesting trends we saw about 37% of organizations are using data to now support the compliance environments. Um, about 36% are bringing in non-security data. Um, and about 36%, it really started to use AI or machine learning tools to help them in that, that large scale data volume processing, um, that they weren't able to do before. And then lastly, security analytics really is starting to become, uh, a critical tool in the arsenal of cyber professionals with 34% of organizations saying they're already using some form of security analytics to help them address the threat actors. >>Is there a silver lining in terms of the it folks and the security folks becoming better collaborating better? Anything that you've seen in this report? >>Uh, well in the report, but also in the way that we're seeing SOC organizations use tools. Um, so, uh, the orchestration remediation and automation is a big industry trend, particularly when you look at things like implementing zero trust and how you would use that for, um, putting that additional layer of protection around an organization. Um, and that's where the ability to identify using machine learning or AI, uh, trends or events, understand the actions that need to be taken, understand the data sources that help address and remediate those and be able to automate that frees up the time and cyber security professionals. Um, and that's a critical step we're seeing because there's a shortage of skills and that's been an ongoing challenge, not only in Asia Pacific, but I think worldwide, >>Right. It has been a challenge worldwide. I was actually doing some cyber security work in the last month or so. And I read that this is the fifth consecutive year of that cybersecurity skills gap. So definitely a challenge there, but also if you flip the coin and opportunity. So in terms of some of those challenges that you mentioned, what are some of the key things that organizations and APAC can do to confront and combat those security challenges that are no doubt just only going to grow? >>Yeah, so I think, I think it's about, um, visibility, uh, and getting control, uh, and that's where again, data becomes key to that. So making sure you're capturing the right data, making sure that data is available, um, to your professionals, or if you're using a service provider, making sure that data is captured and available to the service providers, because that is increasingly what we see as the critical step to be able to, when something happens, how do you recover what your meantime to remediation, um, as, as the kind of critical motion. And so that's, again, what we could coming back to is security is a data problem. >>Security is a data problem. Got it. I do want to, uh, unpack a little bit some of the visibility challenges. That is one of the things that was identified. You mentioned that with so much complexity, multi-cloud being, uh, as, as hybrid work, something that's going to stay, what are some of the things that organizations can do and how can Splunk help to remove and mitigate those visibility challenges? >>So we've we just another interesting piece of research, um, it's called the state of data innovation report. Um, that really looked at the way organizations that categorize that data and organizations that actually build a data strategy, um, are actually much more prepared to react, uh, to engage and then to leverage that data for competitive differentiation in their markets. Um, and interestingly 33% of APAC organizations particularly rated their usage of data as better, uh, than, um, the industry average. Um, and 54% of APAC organizations already said they're using technologies like observability, which really helps them innovate around the data. Thinking about that next generation of service they're trying to provide. >>Did you see those are great numbers? It's about a third, um, are, are working on implementing technologies 54% were focused on that observability. Did you see any industries in particular that really leading edge there? Of course, every industry being affected by the pandemic, but I'm just curious if there were any, any ones that stood out >>So many great customer examples that we've got, uh, where we see organizations thinking differently about the way they engage their customers as a result of the digital transformation. Um, for me, one of the ones that stands out is Lenovo, um, you know, 50 billion plus multinational company servicing 180 markets around the world, um, when they looked at their observability approach and tried to understand how they were going to approach troubleshooting, um, when they had issues, if you think about the e-commerce experience for their consumers, um, they were able to reduce the, uh, reduce the downtime, um, and improve, um, the remediation time when there were incidents, uh, even though they had a 300% increase in traffic. And so for the ability for an organization to handle that kind of surge in digital, uh, interactions with their customers and do that to have clear visibility, using metrics, traces, and logs, to understanding exactly what's going on across complex, siloed multi, uh, services, uh, environments was, was critical to the Novo success. And, um, you know, not only from a cybersecurity point of view, but also having real time visibility into their infrastructure became critical as they service their customers. >>Right? One of the things I think we learned Simon during the pandemic, one of the many things is that access to real-time data real-time visibility real time, rather than visibility is no longer a nice to have it's. It was something that in the beginning was sort of organizations needing it to survive. Now organizations needing it to thrive it's that, that real-time visibility is really table stakes for organizations in any industry. >>W we, we kind of saw organizations go through three phases. There was the react phase. Then there was the adapt phase. So, you know, reacting was, first of all, kind of keep my people safe. The adapt phase was how am I going to work? And now we're seeing that next generation, which is really the evolve phase, right? Given the pandemic is still well COVID is still with us. Um, whether it's your, most of the countries, which are treating it more as an endemic or whether you're on the number of the countries still on that journey. And you're in Asia Pacific, we see different levels of, of vaccination status, different levels of, uh, companies starting to open up or countries starting to open up their borders and, um, life getting back to the, what is the new normal, um, all of that is still gonna evolve with a different way of working, moving forward, a different way of engaging our customers and our, our, uh, constituents, if you're a public sector, organization and data is underlying all of that. And for that, where we're kind of excited to be helping some of the largest organizations with that across, across the region, >>Did it is absolutely critical. You know, one of the things that we've also, I think observed in the last year and a half is the, the patients or the fuses of people getting smaller and smaller. So for organizations to have that visibility into data so that they can service their customers, whether it be healthcare or financial services or the tech sector for, for example, the access to that data is critical for brand reputation, reducing churn. And of course, ensuring that the customers are getting what they need to from that data. >>Yeah. A hundred percent. Um, gosh, so many examples across the region. One of the ones that jumps to mind is Flinders university, right? When, when they had to go remote, they had to go virtual, um, 25,000 students overnight, um, suddenly needing to be interacting by digital channels. How do you keep them secure? How do you keep them safe? How do you get insights, uh, in terms of the services that they need to, to protect that student population? >>So if you, if you kind of distill this down into data opportunities for organizations, we'll start with APAC, what do you think the top three data opportunities are of security as a data problem? What are the opportunities to combat that for an organization to be really successful? >>So I think, I think visibility is the first one. So making sure we're capturing the data, making sure we're capturing the right data. Um, and so the ability, uh, not only to capture the data, but to time sequence the data so I can actually understand what's happened. And when, um, the second then is, is, uh, control. Um, so ensuring that the right people have access to the right data, but we, we control that in a way that is specific to our organization. Um, and then lastly compliance. Um, and I think we're seeing a lot of new legislation starts coming around critical infrastructure, um, recognizing the importance of the digital infrastructure to the broader economy, um, and making sure that you're compliant with that critical infrastructure kind of requirements and environments as well as then the traditional regulated industries such as healthcare and financial services, um, become critical in that approach. So thinking about those three elements, and then thinking about how do I then use tools like automation and security analytics to really accelerate, um, the capabilities that we have as an organization. >>So observability control compliance, give me the 32nd pitch of how Splunk can help organizations achieve all three of those. >>So observability really is about getting insights into all of your environments. So, uh, it's all about metrics, traces and logs, which is about understanding exactly what's going on with every experience of every digital interaction I have with every customer and the ability to Splunk through that with zero, uh, zero sampling or full fidelity of that data is something we see our customers, particularly Navy, um, security, uh, look for me to it's all about orchestration and analytics. So how do I, how do I get that understanding that, that user behavior understanding the analytics around that, and then how machine learning becomes a critical part of that to help me scale my cyber infrastructure and defend. And then lastly resilience is really the core for all it systems in a digital world. Um, and being able to not only harden deliver resilient services like going over, I was able to do the 300% increase in their web traffic. Um, but also when something does go wrong and be able to remediate quickly become critical as well. >>Right? That quick remediation is because, like I was saying earlier, it's no longer a, if we get hit it's when organizations need to have that resilience baked in. Well, Simon, thank you for joining me, breaking down. Some of those reports what's going on in APAC, some of the trends and also some of the opportunities, security being a data problem, um, and organizations, what they can do to remediate that we appreciate your time. Thanks for having my pleasure for Simon Davies and Lisa Martin. You're watching the cubes coverage of splunk.com 21.

Published Date : Oct 20 2021

SUMMARY :

Welcome to the program. of the workforce. Um, one of the statistics that stood out for me was, um, 75% One of the things that I've been seeing and hearing in the last 18 months from Um, and all of that is a data problem, So security being a data problem talked about the complexity of the multi-cloud environments, Um, and as we're looking at, uh, organizations pushing, processing out to the edge Um, and about 36%, it really started to use AI or machine learning tools to help them in that, Um, and that's a critical step we're seeing because there's a shortage and combat those security challenges that are no doubt just only going to grow? as the critical step to be able to, when something happens, how do you recover what your meantime That is one of the things that was identified. Um, that really looked at the way organizations that categorize Of course, every industry being affected by the pandemic, Um, for me, one of the ones that stands out is Lenovo, um, you know, 50 billion plus multinational One of the things I think we learned Simon during the pandemic, one of the many things is that access to across the region, And of course, ensuring that the customers are getting what they need to from One of the ones that jumps to mind is Flinders university, right? Um, so ensuring that the right people have access to the right data, but we, So observability control compliance, give me the 32nd pitch of how Splunk the ability to Splunk through that with zero, uh, zero sampling or full fidelity of that data is something we see um, and organizations, what they can do to remediate that we appreciate your time.

SENTIMENT ANALYSIS :

ENTITIES

EntityCategoryConfidence
Lisa MartinPERSON

0.99+

Asia PacificLOCATION

0.99+

SimonPERSON

0.99+

300%QUANTITY

0.99+

50%QUANTITY

0.99+

70%QUANTITY

0.99+

180 marketsQUANTITY

0.99+

LenovoORGANIZATION

0.99+

75%QUANTITY

0.99+

87%QUANTITY

0.99+

IntelORGANIZATION

0.99+

APACORGANIZATION

0.99+

25,000 studentsQUANTITY

0.99+

34%QUANTITY

0.99+

54%QUANTITY

0.99+

SplunkORGANIZATION

0.99+

Simon DaviesPERSON

0.99+

33%QUANTITY

0.99+

secondQUANTITY

0.98+

Splunk SimonORGANIZATION

0.98+

last monthDATE

0.98+

three elementsQUANTITY

0.98+

about 36%QUANTITY

0.98+

oneQUANTITY

0.98+

first oneQUANTITY

0.98+

zeroQUANTITY

0.97+

hundred percentQUANTITY

0.97+

about 37%QUANTITY

0.97+

OneQUANTITY

0.97+

32nd pitchQUANTITY

0.97+

pandemicEVENT

0.97+

Flinders universityORGANIZATION

0.97+

splunk.comOTHER

0.96+

last year and a halfDATE

0.95+

threeQUANTITY

0.94+

fifth consecutive yearQUANTITY

0.93+

three cloud providersQUANTITY

0.93+

last 18 monthsDATE

0.93+

three phasesQUANTITY

0.9+

Splunk .conf21OTHER

0.86+

50 billion plusQUANTITY

0.83+

apexORGANIZATION

0.82+

zero trustQUANTITY

0.82+

aboutQUANTITY

0.76+

one thingQUANTITY

0.75+

thirdQUANTITY

0.75+

COVIDEVENT

0.72+

next two yearsDATE

0.7+

about a thirdQUANTITY

0.62+

usersQUANTITY

0.56+

21TITLE

0.51+

21OTHER

0.47+

20QUANTITY

0.44+

Rick Echevarria, Intel | Splunk .conf21


 

>>Well, hi everybody. I'm John Walls here and welcome back to the cubes, continuing coverage and splunk.com 21. And we've talked a lot about data, obviously, um, and a number of partnerships and the point of resources that it's going on in this space. And certainly a very valuable partnership that Splunk has right now is one with Intel. And with me to talk a little bit more about that is Rick Echavarria, who is the vice president of sales and the marketing group at Intel. Rick. Good to see it today. Thanks for joining us on the queue. It's >>Good to see you, John, and thanks for having us. >>You bet. No glad to have you as part of the.com coverage as well. Um, well, first off, let's just for folks at home, uh, who would like to learn more about this relationship, the Splunk Intel partnership, if you would give us that the 30,000 foot picture of it right now, in terms of, of how it began and how it's evolved to the point where it resides today. >>Yeah. Uh, sure. Glad to do that. You know, Splunk is had for many years, uh, position as, as one of the world's best, uh, security information and event management platform. So just like many customers in the cybersecurity space, they're probably trying to retire their technical debt. And, and what are the areas of important focuses to SIM space, right? The SIM segment within cybersecurity. And so the initial engagement between Intel and Splunk started with the information security group at Intel, looking to, again, retire the technical debt, bring next generation SIM technology. And that started, uh, the engagement with Splunk again, to go solve the cybersecurity challenges. One of the things that we quickly learned is that, uh, those flung offers a great platform, you know, from a SIM point of view, as you know, the cyber security segment, the surface area of attack, the number of attacks kids were increased. >>And we quickly realized that this needed to be a collaboration in order for us to be able to work together, to optimize our infrastructure. So it could scale, it could be performance, it could be reliable, uh, to protect Intel's business. And as we started to work with Splunk, we realized, Hey, this is a great opportunity. Intel is benefiting from it. Why don't we start working together and create a reference architecture so that our joint customers also benefit from the collaboration that we have in the cybersecurity space, as we were building the Intel cybersecurity infrastructure platform. So that re that was really the beginning of, uh, of the collaboration around described here and a little bit more, >>Right? So, so you had this, this good working relationship and said, Hey, why don't we get together? Let's get the band together and see what we can do for our car joint clients down the road. Right. So, so what about those benefits that, because you've now you've got this almost as force multiplier right. Of, of Intel's experience. And then what Splunk has been able to do in the data analytics world. Um, what kind of values are being derived, do you think with that partnership? >>Well, obviously we feel much better about our cyber security posture. Um, and, uh, and what's sort of interesting, John, is that we realized that we were what started out as a conversation on SIM. Uh, it really turned out to be an opportunity for us to look at Splunk as a data platform. And, you know, in the technology world, you sometimes hear people talk about the horizontal capabilities. Then the vertical usage is really the security. Uh, the SIM technology. It really became one of several, sorry about the noise in the background. One, uh, became a vertical application. And then we realized that we can apply this platform to some other usages. And in addition to that, you know, when you think about cybersecurity and what we use for SIM that tends to be part of your core systems in it, we started to explore what can we do with what could we do with other data types for other different types of applications. >>And so what we, what we decided to do is we would go explore usages of this data at the edge, uh, of, of the network, and really started to move into much more of that operational technology space. When we realized that Splunk could really, uh, that we could integrate that we can ingest other types of data. And that started a second collaboration around our open Vino technology and our AI capabilities at the edge with the ingestion and the machine learning capabilities of Splunk, so that we can take things like visual data and start creating dashboards for, for example, uh, managing the flow of people, you know, especially in COVID environment. So, uh, and understanding utilization of spaces. So it really started with SIM is moved to the edge. And now we realized that there's a continuum in this data platform that we can build other usages around. >>What was that learning curve like when you went out to the edge, because a lot of people are talking about it, right. And there was a lot of banter about this is where we have to be, but you guys put your money where your mouth was, right? Yeah. You went out, you, you explored that frontier. And, and so what was that like? And, and, and what I guess maybe kind of being early in, uh, what advantage do you think that has given you as that process has matured a little bit? >>Well, it's really interesting John, because what really accelerated our engagement with Splunk in that space was the pandemic. And we had, uh, in 2020 Intel announced the pandemic response technology initiative, where we decided we were going to invest $50 million in accelerating technologies and solutions and partnerships to go solve some of the biggest challenges that depend on them. It was presenting to the world at large. And one of those areas was around companies trying to figure out how to, how to manage spaces, how to manage, you know, the number of people that are in a particular space and social distancing and things of that nature. And, you know, we ended up engaging with Splunk and this collaboration, again, to start looking at visual data, right, integrating that with our open Vino platform and again, their machine learning and algorithms, and start then creating what you would call more operational technology types of application based on visual data. Now these will have other applications that could be used for security usages. It could be used for, again, social distancing, uh, the utilization of acids, but their pandemic and that program that ends the launch is really what became the catalyst for our collaboration with Splunk that allowed us to expand into space. >>Right. And you've done a tremendous amount of work in the healthcare space. I mean, especially in the last year and a half with Penn and the pandemic, um, can you give just a couple of examples of that maybe the variety of uses and the variety of, uh, processes that you've had an influence in, because I think it's pretty impressive. >>Yeah. We, um, there's quite a bit of breadth in the types of solutions we've deployed as part of the pandemic response. John, you can think of some of the, I wouldn't call these things basic things, but you think about telehealth and that improving the telehealth experience all the way to creating privacy aware or sorry, solutions for privacy sensitive usage is where you're doing things like getting multiple institutions to share their data with the right privacy, uh, which, you know, going back to secure and privacy with the right, uh, protections for that data, but being allowed, allowing organization a and organization B partner together use data, create algorithms that both organizations benefit from it. An example of that is, is work we've done around x-ray, uh, and using x-rays to detect COVID on certain populations. So we've gone from those, you know, data protection, algorithm, development, development type of solutions to, to work that we've done in tele-health. So, uh, and, and a lot of other solutions in between, obviously in the high-performance, uh, space we've invested in high-performance computing for, to help the researchers, uh, find cures, uh, for the current pandemic and then looking at future pandemic. So it's been quite a breadth of, uh, uh, of solutions and it's really a Testament also to the breadth of Intel's portfolio and partnerships to be able to, uh, enable so much in such a short amount of time. >>I totally agree, man. Just reading it a little bit about it, about that work, and you talk about the, the breadth of that, the breadth and the depth of that is certainly impressive. So just in general, we'll just put healthcare in this big lump of customers. So what, what do you think the value proposition of your partnership with Splunk is in terms of providing, you know, ultimate value to your customers, because you're dealing with so many different sectors. Um, but if you could just give a summary from your perspective, this is what we do. This is why this power. >>Yeah. Well, customers, uh, talk about transformation. You know, there's a lot of conversation around transformation, right before the pandemic and through and center, but there's a lot of talk about companies wanting to transform and, you know, in order to be able to transform what are the key elements of that is, uh, to be able to capture the right data and then take, turn that data into the right outcomes. And that is something that requires obviously the capabilities and the ability to capture, to ingest, to analyze the data and to do that on an infrastructure that is going to scale with your business, that is going to be reliable. And that is going to be, to give you the flexibility for the types of solutions that you're wanting to apply. And that's really what this blog, uh, collaboration with Intel is going to do. It's, it's just a great example, John, uh, of the strategy that our CEO, pat Gelsinger recently talked about the importance of software to our business. >>This plump collaboration is right in the center of that. They have capabilities in SIM in it observability, uh, in many other areas that his whole world is turning data into, you know, into outcomes into results. But that has to be done on an infrastructure that again, will scale with your business, just like what's the case with Intel and our cybersecurity platform, right? We need to collaborate to make sure that this was going to scale with the demand demands of our business, and that requires close integration of, of hardware and software. The other point that I will make is that the, what started out as a collaboration with between Intel and Splunk, it's also expanding to other partners in the ecosystem. So I like to talk to you a little bit on a work stream that we have ongoing between Intel Splunk, HPE and the Lloyd. >>And why is that important is because, uh, as customers are deploying solutions, they're going to be deploying applications and they're going to have data in multiple environments on premise across multiple clouds. And we have to give, uh, these customers the ability to go gather the data from multiple sources. And that's part of the effort that we're developing with HPE and the Lloyd's will allow people to gather data, perform their analytics, regardless, regardless of their where their data is and be able to deploy the Splunk platform across these multiple environments, whether it's going to be on prem or it's going to be in a pure cloud environment, or it's going to be in a hybrid with multiple clouds, and you're willing to give our customers the most flexibility that we can. And that's where that collaboration with Deloitte and HP is going to come into play. >>Right. And you understand Splunk, right? You will get the workload. I mean, it's, it's totally, there's great familiarity there, which is a great value for that customer base, because you could apply that. So, so, um, obviously you're giving us like multiple thumbs up about the partnership. What excites you the most about going forward? Because as you know, it's all about, you know, where are we going from here? Yes. Now where we've been. So in terms of where you're going together in that partnership, well, what excites you about that? >>Well, first of all, we're excited because it's just a great example of the value that we can deliver to customers when you really understand their pain points and then have the capability to integrate solutions that encompass software and hardware together. So I think that the fact that we've been able to do the work on, on that core SIM space, where we now have a reference architecture that shows how you could really scale and deliver that a Splunk solution for your cybersecurity needs in a, in a scale of one reliable and with high levels of security, of course. And the fact that we then also been able to co-develop fairly quickly solutions for the edge, allows customers now to have that data platform that can scale and can access a lot of different data types from the edge to the cloud. That is really unique. I think it provides a lot of flexibility and it is applicable to a lot of vertical industry segments and a lot of customers >>And be attractive to a lot of customers. That's for sure rec edge of area. We appreciate the time, always a good to see you. And we certainly appreciate your joining us here on the cube to talk about.com for 21. And your relationship with the folks at Splunk. >>Yeah. Thank you, John. >>You bet. Uh, talking about Intel spot, good partnership. Long time, uh, partnership that has great plans going forward, but we continue our coverage here of.com 21. You're watching the cube.

Published Date : Oct 20 2021

SUMMARY :

And with me to talk a No glad to have you as part of the.com coverage as well. And that started, uh, the engagement with Splunk again, to go solve the really the beginning of, uh, of the collaboration around described here and a little bit more, Um, what kind of values are being derived, do you think with that partnership? And in addition to that, you know, when you think about cybersecurity and managing the flow of people, you know, especially in COVID environment. uh, what advantage do you think that has given you as that process has matured a little bit? to figure out how to, how to manage spaces, how to manage, you know, um, can you give just a couple of examples of that maybe the variety of uses and the to share their data with the right privacy, uh, which, you know, you know, ultimate value to your customers, because you're dealing with so many different sectors. And that is going to be, So I like to talk to you a little bit on a work stream that we have ongoing And that's part of the effort that we're developing with HPE and the Lloyd's will allow people to gather well, what excites you about that? to customers when you really understand their pain points and then have the And be attractive to a lot of customers. uh, partnership that has great plans going forward, but we continue our coverage here of.com 21.

SENTIMENT ANALYSIS :

ENTITIES

EntityCategoryConfidence
DavidPERSON

0.99+

OdiePERSON

0.99+

Mitzi ChangPERSON

0.99+

RubaPERSON

0.99+

Rebecca KnightPERSON

0.99+

Lisa MartinPERSON

0.99+

CiscoORGANIZATION

0.99+

AliciaPERSON

0.99+

Peter BurrisPERSON

0.99+

JoshPERSON

0.99+

ScottPERSON

0.99+

JarvisPERSON

0.99+

Rick EchevarriaPERSON

0.99+

2012DATE

0.99+

RebeccaPERSON

0.99+

BrucePERSON

0.99+

AcronisORGANIZATION

0.99+

JohnPERSON

0.99+

InfosysORGANIZATION

0.99+

ThomasPERSON

0.99+

JeffPERSON

0.99+

DeloitteORGANIZATION

0.99+

AnantPERSON

0.99+

MaheshPERSON

0.99+

Scott ShadleyPERSON

0.99+

AdamPERSON

0.99+

EuropeLOCATION

0.99+

Alicia HalloranPERSON

0.99+

Savannah PetersonPERSON

0.99+

Nadir SalessiPERSON

0.99+

Miami BeachLOCATION

0.99+

Mahesh RamPERSON

0.99+

Dave VolantePERSON

0.99+

Pat GelsingerPERSON

0.99+

January of 2013DATE

0.99+

AmericaLOCATION

0.99+

Amazon Web ServicesORGANIZATION

0.99+

Bruce BottlesPERSON

0.99+

John FurrierPERSON

0.99+

GoogleORGANIZATION

0.99+

Asia PacificLOCATION

0.99+

MarchDATE

0.99+

David CopePERSON

0.99+

AmazonORGANIZATION

0.99+

Rick EchavarriaPERSON

0.99+

AmazonsORGANIZATION

0.99+

John WallsPERSON

0.99+

ChinaLOCATION

0.99+

July of 2017DATE

0.99+

AWSORGANIZATION

0.99+

CatalinaLOCATION

0.99+

NewportLOCATION

0.99+

ZapposORGANIZATION

0.99+

NGD SystemsORGANIZATION

0.99+

50 terabytesQUANTITY

0.99+

Claire Hockin, Splunk | Splunk .conf21


 

(soft music) >> Hi, everyone. Welcome back to the Cube's covers of Splunk's dot com virtual event, their annual summit. I'm John Ferry, host of the cube. We've been covering dot conf since twenty twelve. Usually a physical event in person. This year it's virtual. I'm here with Claire Hockin, the CMO of Splunk. She's been here three and a half years. Your first year as CMO, and you got to go virtual from physical. Welcome to the cube. Good to see you. >> Thank you very much, John. Great. >> I got to ask you, I mean, this has been the most impressive virtual venue, you've taken over the hotel here in Silicon valley. You're entire teams here. It feels like there's a dynamic of like the teamwork. You can kind of feel the vibe. It's almost like a little VIP Splunk event, but you're broadcasting it to the world. Tell us what's happening. >> Yeah, it's been, I think for everyone a year where we really hope to be back to having a hybrid event, so having a big virtual component, but running dot conf as we had before from Las Vegas, which wasn't possible. So what we thought in the last six weeks is that we would actually bring the Splunk studio to a physical location. So we've been live all of this week from California, where we're sitting today and really thought through bringing the best of that programming to our, you know, our amazing audience of twenty six thousand people. So we were sitting here in a studio, we have a whole live stage and we've activated the best of dot conf to bring as many Splunkers as we can. And as many external guests to make it feel as real and as vibrant as possible. So. >> I have to say I'm very impressed. Since twenty twelve we've been watching the culture evolve. Splunk has always been that next big thing. And then the next big thing again, it seems to be the theme as data becomes so bigger and more important even than ever. There's a new Splunk emerging, another kind of next big thing. And this kind of says the patterns like do something big, that's new, operationalize it and do something new again. This is a theme, big part of this culture here. Can you share more about how you see this evolving? >> Sure. And I think that's what makes Splunk such a great place to be. And I think it attracts people who like to continually challenge reinvent. And I think we've spent a lot of time this year building out our portfolio, going through this cloud transformation. It just gives you a whole new landscape of how you unlock that power of data and how customers use it. So we've had a lot of fun, always building on top of that building, you know, our partnerships, what customers do and really having fun with it. I think one of the best things about Splunk is we do have this incredibly fun and playful brand and as data just becomes something that is more and more powerful, it's really relatable. And we have fun with activating that and storytelling. So, yeah. >> And you have a new manager, Teresa Carlson came in from Amazon web services. You have a lot more messaging kind of building on previous messaging. How are you handling and looking at the aperture of, that's growing from a messaging standpoint, you have a partner verse, which has rebranded of your solution of your ecosystem, kind of a lot of action going on in your world. What's the update? >> Yeah. It keeps us busy. And I think at one end, you know, the number of people that are using Splunk inside any customer base is just growing. So you have different kinds of users. And this year we're really working hard on how to partner and position Splunk with developers, but at the top end of that, the value of data and the idea of having a data foundation is something that's incredibly compelling for CTOs. So working really hard about looking at Splunk and data from that perspective, as well as the individual uses across areas like security and observability. So. >> You know, one of the things I wanted to ask you is, I was thinking about this when I was driving in this morning, Splunk has a lot of customers and you keep your customers and you've have a lot of customers that organically came into the Splunk through the product leadership and just great product. And then as security became more important, Splunk kind of takes that territory now. Now mainstream enterprise with the platform are leaning into Splunk solutions, and now you've got an ecosystem. So it's just becoming bigger and bigger just seems that the scale of the Splunk is growing radically bigger than it was, Is that happening? And what's your take on that? >> I think that's definitely a thing, John. So I think that the power of the ecosystem is amazing. We have customers, partners, as you've seen and everything just joins up. So we're seeing more and more dot joining through data. And we're just seeing this incredible velocity in terms of what's possible and how we can co-build with our partners and do more and more with our customers. So Splunk moves incredibly quickly. And I think if anything, we're just, gaining velocity, which is fun and also really challenging. >> Cloud-scale. And certainly during the pandemic, you guys had a tailwind on the business side, talk about the journey that you've had with Splunk as in your career and also for the customers. How are they reacting and what can they expect as Splunk continues to evolve? >> I think we're working really hard to make sure that Splunk is easier to use. Everything gets every more integrated. And I think our goal and our vision is you just capture your data and you can apply it to any use case using Splunk. And to make it sort of easier see that data in action. And one of the things I love from today was the dashboard studio. They're just these beautiful visualizations that really are inspiring around how data is working in your organization. And for me, I've been a Splunker for three and a half years. And I just think there is just so much to do, and there's so much of our story ahead of us and so much potential. So just really enjoying working with customers on the next data frontier, really. >> You have the Jedi Knight from Star Wars speaking, you had the F1 car racing. Lando was here, kind of the young Jedi, the old Jedi. The generations are coming together. You're seeing that old IT world, which relied on Splunk. And now you have this new developer real-time shifting left with security DevOps now going mainstream, you kind of have the confluences of these cultures coming together. It's not really clashing. It's kind of jelling. How are you handling that? How do you see that? What's Splunk kind of doing? Because I can see the themes, am I right? >> No, no. One of the stories from this morning that really struck me is we have Cal Poly and we worked with Cal Poly on their security and they actually have their students using Splunk and they run their whole security environment. And at the very top end, you have Walmart, the Fortune one, just using Splunk at a massive, incredible scale. And I think that's the power of data. I mean, data is something that everyone should and can be able to use. And that's what we're really seeing is unlocking the ability to bring, you know, bring all of your data in service of what you're trying to do, which is fun. And it just keeps growing. >> We had Zach Brown, the CEO of F1 McLaren Racing Team, here on the queue earlier. And it was interesting cause I was like driving the advantage with data, you know, kind of cliche, but they're using data very specifically, highly competitive. It almost kind of feels like a cloud kind of scale model because we've got thousands of people working on the team. They're on the track, they're competing, they're using data, they got to be agile and they got to be fast real time. Kind of sounds like the current enterprise's these days. >> Absolutely. And I think what's interesting about McLaren that the thing I love is either they have hundreds of terabytes of data moving at just at incredible speed through Splunk Enterprise, but it all goes back to their mission control in the UK. And there are 32 people that look at all that data. And I think it's got a half second delay and they make all the decisions for the car on the track. And that I think is a great lesson to any enterprises you have to, you know, you have to bring all that data together and you have to look at it and take decisions centrally for the benefit of your whole team. And I think McLaren is a really good example of when you do that it pays dividends and the team has had a really, really great season. >> Well, I want to say congratulations for pulling off a great virtual event. I know you had your physical event was on track and literally canceled the last minute because of the pandemic with the Delta virus. But it was amazing, made for digital TV kind of event. >> Absolutely, >> This is the future of media. >> Absolutely. And it is a lot of fun. And I think I'm really proud. We have done all of this with our in-house team, the brand, the experiences that you see, which is really fantastic. And it's given us a lot of ideas for sort of, you know, digital media and how we story tell, and really connect to our twenty thousand customers or two hundred and thirty thousand community members and keep everyone connected through digital. So this has been a lot of fun and a really nice moment for us this week. >> You know it's interesting, I was saying to the team here on one of our breaks, is that when you have this kind of agility with media to tell your own story directly, you're almost telling more stories there before. And there's a lot to tell you have a lot of successful customers, the new partners. What's the coolest story that you've seen. What would you share that you think is your favorite? If you could pick one or a few of them, what are your top stories that you see happening? >> So I've talked about Cal Poly, which I love because it's students and you know, the scale of Walmart, but there are so many stories. And I think the ones that I love most are the data heroes. We talk about the data here is a lot of Splunk and the people that are able to harness that data and to take action on that data and make something amazing happen. And we just see that time and time again, across all kinds of organizations where data heroes are surfacing, those insights. Those red flags, if you like and helping organizations stay on step ahead. And Conf is really a celebration of that. I think that's why we do this every year. And we really celebrate those data heroes. So across the program, probably too many to mention, but in every industry and at every scale, people are, you know, making things happen with data and that's an incredibly exciting place to be. >> Well you have a lot of great customers to, to use as references. But I got to ask you that as you go forward this year in marketing, what are your plans to take on this new dynamic? You've got hybrid events, you've got the community is always popular and thriving with Splunk at large-scale enterprises, global system integrators, doing business deals with you guys, as you guys are continuing to grow and grow and grow, what's the strategy? How do you keep the Splunk coolness going? Cause that's, you know, you guys are growing so fast. That's your job, is to keep things on track. What's your strategy? >> I think I look at that and just, we put the customer at the heart of that. And we think, you know, who are the personas, who are the people that use Splunk? What's their experience? What are they trying to do? What are those challenges? And we design those moments to help them move forward faster. And so that I think is just a really good north star. It is really unifying and our partners and customers, and every Splunker gets really behind that. So stay focused on that. >> Thanks for coming on the Cube, really appreciate it. Congratulations for great event. And thanks for having the Cube. We love coming in and sharing our media partnership with you. Thank you for coming. >> Thank you so much. And next year is your tenth year John. So we look forward to celebrating that as well. Thank you very much. >> Thank you. Thanks for coming on. Okay it's the Cube coverage here live in the Splunk studios. We are a virtual event, but it's turning out to be a hybrid event. It's like a VIP event, a lot of great stories. Check them out online. They'll be recycling through so much digital content. This is truly a great digital event. Jeffery, hot of the Cube. Thanks for watching. (soft music)

Published Date : Oct 20 2021

SUMMARY :

I'm John Ferry, host of the cube. Thank you very much, John. You can kind of feel the vibe. programming to our, you know, how you see this evolving? And I think that's what makes Splunk And you have a new manager, And I think at one end, you know, and you keep your customers And I think if anything, we're just, on the business side, And one of the things I love from today And now you have this new developer And at the very top end, you have Walmart, Kind of sounds like the current And I think what's interesting I know you had your the brand, the experiences that you see, is that when you have this kind of agility is a lot of Splunk and the But I got to ask you that as you And we think, you know, And thanks for having the Cube. And next year is your tenth year John. Jeffery, hot of the Cube.

SENTIMENT ANALYSIS :

ENTITIES

EntityCategoryConfidence
Claire HockinPERSON

0.99+

Zach BrownPERSON

0.99+

Claire HockinPERSON

0.99+

JohnPERSON

0.99+

Teresa CarlsonPERSON

0.99+

John FerryPERSON

0.99+

CaliforniaLOCATION

0.99+

JefferyPERSON

0.99+

WalmartORGANIZATION

0.99+

Las VegasLOCATION

0.99+

SplunkORGANIZATION

0.99+

UKLOCATION

0.99+

Cal PolyORGANIZATION

0.99+

AmazonORGANIZATION

0.99+

Cal PolyORGANIZATION

0.99+

Silicon valleyLOCATION

0.99+

32 peopleQUANTITY

0.99+

McLarenORGANIZATION

0.99+

next yearDATE

0.99+

Star WarsTITLE

0.99+

twenty six thousand peopleQUANTITY

0.99+

tenth yearQUANTITY

0.99+

LandoPERSON

0.99+

F1 McLaren Racing TeamORGANIZATION

0.99+

three and a half yearsQUANTITY

0.99+

This yearDATE

0.99+

oneQUANTITY

0.98+

this yearDATE

0.98+

first yearQUANTITY

0.98+

twenty thousand customersQUANTITY

0.97+

Splunk EnterpriseORGANIZATION

0.97+

CubeCOMMERCIAL_ITEM

0.96+

this weekDATE

0.95+

todayDATE

0.95+

thousands of peopleQUANTITY

0.94+

one endQUANTITY

0.91+

this morningDATE

0.9+

pandemicEVENT

0.9+

last six weeksDATE

0.89+

FortuneORGANIZATION

0.89+

Jedi KnightPERSON

0.87+

two hundred and thirty thousand community membersQUANTITY

0.87+

SplunkerORGANIZATION

0.86+

JediPERSON

0.85+

half secondQUANTITY

0.84+

Delta virusOTHER

0.83+

a yearQUANTITY

0.81+

hundreds of terabytes of dataQUANTITY

0.81+

twenty twelveQUANTITY

0.71+

One of theQUANTITY

0.66+

Splunk .conf21OTHER

0.62+

ConfORGANIZATION

0.55+

SplunkTITLE

0.51+

Katie Bianchi, Splunk | Splunk .conf21


 

>>Hello and welcome back to the cubes coverage of Splunk dot com virtual. I'm john Kerry host of the cube we are here in the Splunk studios in Silicon Valley where all the execs are here, it's basically a spunk studio. It's everyone's here telling the stories. We also got some remote guests coming in, customers partners and other Splunk execs. We've got Katie bianchi senior vice president of customer success. Welcome back to the cube. Thank great to see you. >>Thanks john Great to be here. >>Yeah, I love the customer success stories because at the end of the day customers vote with their wallet and when basically like solutions, they'll this customer examples and customer testimonials. There's one thing I've learned covering Splunk over the past decade and done in many dot coms. It's you guys have very happy customers and over the years have continuing to have great customer success organically now have to high end on the enterprise now with cloud scale lots changing, lots growing the world that's going completely cloud. Um, and again, data is at the center of the value proposition as it always was more important than ever. So what's new with the customers? What are some of the successful is that you're seeing what's new in your world? >>Yeah, Thanks for thanks for asking, john I think, You know, we've been talking about how things have been changing over the past 18 months. And if I over simplify our customer obsession means that everything we do is designed to make sure we're helping customers get the most out of their investment was flunk every single day. So we do this across our global team and our partner ecosystem who are providing both the right adoption and technical services and were architected and deploying thousands of Splunk environments to help our customers get to ongoing value. But in the world that we're living with today, I talked to so many customers who are doing amazing things with Splunk but dealing with really tough challenges right? So through the pandemic, everyone is dealing with more complexity, more change in the velocity that we have never seen before. And on top of all this, shifting to a fully digital business model, there's whole new challenges to effectively monitoring infrastructure and applications and maintaining security posture with this to customers that I'm talking to are also having to figure out ways to do a lot more with less. I think we all know it's an incredibly competitive talent market out there. So our customers are relying on Splunk and customer success more and more to make it easier and faster to get to value, to investigate, to monitor, to detect and to remediate. So that pace and all that change of what's happening means that we have to continually check ourselves to be that right strategic partners that can move at the pace of our customers because customers are counting on us to provide right services at the right time for every stage of their journey with us. >>Great point, great insight there. I want to ask you because Splunk has always had this kind of in their D. N. A. Because when Splunk started was always something new and it wasn't a new thing. That new thing never seen before. Now as the world can you guys continue to do that? You bring something new to the market, you operationalize, you bring value to customers then it happens again and again and again. But now more than ever the data rolls of cloud and and customer applications is new for customers. So you have a diverse customer base. I know you're obsessed with customer service but how do you how do you have a customer success? How do you deal with the fact that sometimes things are so new and there may or may not be a benchmark there and you can't go with the proven former. Sometimes you can sometimes you can't how do you solve? It's new to me problem that customers want this new thing. >>Yeah, I think you know a lot of what we see today is that the power as long as a data platform to bring in complex data allows customers to do many different things. Whether it's infrastructure monitoring, whether it's security, use cases or whether its application performance monitoring and all of that is new for our customers. So oftentimes like you said we grew up having customers use us for single use case when we're bringing this much data into the platform and they see what can be unlocked through the value of Splunk, what we have to make sure that they can do is most seamlessly move from use case and value point. So that means from a C. S. Perspective we have to continually make sure that we're doing what customers are asking us to do which is having the right services that deliver the right outcomes that are as prescriptive as possible and that we're doing that across the domain of all of our empire portfolio. So we spend a lot of time making sure that our technical services are scaling to the needs of customers but also everything that we do around success planning and adoption and use case guidance and best practices as well as our education and enablement are as prescriptive as possible for customers whether they are new to Splunk or whether they are scaling Splunk across multiple use cases and multiple areas of their business. >>Certainly a lot of not of multi vendor, multi vendor activities. Modern application development, security is a big part of it. So I have to ask you given all that, what are the top things, top three things for instance that your customers are asking from you guys from C. S perspective customer success >>perspective great question. So I think over, I think what we hear the most frequently is give me a more seamless buying experience with services that are really easy to consume and speed my time to value second and I just mentioned this is I need services that aren't task, just task based to work. I need services that deliver the outcome that I need for the business problem or business opportunity that I am trying to solve for. So make sure that your portfolio lines up with our outcomes And I think 3rd is all about more prescriptive guidance. The world is hard, the world is complex, data is only getting more complex while the opportunity is big, our role is all about prescription and making it as easy as possible. >>So I have to ask you the question that I'm observing, many people are in the industry as well is that Splunk is changing as a company. Um everyone knows the vibe of Splunk is very cool, very chill, very organic, big community vibe, good customer success, everything's going great. You continue to knock it out of the park over the years, but now you're mature company now, Scale is coming in, your customers are getting bigger and bigger. You have existing customers getting new customers, you have new offerings. There's a whole another Splunk coming another level. >>Yeah. How do you, how >>do you view that from a custom respect and you can, you share your reaction to that? >>Yeah, I, you know, I think it's an honor to be part of a company that has such a strong culture and has such great partnership with our customers and it really is all because of who our customers are and I think who are people are internally. But I think growing and scaling and making sure that we are able to deliver the right services at scale is a critical component of what we have to do to help customers along this journey. So the role of you keep saying this, but the role of customer success is to make the complex easy and we do that by making sure that we as an organization have the right data, the right prescription, the right way to serve our customers and the right coverage model no matter where customers are on the journey or who they are and getting and getting the most prescription to them at the right time. And that's that's quite frankly how we scale. But also what our customers asked for. They're asking for more module arised content and they're asking us for more ways that they can drive best practices and use case guidance from right within the product. And those are things that we are working on to help continue to scale out what we're able to do. >>That's a great point. Taking the complexity, make it simple and enable them to be successful. I think data does that you guys are offering that platform which is a great business model by the way, if you can provide those kind of value that's always a winning formula, Make things easy, reduce the steps it takes to do things and make it fast and simple. Uh I have to ask because you mentioned earlier, the top of this interview about digital business, we're here Splunk canceled the conference now is virtual. Were coming in remotely here on site at the studio. They they have a virtual student there now in the media business, which is a data business. You know, you guys are now doing tv with CUBA's here. Um everyone is realizing the pandemic. That digital business now is standard. You're seeing the impact of the instrumentation you mentioned. So as the digital business transformation is accelerated here and this time, not for everybody, it's going to change how customers are behaving. What have you what have you observed at the pandemic? Because it's kind of panel has cleared the runway a little bit for people to to do this properly because you can see what's not working. So what's your thoughts on this whole digital business? Everyone's connected and data is at the center of it. What's your thoughts? >>Yeah, absolutely. I I look, I think, you know what we have seen over the last 12-18 months with this acceleration to a digital business model, is that things and the other dynamics going on or that things are only getting more complex. Right? So strong customers can come to Splunk cloud because we know it reduces complete with complexity in their moves because we are that data platform that allows them to search, investigate and monitor across cloud across multi cloud and across hybrid environments but that's complex. Over the last year we've seen customers get too much quicker value um, in in Splunk cloud right there going through large complex transformation. One of the easiest things you can do is shed the amount of time and money you're spending, managing, monitoring your infrastructure. So coming to Splunk cloud helps accelerate time to value for them in that way. But let's make no mistake, that is really complex. And so part of what we are doing is ramping up our level of focus on those modernization services for customers. So customers who are choosing to come to Splunk cloud for those benefits. We are there from planning and cut over and beyond with more prescriptive tools, more automation and how we move data, more resources and more experts to get customers to Splunk cloud more seamlessly. And that for us from a modernization perspective is one thing that we are hearing clearly customers asking asking for specific in the space so they can take more advantage and move more quickly. >>One of the trends that we're reporting on and I'll get to the headline in silicon angle in a minute, what's reporting on this event is there's more, more surface area, there's more data, there's more tools and tools are important for helping people automate but at the same time if you have more tools you have more blind spots or silos. So when you get into this world of architecture, customers are struggling that we talked to around trying to find the ideal equation of okay balancing architecture platform and tools that's equilibrium if you will by getting access to the data. What's your reaction to that? Because this becomes one of those decisions. I think Splunk shines where you can kind of have the best of a platform at the same time use tooling where relevant to accelerate whether it's automation or other other jobs versus buying tools for everything. >>Yeah and I and so I think part of the part of the thing that we continue to see is with the proliferation of data and data sources and a different degree of complexity in tooling the decisions around what's important and what's not important become much more much more complex for customers and much more difficult for customers to make. So we're changing a lot on the product and pricing side to sort of facilitate that piece. But I think when you're talking about how do I get the most value immediately, what we do across our go to market organization is make sure that we're partnering with customers to say what are the outcomes that you want from you want a need as a priority from a monument infrastructure monitoring for an application performance security perspective and then how do we make sure that we're prioritizing your maturity journey very prescriptively to say here the use cases that are most material here are the data sources that are most material and here's a success plan that helps you get deployed to your priorities so you can start the journey with us and build on that as we go. So again, it's really about how do we make the complex really easy through higher degrees of prescription but really making sure that we're doing our job and tying the prescription to what our customers need most when they need it. >>That's a great segment of my next question. In fact, my final question because because you know the headline on silicon angle dot com that we're reporting for this event is I'll read it to you. Splunk doubles downs on multi cloud data access, observe ability and security at its annual summit. Okay, so balancing the shiny new toy in the North Star Direction vision to practical prescriptive customer journeys is always a balance because you want to talk to customers about the future. Multi cloud, obviously observe ability super important. And honestly if security gonna be built in, okay, we all know that back to the mainstream customer, you're in the customer success. So you want to show them the North Star, show them the headroom, whatever metaphor you want to use at the same time they're dealing with problems and things that they're trying to solve right now. What's your what's your thoughts on on customer success knowing that there's a lot of cool new things coming. >>Yeah, I think our job like I excited, I'll start and in the same sort of started in the same way. Um our job at the end of the day is to help customers get the most out of their current investment was blank and that does and that is all about working on what that maturity journey looks like, prioritizing outcomes that our customers care about and starting and starting that journey. So there's foundational work that needs to be done aligned to priorities. That's where we start and then if we're doing what we need to be doing, creating those prescriptive plans and those success plans, then all of how we deliver to that value is prioritized through what customers need the most when they need it and that is our role and then we believe that by doing that and moving as quickly as we can with customers to get to that value, then we're enabling them to continue on that journey for all the new stuff that's out there that they can explore and get more value from. >>Its always good to have that North star and that china new toy, new technology. So, I have to ask your final final question because I have you here, what have you learned during the pandemic that you could share with other practitioners that are watching or maybe watching this as they look at the best practice because we've seen a lot of evidence where some people have fallen to the side or failed. Didn't weren't prepared. People who were in the cloud experimenting got that tailwind and survived and thrived somewhere re factoring new business were emerging. So you kind of see a pattern, is there anything that you've noticed on your end um that you can share with, you know how to lean into something new? So you don't be left out in the cold if uh the wave comes, a new trend comes that they need to take advantage of like date at the edge or cloud scale. What are some of the things you've you've observed and learned? >>Yeah, that's a great question. So I think, you know, I think for me, my personal learning through the pandemic has been like, we always need to be looking around corners and planning specifically to for our customers and thinking for them in terms of what problems that they will have and we have to anticipate that so that we can pivot and create the right services that help them leverage to do what they need. So very early on. Um even very early on in the pandemic, our professional services team flipped within a two week period doing fully remote and virtual deployments because we knew we couldn't stop time to value given the shift to remote work, our customers were relying on us to deploy so that they could monitor infrastructure um and monitor work from home usage. And I think along with that as we started to see in through the back half digital transformations really pick up and customers move to cloud. We've been working across across the last really 12 to 15 months to really start to plan around what does it take to create the right services and the right capability, not just within Splunk but within our partner ecosystem to effectively move customers to Splunk cloud and help them navigate uh hybrid, multi cloud world with much more speed. And so for me, those are the two things that we really leaned into hard because we were always looking around corners and saying what's next for our customers based on what we're seeing happened in the external environment. >>Great insight, Katie, thank you for coming on the cube. That's awesome. And I think, you know, customers are seeing success formulas and the new ones are emerging and you guys are going the next level is always fun to talk about the future and today at the same time so great to have you on. And certainly at the end of the day the customers, the ones who are deploying and create the innovation with software and data. So thanks for sharing. >>Yeah. Thanks john um really, really happy to spend the time. There's nothing I like to do more than talk about our customers and to all of our customers, huge thank you to you for your partnership and all you're doing to continue to power the world with data. >>It's always good to have a lot of customers to tell the story for you, but I appreciate you. Coming on, congratulations on your success. It's the cube we are here live in the studio of Splunk Studios for their virtual event uh with the remote interview. We're talking all the people in the, in the industry. We can, we're bringing it in. We're going, we're doing the interviews here in person as well as a hybrid event. I'm john for the cube. Thanks for watching. Mm >>mm. Mhm.

Published Date : Oct 20 2021

SUMMARY :

I'm john Kerry host of the cube we Um, and again, data is at the center of the value proposition as it always was more important to are also having to figure out ways to do a lot more with You bring something new to the market, you operationalize, you bring value to customers then it happens again and again and are scaling to the needs of customers but also everything that we do around success So I have to ask you given all that, what are the top things, I need services that deliver the outcome that I need for the business problem So I have to ask you the question that I'm observing, many people are in the industry as well is that Splunk is changing as So the role of you keep saying this, but the role of customer for people to to do this properly because you can see what's not working. One of the easiest things you can do is shed the amount of time and money you're spending, are important for helping people automate but at the same time if you have more tools you to say what are the outcomes that you want from you want a need So you want to show them the North Star, show them the headroom, whatever metaphor you want to use at the same time they're Um our job at the end of the day is to help customers get the most So you kind of see a pattern, is there anything that you've noticed on your end um that you can share with, the last really 12 to 15 months to really start to plan around and the new ones are emerging and you guys are going the next level is always fun to talk about the future and our customers and to all of our customers, huge thank you to you for your partnership and all you're doing It's the cube we are here live in the studio of Splunk Studios for their virtual event

SENTIMENT ANALYSIS :

ENTITIES

EntityCategoryConfidence
Katie BianchiPERSON

0.99+

KatiePERSON

0.99+

Katie bianchiPERSON

0.99+

john KerryPERSON

0.99+

Silicon ValleyLOCATION

0.99+

thousandsQUANTITY

0.99+

SplunkORGANIZATION

0.99+

Splunk StudiosORGANIZATION

0.99+

two weekQUANTITY

0.99+

two thingsQUANTITY

0.99+

CUBAORGANIZATION

0.98+

johnPERSON

0.98+

one thingQUANTITY

0.98+

pandemicEVENT

0.97+

3rdQUANTITY

0.97+

bothQUANTITY

0.97+

D. N. A.LOCATION

0.97+

todayDATE

0.96+

OneQUANTITY

0.96+

oneQUANTITY

0.95+

last yearDATE

0.95+

Splunk cloudORGANIZATION

0.95+

secondQUANTITY

0.94+

15 monthsQUANTITY

0.94+

single use caseQUANTITY

0.92+

Splunk .conf21OTHER

0.89+

12QUANTITY

0.88+

single dayQUANTITY

0.87+

three thingsQUANTITY

0.86+

past 18 monthsDATE

0.85+

chinaORGANIZATION

0.83+

C. SORGANIZATION

0.79+

NorthORGANIZATION

0.76+

last 12-18 monthsDATE

0.73+

SplunkPERSON

0.67+

a minuteQUANTITY

0.65+

past decadeDATE

0.64+

waveEVENT

0.63+

ScaleORGANIZATION

0.6+

SplunkQUANTITY

0.59+

StarLOCATION

0.48+

SplunkTITLE

0.42+

Ryan Kovar, Splunk | Splunk .conf21


 

>>Well, hello everybody. I'm John Walls here with the cube, and we're very happy to continue our coverage here of a splunk.com 21. And today we're going to talk about cyber security. Uh, obviously everybody is well aware of a number of, uh, breaches that have happened around the globe, but you might say there's been a surge in trying to prevent those from happening down the road. And I'm going to let our guests explain that Ryan Covar, who is the security strategist at Splunk. Ryan. Good to see you with, uh, with us here on the cube. Glad you could join us today. >>Thank you very much. I've wished we could have been doing this in person, but such as the time of life we live. >>Yeah. We have learned to live on zoom that's for sure. And, uh, it's the next best thing to being there. So, uh, again, thanks for that. Um, well, let's talk about surge, if you will. Um, uh, I know obviously Splunk and data security go hand in hand that is a high priority with the, with the company, but now you have a new initiative that you're just now rolling out to take that to an even higher level. Tell us about that. >>Yeah, something I'm extremely excited to announce. Uh, it's the first time we're really talking about it is that.com 21, which is wonderful. And it's kind of the culmination of my seven years here at Splunk. Uh, before I came to Splunk, I did about 20 years of cyber security research and defense and nation state hunting and threat intelligence and policy and compliance, and just about everything, uh, public sector in the U S and the UK private sector, a couple of different places. So I've kind of been around the block. And one of the things I've found that I'm really passionate about is just being a network defender or a blue teamer. And a lot of my time here at Splunk has been around that. It's been speaking at conferences, doing research, um, coming up with ways to basically defend organizations, but the tools they have at hand and something that we say Alon is, uh, we, we work on the problems of today and tomorrow, not the distant future, right? >>The really practical things. And we had an, you know, there was a little bit of a thing called solar winds. You might've heard of it. Um, that happened earlier in December and we were able to stand up kind of on an ad hoc ragtag group of Splunkers around the world, uh, in a matter of hours. And we worked about 24 hours for panning over to Australia, into a Mia, and then back over to America and able to publish really helpful work to, for our customers to detect or defend or mitigate against what we knew at the time around solar winds, the attack. And then as time went on, we were continuing to write and create material, but we didn't have a group that was focused on it. We were all kind of chipping in after hours or, you know, deep deprecating, other bits of work. >>And I said, you know, we really need to focus on this. This is a big deal. And how can we actually surge up to meet these needs if you will, uh, the play on the punter. So we created an idea of a small team, a dedicated to current events and also doing security research around the problems that are facing around the world insecurity who use Splunk and maybe even those who don't. And that's where the idea of this team was formed. And we've been working all summer. We're releasing our first research project, excuse me, uh, at.com, which is around supply chain, compromise using jaw three Zeke and Splunk, uh, author by myself and primarily Marcus law era. And we have other research projects coming out every quarter, along with doing this work around, just helping people with any sort of immediate cybersecurity threat that we're able to assist with. >>So what are you hoping that security teams can get out of this work? Obviously you're investing a lot of resources and doing the research, I assume, diversifying, you know, the areas and to which you're, um, exploring, um, ultimately what would be the takeaway if I was on the other end, if I was on the client and what would you hope that I would be, uh, extracting from this work? >>Sure. We want to get you promoted. I mean, that's kind of the, the joke of it, but we, we talk a lot. I want to make everyone in the world who use a Splunk or cybersecurity, looked into their bosses and defend their company as fast and quickly as possible. So one of the big, mandates for my team is creating consumable, actionable work and research. So we, you know, we joke a lot that, you know, I have a pretty thick beard here. One might even call it a neck beard and a lot of people in our community, we create things for what I would call wizards, cybersecurity wizards, and we go to conferences and we talk from wizard to wizard, and we kind of sit on our ivory tower on stage and kind of proclaim out how to do things. And I've sat on the other side and sometimes those sound great, but they're not actually helping people with their job today. And so the takeaway for me, what I hope people are able to take away is we're here for you. We're here for the little guys, the network defenders, we're creating things that we're hoping you can immediately take home and implement and do and make better detections and really find the things that are immediate threats to your network and not necessarily having to, you know, create a whole new environment or apply magic. So >>Is there a difference then in terms of say enterprise threats, as opposed to, if I'm a small business or of a medium sized business, maybe I have four or 500 employees as opposed to four or 5,000 or 40,000. Um, what about, you know, finding that ground where you can address both of those levels of, of business and of concern, >>You know, 20 years ago or 10 years ago? I would've answered that question very differently and I fully acknowledge I have a bias in nation state threats. That's what I'm primarily trained in, however, in the last five years, uh, thanks or not. Thanks to ransomware. What we're seeing is the same threats that are affecting and impacting fortune 100 fortune 10 companies. The entire federal government of the United States are the exact same threats that are actually impacting and causing havoc on smaller organizations and businesses. So the reality is in today's threat landscape. I do believe actually the threat is the same to each, but it is not the same level of capabilities for a 100% or 500 person company to a company, the size of Splunk or a fortune 100 company. Um, and that's something that we are actually focusing on is how do we create things to help every size of that business, >>Giving me the tools, right, exactly. >>Which is giving you the power to fight that battle yourself as much as possible, because you may never be able to have the head count of a fortune 100 company, but thanks to the power of software and tools and things like the cloud, you might have some force multipliers that we're hoping to create for you in a much more package consumable method. >>Yeah. Let's go back to the research that you mentioned. Um, how did you pick the first topic? I mean, because this is your, your splash and, and I'm sure there was a lot of thought put into where do we want to dive in >>First? You know, I'd love to say there was a lot of thought put into it because it would make me sound smarter, but it was something we all just immediately knew was a gap. Um, you know, solar winds, which was a supply chain, compromise attack really revealed to many of us something that, um, you know, reporters had been talking about for years, but we never really saw come to fruition was a real actionable threat. And when we started looking at our library of offerings and what we could actually help customers with, I talked over 175 federal and private sector companies around the world in a month and a half after solar winds. And a lot of times the answer was, yeah, we can't really help you with this specific part of the problem. We can help you around all sorts of other places, but like, gosh, how do you actually detect this? >>And there's not a great answer. And that really bothered me. And to be perfectly honest, that was part of the reason that we founded the team. So it was a very obvious next step was, well, this is why we're creating the team. Then our first product should probably be around this problem. And then you say, okay, supply chain, that's really big. That's a huge chunk of work. So the first question is like, well, what can we actually affect change on without talking about things like quantum computing, right? Which are all things that are, you know, blockchain, quantum computing, these are all solutions that are actually possible to solve or mitigate supply chain compromise, but it's not happening today. And it sure as heck isn't even happening tomorrow. So how do we create something that's digestible today? And so what Marcus did, and one of his true skillsets is really refining the problem down, down, down, down. >>And where can we get to the point of, Hey, this is data that we think most organizations have a chance of collecting. These are methodologies that we think people can do and how can they actually implement them with success in their network. And then we test that and then we kind of keep doing a huge fan of the concept of OODA loop, orient, orient, observe, decide, and act. And we do that through our hypothesizing. We kind of keep looking at that and iterating over and over and over again, until we're able to come up with a solution that seems to be applicable for the personas that we're trying to help. And that's where we got out with this research of, Hey, collect network data, use a tool like Splunk and some of our built-in statistical analysis functions and come out the other side. And I'll be honest, we're not solving the problem. >>We're helping you with the problem. And I think that's a key differentiator of what we're saying is there is no silver bullet and frankly, anyone that tells you they can solve supply chain, uh, let me know, cause I want to join that hot new startup. Um, the reality is we can help you go from a field of haystacks to a single haystack and inside that single haystack, there's a needle, right? And there's actually a lot of value in that because before the PR problem was unapproachable, and now we've gotten it down to saying like, Hey, use your traditional tools, use your traditional analytic craft on a much smaller set of data where we've pretty much verified that there's something here, but look right here. And that's where we kind of focused. >>You talked about, you know, and we all know about the importance and really the emphasis that's put on data protection, right? Um, at the same time, can you use data to help you protect? I mean, is there information or insight that could be gleaned from, from data that whether it's behavior or whatever the case might be, that, that not only, uh, is something that you can operationalize and it's a good thing for your business, but you could also put it into practice in terms of your security practices to >>A hundred percent. The, the undervalued aspect of cybersecurity in my opinion, is elbow grease. Um, you can buy a lot of tools, uh, but the reality is to get value immediately. Usually the easiest place to start is just doing the hard detail oriented work. And so when you ask, is there data that can help you immediately data analytics? Actually, I go to, um, knowing what you have in your network, knowing what you have, that you're actually trying to protect asset and inventory, CMDB, things like this, which is not attractive. It's not something people want to talk about, but it's actually the basis of all good security. How do you possibly defend something if you don't know what you're defending and where it is. And something that we found in our research was in order to detect and find anomalous behavior of systems communicating outbound, um, it's too much. >>So what you have to do is limit the scope down to those critical assets that you're most concerned about and a perfect example of critical asset. And there's no, no shame or victim blaming here, put on solar winds. Uh, it's just that, that is an example of an appliance server that has massive impact on the organization as we saw in 2020. And how can you actually find that if you don't know where it is? So really that first step is taking the data that you already have and saying, let's find all the systems that we're trying to protect. And what's often known as a crown jewels approach, and then applying these advanced analytics on top of those crown jewel approaches to limit the data scope and really get it to just what you're trying to protect. And once you're positive that you have that fairly well defended, then you go out to the next tier and the next tier in next year. And that's a great approach, take things you're already doing today and applying them and getting better results tomorrow. >>No, before I let you go, um, I I'd like to just have you put a, uh, a bow on surge, if you will, on that package, why is this a big deal to you? It's been a long time in the making. I know you're very happy about the rollout of this week. Um, you know, what's the impact you want to have? Why is it important? >>We did a lot of literature review. I have a very analytical background. My time working at DARPA taught me a lot about doing research and development and on laying out the value of failure, um, and how much sometimes even failing as long as you talk about it and talk about your approach and methodology and share that is important. And the other part of this is I see a lot of work done by many other wonderful organizations, uh, but they're really solving for a problem further down the road or they're creating solutions that not everyone can implement. And so what I think is so important and what's different about our team is we're not only thinking differently, we're hiring differently. You know, we have people who have a threat intelligence background from the white house. We have another researcher who did 10 years at DARPA insecurity, research and development. >>Uh, we've recently hired a, a former journalist who she's made a career pivot into cybersecurity, and she's helping us really review the data and what people are facing and come up with a real connection to make sure we are tackling the right problems. And so to me, what I'm most excited about is we're not only trying to solve different problems. And I think what most of the world is looking at for cybersecurity research, we've staffed it to be different, think different and come up with things that are probably a little less, um, normal than everyone's seen before. And I'm excited about that. >>Well, and, and rightly so, uh, Ryan, thanks for the time, a pleasure to have you here on the cube and, uh, the information again, the initiative is Serge, check it out, uh, spunk very much active in the cyber security protection business. And so we have certainly appreciate that effort. Thank you, Ryan. >>Well, thank you very much, John. You bet Ryan, >>Covar joining us here on our cube coverage. We continue our coverage of.com for 21.

Published Date : Oct 20 2021

SUMMARY :

And I'm going to let our guests explain that Ryan Covar, who is the security strategist at Splunk. Thank you very much. in hand that is a high priority with the, with the company, but now you have a new initiative that you're just And it's kind of the culmination of my seven years here at Splunk. And we had an, you know, there was a little bit of a thing called solar And I said, you know, we really need to focus on this. And so the takeaway for me, what I hope people are able to take away is we're here Um, what about, you know, finding that ground I do believe actually the threat is the same to each, and things like the cloud, you might have some force multipliers that we're hoping to create for you in a much more package Um, how did you pick the first topic? Um, you know, solar winds, And then you say, okay, supply chain, that's really big. And then we test that and then we kind of keep doing a huge Um, the reality is we can help you go from And so when you ask, is there data that can help you immediately data analytics? So really that first step is taking the data that you already Um, you know, what's the impact you want to have? And the other part of this is I see a lot of work done by many other wonderful And so to me, what I'm most excited about is we're not only And so we have certainly appreciate Well, thank you very much, John. We continue our coverage of.com

SENTIMENT ANALYSIS :

ENTITIES

EntityCategoryConfidence
David NicholsonPERSON

0.99+

ChrisPERSON

0.99+

Lisa MartinPERSON

0.99+

JoelPERSON

0.99+

Jeff FrickPERSON

0.99+

PeterPERSON

0.99+

MonaPERSON

0.99+

Dave VellantePERSON

0.99+

David VellantePERSON

0.99+

KeithPERSON

0.99+

AWSORGANIZATION

0.99+

JeffPERSON

0.99+

KevinPERSON

0.99+

Joel MinickPERSON

0.99+

AndyPERSON

0.99+

RyanPERSON

0.99+

Cathy DallyPERSON

0.99+

PatrickPERSON

0.99+

GregPERSON

0.99+

Rebecca KnightPERSON

0.99+

StephenPERSON

0.99+

Kevin MillerPERSON

0.99+

MarcusPERSON

0.99+

Dave AlantePERSON

0.99+

EricPERSON

0.99+

AmazonORGANIZATION

0.99+

twoQUANTITY

0.99+

DanPERSON

0.99+

Peter BurrisPERSON

0.99+

Greg TinkerPERSON

0.99+

UtahLOCATION

0.99+

IBMORGANIZATION

0.99+

JohnPERSON

0.99+

RaleighLOCATION

0.99+

BrooklynLOCATION

0.99+

Carl KrupitzerPERSON

0.99+

LisaPERSON

0.99+

LenovoORGANIZATION

0.99+

JetBlueORGANIZATION

0.99+

2015DATE

0.99+

DavePERSON

0.99+

Angie EmbreePERSON

0.99+

Kirk SkaugenPERSON

0.99+

Dave NicholsonPERSON

0.99+

2014DATE

0.99+

SimonPERSON

0.99+

UnitedORGANIZATION

0.99+

Stu MinimanPERSON

0.99+

SouthwestORGANIZATION

0.99+

KirkPERSON

0.99+

FrankPERSON

0.99+

Patrick OsbornePERSON

0.99+

1984DATE

0.99+

ChinaLOCATION

0.99+

BostonLOCATION

0.99+

CaliforniaLOCATION

0.99+

SingaporeLOCATION

0.99+

Brian Berg, Splunk | Splunk .conf21


 

>>Hi, welcome to the cubes coverage of splunk.com 21. I need some Martin Brian Berg joins me next director at Accenture leading the EMEA Splunk partnership. Brian, welcome to the program. Talk to me a little bit about the Splunk Accenture partnership. This goes back about five years, I believe. >>Yeah, let me provide a bit of, uh, of a history. Uh, we have been starting with Splunk very intensively more than five years ago. Uh, we have been working very closely together to create something like an incubator approach to really serve the markets as, as best as possible. It was really successful. So exponential growth far beyond the markets, uh, for the last five years. So I'm really proud to be part of that journey. And, uh, the partnership is kind of anchored around three core components. The first component is what we typically call matching up our deep Accentia industry expertise with cloud spend Splunk technology. So it really gives a unique differentiator in the market combining that unique industry understanding and the Splunk technology, which is really capable to have an end to end platform for our clients. I'll give you an example a couple of years ago with, and starting to work in Germany was Dr. >>Bank cargo, which is one of the leading European, uh, freights or companies that, where we really put the Splunk that Phonto to the stretch and are using even IOT data like vegan shots, sensors, or locomotive data to create very fancy, you know, the use cases. So that, that's just an example how the deep industry expertise of Accentia and the blank technology expertise can work together. So the second part, maybe just to mention that is that Accenture in the partnership is developing industrialized solutions and that is, uh, needing to Accentia IP, which very rapidly can serve our customers in creating value and to transforming our clients on their journey. A great example is our supply chain of ring. We have developed a supply chain control tower, which has these days, obviously with the pandemic situation and the supply chain issues, uh, impacting our economic, uh, return. Uh, recovery is a very specific and very strong case. You can really use Splunk as a real time supply chain tour, and that's kind of the industrialized vertical solutions, which we also, uh, did in our partnership at last. Let me comment on that one, the kind of service pillar is really around cloud. So we are focusing heavily on the cloud business. As we see Splunk also an enabler of the cloud journey for our clients >>And both Splunk and Accenture on their own, uh, digital transformation Splunk going to some subscription only back in 2019, Accenture beginning, it's a cloud transformation, 2015. Talk to me about the cloud first initiative. You launched this about a year ago. So during a very challenging time, talk to me about the objectives of the cloud first initiative, how you're working together with Splunk and what some of the value is in it for the customers. >>So Accenture really sings clouds. You see it that we did a very aggressive transformation. The shift we even changed our organization, organizational structure, how we serve our customers within our cloud service to approach. So we combine our expertise from our strategy and consulting experts with implementation and delivery expertise, to have the full end, to end perspective on what we need to transform and transition our clients into the cloud journey. Um, and we are heavily investing into the cloud markets. Uh, we are doing research, uh, in the market to understand also the client needs and the market developments. For example, we recently launched a European, uh, study called cloud continuum where we interviewed more than 4,000 executives around the globe on what are the key priorities along their cloud journey? What is it really that makes it unique and differentiated? Uh, and we see what are the driving factors in the cloud market in Europe, it's a bit special as compared to the us, uh, the key priority driver of our clients moving into the cloud is cost competitive toughness. So they are really moving into the cloud to save costs. The cost play only the second, uh, kind of the answer was like 38% of respondents has been elaborating around increasing customer value. And here you see already the difference between Europe and us, uh, it's, it's much, much lagging behind in terms of understanding the data in your cloud to create new business opportunities and new business value for your customers, which, uh, which is typically, uh, an opportunity, but also challenge >>One of the challenges that organizations often face regardless of where they are in the world is looking at cloud from a price point perspective rather than a transformational journey perspective. But it sounds like you've actually seen the opposite with this survey that you mentioned. >>Yeah. I mean, that's, that's a fair point. So as set, uh, in, in Europe, we are having many clients and customers focusing on the cost competitiveness, but that typically just one key challenge. Uh, another challenge, especially in Europe is around complexity of our data regulation of trust and compliance. So that very often leads to, again, silos in the cloud architecture. So typically something you would want to overcome with the cloud journey and again, in a kind of siloed infrastructure. So we are having, we have seen that more than 60% of our customers have stirred parts of that data and on-premise data stores. They have kind of hybrid cloud environments. We have more than 48% of our customers in kind of a cloud environment. So you will see that the cloud journey again is a very complex task complex journey, and you are ending up very often in a new silos and he explained comes into play because blank can enable you to have the end to end perspective across your full stack, including a multi and hybrid cloud environment. And that's why the reason why we are looking for a strong interlock of our Splunk business into our cloud first approach to really bring that value into our cloud journey of our customers. >>So the, the complexity is, has been increasing. You mentioned a very high percentage of customers in that hybrid multi-cloud environment. How do you Accenture in Splunk, how does this cloud first initiative help address the complexities that cloud that a multi-cloud environment brings and unlock the opportunities in all of this data? >>Yeah, I mean, there's different ways to see that in my perspective, the cloud transformation, the cloud journey always requires a smart data cloud strategy as a core tool. I call it the core to win because without the cloud data strategy, you are losing really the benefit of the cloud journey in terms of the full value potential of your data. Um, I do see like an evolutionary path of the cloud transformation. First of all, is bringing and transitioning our clients into the cloud. And Splunk would be at the first milestone, the end to end perspective of having the cloud transplant, the cloud ops of ability and club monitoring capability. So it's combining the end-to-end picture and mighty cloud hybrid cloud environment in a single pane of glass, which is really unique from a technology perspective. But in the second step, it could even go further and talking about machine learning technologies about AI and bringing that to the next level on that evolutionary path. >>That's what we typically call AI ops. And that again makes a difference in terms of automation, in terms of efficiencies, in terms of prediction capabilities, which is a huge advantage and value potential for our clients. And the third step is coming back a bit to your point in terms of leaving the data value, uh, in the cloud. So if you are getting more and more advanced, you have so much data in your cloud that you could even use it for new business models for new customer service use cases. Uh, and that's kind of the kind of evolutionary past what I call the data to everything cloud, which is very similar to where Splunk is positioning and using all that data and to end for really bringing value and additional value, add to your customers. There's a >>Tremendous amount of value in that data. If it can be analyzed the value unlocked and analyzed and acted on in real time so that organizations can make business decisions on products and services. And obviously from a competitive differentiation perspective, there's a tremendous amount, a tremendous amount of value. And unlocking that data. What are you seeing in the last, in the last year, since there's been so much acceleration where the customers are coming to you saying Accenture Splunk, help us figure out how to migrate to the cloud. We've got to go quickly, we've got these competitive pressures, we've got a very dynamic world market. What's that pathway like? >>Yeah, it's a very interesting time. So typically you see this cloud transformation journeys as a journey of several years. And in the pandemic situation, you have seen that a couple of months for some of our clients, because it's really important to survive in this very disruptive economic situations. So obviously you start first with, uh, getting the basics done with kind of getting the migration done, getting the migration to the cloud and uplifting our client's technology to the next. So the new kind of cloud paradigm, but, uh, assets that kind of next evolutionary path would be increased. Automation would be increased usage of all the cloud data for additional value add and additional business models. Our client use cases. So that's kind of the starting discussion always is how to bring it to the cloud and how to create that flexibility. That also that grows flexibility in terms of being more resilient, being more agile as a customer, but a Splunk can do much, much more. And that's the story we want to, and we want to explain to the market that the basic steps are the right ones and Splunk is getting you there, especially in multi hybrid thought environments. But the very next step is really untapping. The value. >>A lot of organizations have been challenged culturally in the last year and a half with suddenly this distribution of the workforce. And now here we are still in a distributed environment, maybe getting towards a hybrid model, but cultural change is challenging for organizations in any industry where is cultural change as a part of the pathway that Accenture and Splunk help customers to create >>Absolutely spot on sex dealer for the question. And going back to the research research I was talking earlier on, we have also seen that 46% of our clients are really challenged by the complexity of the transition it's complexity of their business, of their business processes, but also the complexity of the operational change. And that really is a major pitfall and th and the major challenge for us. It's not only a technological challenge, but also it's a change and kind of transition management where we also have specified specialized ones items for an hour at, you know, practice our terms and, and change our practice, which are supporting our clients along that transition journey from a cultural perspective, because I mean, you can change your, your it infrastructure. You can create a new architecture in the cloud, but it's really about getting the business into the next level of understanding these complex data situations and processes and leveraging the value of the cloud. So that's a huge business change as well. >>It is a huge business change, which is challenging for a lot of folks again, given the distributed nature with which in which we are still working. Talk to me about an example of a, of a successful customer that, uh, Accenture and Splunk have worked with in the last year. Who's really embraced the cloud first initiative and is transforming their organizations to not only survive these challenging times, but to thrive as well. >>Yeah, one of my favorite examples is a leading hotel chain. Obviously the hotel industry has been heavily impacted by COVID. Uh, so, uh, there was a need to change to a need to get more resilient, more agile and more flexible. You think the cloud transformation story also, again, as a cost transformation play, but also changing the way the business is working. So we started with a typical cloud transformation journey. Uh, we evolved it towards what we, what we call the AI ops scenario in terms of really using machine learning technologies and AI, to get more prediction, more automation, more efficiencies. So we could even reduce, uh, the operational cost by more than 5%, which is a huge baseline and leading a global companies, uh, which frees up a lot of money, which you can then reinvest for kind of new, smarter business use cases in addressing your clients and understanding your clients and ultimately generating new value for your clients. So that's a very nice example of how you could start with an it transformation journey, changing into the cloud architecture, using AI ops, to freeing up resources for new addresses for kind of new addressable cut customer use cases and business benefits. >>What's the go to market like working customers go to learn more and get started. Are they starting with Accenture? And they starting with Splunk? Can I do both? >>We have a very collaborative partnership with Splunk. We have a strong partnership team as we speak. We have more like more than 4,000 people working on Splunk projects globally. So it's a very strong capability. Um, you can reach out to Accentia and, uh, you can reach out to Splunk. It's kind of a collaborator strategic go-to-market approach nursing. That's also a bit the advantage of the Splunk Accenture partnership that we are very closely, very collaboratively going to the market. Yes, exemptions bringing IP and assets, empty industrialized delivery methodology. We are able to really scale up globally across the market and Splunk is bringing their technology and the expertise. I think it's a winning combination >>And winning complication and not collaboration is certainly critical to enable that. Brian last question would be, as we approach the end of calendar year 2021, what are some of the things on the horizon for the cloud first initiative that you're excited about as we enter 2022, >>I think it's really getting traction. Now. We have seen a lot of our clients going into the cloud, but asset, from my perspective, it's just the start of the journey. So once you get that kind of, uh, interesting milestone start, you can create the automation efficiencies. You can create the data value and use the data very for new CRM scenarios, new years use cases. And that's where it really gets interesting and fun and innovative in getting all these data across your company and understanding and being creative, how you can use that to benefit your customer and to bring that customer experience to the next level. And that's what I'm looking really forward to coming from the it transformation, the cloud transformation journey to the customer experience and to improving the customer perspective. >>Improving the customer perspective is key. As, as the customer experience, we're all customers in our daily lives and our personal lives and our business lives. And we have this expectation that any organization we're dealing with is going to be able to give us a stellar experience. Brian, thank you for joining me on the cube today, sharing the latest and greatest and the Splunk Accenture partnership, the value that you're delivering for customers and some of the things that you're excited about as we go forward. We appreciate your time. >>Thanks for >>Having me. My pleasure for Brian Berg. I'm Lisa Martin. You're watching the cubes coverage of splunk.com 21.

Published Date : Oct 20 2021

SUMMARY :

Brian Berg joins me next director at Accenture leading the EMEA Splunk partnership. and the Splunk technology, which is really capable to have an end to end platform of the industrialized vertical solutions, which we also, uh, did in our partnership is in it for the customers. are the driving factors in the cloud market in Europe, it's a bit special as compared to the us, One of the challenges that organizations often face regardless of where they are of our Splunk business into our cloud first approach to really bring that value into our help address the complexities that cloud that a multi-cloud environment brings of the full value potential of your data. Uh, and that's kind of the kind of evolutionary past what I call the data If it can be analyzed the value unlocked and And in the pandemic situation, you have seen that a couple A lot of organizations have been challenged culturally in the last year and a half with suddenly And that really is a major pitfall and th and the major challenge Who's really embraced the cloud first initiative and is transforming their organizations So that's a very nice example of how you could start with an it transformation journey, What's the go to market like working customers go to learn more and get started. That's also a bit the advantage of the Splunk Accenture partnership that we are very And winning complication and not collaboration is certainly critical to enable that. You can create the data value and use partnership, the value that you're delivering for customers and some of the things that you're excited about as we go of splunk.com 21.

SENTIMENT ANALYSIS :

ENTITIES

EntityCategoryConfidence
Lisa MartinPERSON

0.99+

Brian BergPERSON

0.99+

BrianPERSON

0.99+

SplunkORGANIZATION

0.99+

EuropeLOCATION

0.99+

AccentureORGANIZATION

0.99+

2019DATE

0.99+

GermanyLOCATION

0.99+

AccentiaORGANIZATION

0.99+

third stepQUANTITY

0.99+

2015DATE

0.99+

38%QUANTITY

0.99+

second stepQUANTITY

0.99+

second partQUANTITY

0.99+

46%QUANTITY

0.99+

2022DATE

0.99+

more than 4,000 executivesQUANTITY

0.99+

Martin Brian BergPERSON

0.99+

first initiativeQUANTITY

0.99+

more than 60%QUANTITY

0.99+

bothQUANTITY

0.99+

first milestoneQUANTITY

0.99+

todayDATE

0.99+

first componentQUANTITY

0.99+

more than 4,000 peopleQUANTITY

0.99+

more than 5%QUANTITY

0.99+

first initiativeQUANTITY

0.99+

more than 48%QUANTITY

0.99+

last yearDATE

0.98+

Accenture SplunkORGANIZATION

0.98+

FirstQUANTITY

0.98+

secondQUANTITY

0.98+

splunk.comOTHER

0.98+

oneQUANTITY

0.98+

pandemicEVENT

0.97+

OneQUANTITY

0.97+

first approachQUANTITY

0.97+

one key challengeQUANTITY

0.95+

Splunk AccentureORGANIZATION

0.94+

end of calendar year 2021DATE

0.94+

Accentia IPORGANIZATION

0.94+

single paneQUANTITY

0.89+

EMEAORGANIZATION

0.88+

couple of years agoDATE

0.87+

firstQUANTITY

0.86+

three core componentsQUANTITY

0.84+

a year agoDATE

0.83+

about five yearsQUANTITY

0.82+

pandemic situationEVENT

0.82+

PhontoORGANIZATION

0.79+

last year and a halfDATE

0.79+

more thanDATE

0.78+

SplunkOTHER

0.78+

last five yearsDATE

0.74+

five years agoDATE

0.73+

EuropeanOTHER

0.72+

Teresa Carlson, Splunk | Splunk .conf21


 

>>Hi, everyone. Welcome back to the cubes coverage of splunk.com, virtual 2021. I'm John Ford, your host of the cube. We're here with Teresa Carlson, special guests cube alumni. Who's now the president and chief growth officer of Splunk. Teresa, welcome back to the queue. >>So glad you're here with us >>As the president of Splunk. Great to see you. Great to see you. So we've had many conversations in the queue. When you were the chief of public sector of Amazon web services, you grew that business significantly over the years. We've documented on the cube and we've talked about I've written about it. Um, now Splunk, it feels a lot like AWS was back in LA a couple of years ago, where you have this amazing product everyone's using. They don't lose customers. They're getting customers they're in the middle of the security thing, which you know a lot about, and they have this large enterprise base growing. It's just a minute. Grazer leaning in Splunk is, seems to be going to the next level. >>Totally. Well, you nailed it. I would say we're definitely in a scale mode at this point at Splunk. And also to your point, our customers are so loyal to us and we're seeing actually customers with more than a million dollars doubling their spend almost with us. Uh, it's pretty cool. And now we have this cloud portfolio, which is one of my jobs, as you know, I love, I've got my cloud shirt on. I've been believer in cloud. I'm a real believer. You know, I saw the transformational effects of cloud in real time, over 11 years and bringing that here even more to utilize that in our security and observability spaces is quite phenomenal. And then you see again in a much more, uh, set of segmented workloads, how customers take advantage of this. And of course today, like no other John security is just top of mind. It's always been you and I talked earlier about how security kind of evolved over the years and public sector led some of that over time. And then commercial industry say, you know, wow, that today it's, I mean, it's more than top of mind for not just every enterprise organization and government entity, but it's also every board out there. It's something that we think about internal threat, external threat. How do we manage it? How do we get the data around it to understand it? And then how do we take action on it? >>I seen you up on stage as a senior leader here at Splunk, um, at the virtual venue at a great keynote was a lot of news. And we'll get into that in a second, but I want to ask you, knowing you personally and covering you over the years of Amazon web services, you've been a fierce competitor. Okay. But you also have been a great people, person, people loved working for you, Splunk, is it the same? We've been covering them just as long as we cover an ADFS. The culture seemed to fit because Splunk is kind of competitive, but they're kind of quiet, competitive culture. Yeah. Interesting. Tell us about, tell us about your experience. >>Well, and I think we can, yeah, we can do it in our own Spanky way. I'm learning new it's six minutes today that I've been as blind quiches and believable that I've been here this long already, but, uh, Splunk has a very quirky culture, which I led. They have a lot of fan. They have a big following and I'm so sorry that everyone couldn't attend in person, but the virtual social media feeds are off the charts. I mean, I'm just, I'm having so much fencing high already. They come together. It's a real community, but, uh, yeah, on the competition front, here's what reminds me so much about my old world is that I always love that when somebody wakes up and realizes that it's a huge industry and they want to participate. And that's kind of what happened when I was at AWS and now it's blank. >>I'm like, Hey, all these companies are waking up and saying, data's this real thing. It's like a $90 billion plus industry and growing, and then data with security. Hello, are you kidding me? So I feel like really that's kind of what's happened. And Splunk has such a unique set of tools and solutions that just work, they work. And that's what customers, I have heard that statement from customers and partners so much that it just works. And the other thing that's pretty unique about us, I would say John is our ability to navigate between an on-prem world and a cloud world in a unique set of areas like IOT, edge computing. So wherever customer's data is multiple clouds, we're able to take advantage of that for the customer. So they make the choice of where that data comes from and they use the splint tooling then to be able to get those insights and information >>Well, great to have you on the Cuban grid, that's swung to have you, and they're going to be lucky to have you going to do a lot stuff, knowing you and knowing the Splunk community and the team here. A great team. Now talking about the announcements, look at what's going on. Obviously security is still in everything. Yep. A couple of things, rebranding of the partner versus sends a huge message of the ecosystem. You know, that movie you've seen that movie before, um, digital journey for customer success. Again, they have tons of customers that have been with them from beginning and new customers, but they've got to go government action going on here. Whereas you know, a lot about the government logging in monetization program. >>Yeah. Well, as you know, the government, uh, you got 11, but they do continually come up with N fended mandates. And my government customers always have said, oh my gosh, I've got another unfunded mandate. So we're really helping them at that because yes, while it's infested in this budget this year, as it states, they know how important it is. And I do think this initiative is something that is going to have a waterfall effect into the commercial industries. Also just like a lot of these things do and around security, uh, but it's important that we help our government customer made as best as they can. So we've come up with, I think, a very unique offering that they can take advantage of for Splunk and we're going to be out there helping them every way. And, and hopefully John L also helped them learn more about cross governmental, what they're doing and how they can understand from their logs and metrics even more about how to protect. Yes. >>One of the things that we've talked about before in the past, but how cloud-scale, and as creates ecosystems, Amazon VMware, you seeing all these ecosystems that have been thriving for, for decades, Splunk has an ecosystem developing very, very fast. Their partners are, are loyal and they're making money with them. And they're being delivered solutions as data becomes the new enablement. How do you see the role of the partners that growing? How do you see them evolving over time? >>Well, let me just tell you, I'm, I'm a real believer in the partner community. I mean, firsthand over the years, my time at Microsoft at AWS, I saw it as an unbelievable force multiplier to your business. And I mean that, and they do things that you don't even think of. I, you know, I'm always amazed at partners. I'm like, oh, you're using the tool for that. Wow. So while we are broadly good, we're, we're very good at what we do, but we cannot understand every horizontal or vertical industry out there. And the reason it's important to have partners, they can take you to places that you never dreamed. And for us, if you look at the categories, we need our CSP or cloud service providers to be able to really help us make sure that we take advantage of the cloud platforms that are out there and our primary, we AWS, and then Google cloud. >>Uh, and then after that we work, we work with both those a migration. You saw Steve Schmidt today. Good friend of mine love Steve. And the work we're doing. And you saw, we were one of the first migration partners with AWS. You'll see us continue that program. We'll work together to continue to look for security services jointly that we can offer. And we're a customer of theirs. They're a customer of ours. It makes a good partnership. And then additionally, you have, uh, you have your MSPs, right? Your managed service providers. And today we talked about blue buoyant who had multiples, and these are partners out there that have a unique offering for me, generally managed security or observability in the marketplace. They take the Splunk toolkit, they add to it and they have it off, offered out to their customers. Um, and then you have your largest size like Accenture. I'm so excited about that. First of all, led Julie Sweet. She's an amazing CEO and leader. Uh, and w in what they're doing with this, they've been a long-standing partner of ours, but now they've actually made us part of their, one of their 11 business groups. So it's Accenture plus Splunk, and now they'll take us into all of their industries together. So it's huge. And, you know, >>Does that mean cause, cause this is a business deal. This isn't just like a, you know, some sort of deal where you guys saying we're going together. This is a specific division. >>That's right. That's right. So they have a leaven partners that they work with. AWS is one of them. SAP's one of them. Uh, IBM's one of them, Salesforce, I believe is one of them. And they have, they have experts at Accenture that can go into customers to implement tools and services for customers at the enterprise level. And so they have selected. Splunk is one of those business partners that you heard Paul today talk about. We already have 400 customers together and growing, we will expand that, but it's a joint effort of both go-to-market selling and technical resources that will deliver. But for Splunk, again, it's back to that horizontal and vertical slicing where they can take us into security practice that they have chosen. Splunk is one of their security offerings and it's important that we really support them. But also in the splint, a partner verse, we're going to do some new things. >>John, if I just first take and talk about it, we've had a great partner program, but now we're going to Korea's credits, uh, technology, architecture, tooling support, uh, getting in, you know, to certify themselves, to be pro serve ready for those migrations and modernizations. But also really what we heard from a lot of them is they need more training and education remaster to understand our new cloud offerings. And that makes sense. So it's more digital and more cloud oriented with these partners. And then guess what they would love for us to talk about how great they are and we should. So when we get them out there that helps our customers really understand the offerings they have in the marketplace >>At Brooke honeymoon was saying she didn't do a lot more listening and they're working on this next level partner verse. I found that really interesting, all sorts of Katie beyond key. I talked with she's the SVP of customer success, something you're I know you're obsessed about. You always work backwards from the customers as the AWS way. How do you view customer stuff? Because you have a lot of different customers, you have diverse customers. What's important. What are you going to keep Katie's on top of this, but what's your view. >>We ha we do have a lot of different customers. However, we have a concentration of the largest, most important and influential customers in the world. So our customer base is very large enterprise oriented, multiple departments within that enterprise take advantage of Splunk. We work with 90 to the 100 fortune 100 companies, and we've worked with them for a long time. And like I said, we're continuing to see them use more of splice, not less as blank. And the way that that happens is, and I hear from him, I sit and talk to him and they're like, now we're using Splunk in these multiple departments and we need to bring it all together at the enterprise level for the C-suite to look at it. Now, I know it sounds a little strange John, but that's changed a bit over the years. And that is because, you know, if you look at big spenders at an enterprise, he spends a lot of money because they need to at dev, you know, uh, security, right. Security infrastructure, and they need to monitor all that. They need to understand it, but guess what they want, understand it now at the corporate level. And they need it at the CIO, they need at the Cisco level for threat analysis. And then now boards want more and more that information they want to roll up of what's happening. So we're seeing a trend where the C-suite, the senior executives really are much more interested in Splunk. It used to be very departmental. >>I'll throw another wrench in the equation. There is one developers want shifting left. They want real time data security policy in the development, CDC at pipelining. So another problem. Yeah. >>Yeah. And developers lever tools. And again, they're, they're another unique group I should totally talk about. That takes your tools to another level and really fears that ways within their customer set to take advantage of the tooling. >>He's a great to see you. Congratulations on a new opportunity here. And the leadership at Splunk, um, really perfectly poised to take the growth of the cloud. That's. So I have to ask you, what's your mission? What's your mission for the next year as you come on? You're six months in what's the, >>Well, for us, here's blankets, continuing to scale, really listening to our customers and partners. It sounds, I don't want it to sound like a cliche. We really are spending time listening and working back, Sean and I are working. He's their president of technology products and technology. He and I are working very closely to look at features and functionality that we need to be talking about. Uh, it is about taking advantage of the partner community in a way to support them, to help again, get us into new areas of the business. And then lastly, continue to make sure that we have the training and education for customers directly because our tools and technologies are evolving. And if I've learned anything over the last 11 years is cloud is a step change for a lot of customers and they're still hybrid. So it's important that we meet them where they are, but help them get over that bridge so that they have that full digital journey. So that's what you're going to see me focused on. I'm super excited. >>I was talking with Claire, the CMO just before you leave, I want to get your reaction. This event went virtual the last minute. It became a studio here in Silicon valley. You're a media company now Splunk. Yeah. >>It's like it. I mean, it is amazing what we accomplished today. Uh, I, you know, I don't want to pre give numbers, but we had way, way over 20,000 today, online and, uh, growing. So the numbers we're still looking at, but it was unbelievable. And we had, I think we had had like 22,000 registered and we even got more. So people joined in, they stay, they watched the keynote, there were out narrow specialty sessions. And I all agree, like it was pretty cool. It was a step change because we were thinking about doing it in person. We took a pulse and we said, you know, we think we can actually do a better job this year because of COVID steel. If we do it all virtually and it turned out and we have you, so look at this, you're like, we have you here. And I love your cool backdrop here, John. Yeah. >>Well, you guys do a great job. You guys are a media company. Now you're telling your own stories direct. There's a lot of stories to tell. Thank you for coming on the cube. Great to see you >>Again. John's great to see you because the >>Cubes coverage here at.com 2021 virtual I'm John for your host of the cube. Thanks for watching.

Published Date : Oct 19 2021

SUMMARY :

Who's now the president in the middle of the security thing, which you know a lot about, and they have this large enterprise base growing. And then commercial industry say, you know, wow, that today it's, I seen you up on stage as a senior leader here at Splunk, um, at the virtual venue at a great keynote was a lot of news. And that's kind of what happened when I was at AWS and now it's blank. And the other thing that's pretty unique about us, I would say John is Well, great to have you on the Cuban grid, that's swung to have you, and they're going to be lucky to have you going to do a lot stuff, And I do think this initiative is something that is How do you see the role of the partners that And the reason it's important to have partners, they can take you to places that you And then additionally, you have, This isn't just like a, you know, some sort of deal where you guys saying we're And so they have selected. And then guess what they would What are you going to keep Katie's on top of this, but what's your view. And that is because, you know, if you look at big spenders security policy in the development, CDC at pipelining. And again, they're, they're another unique group I should totally talk So I have to ask you, what's your mission? And then lastly, continue to make I was talking with Claire, the CMO just before you leave, I want to get your reaction. We took a pulse and we said, you know, we think we can actually do Great to see you John's great to see you because the Cubes coverage here at.com 2021 virtual I'm John for your host of the cube.

SENTIMENT ANALYSIS :

ENTITIES

EntityCategoryConfidence
StevePERSON

0.99+

AWSORGANIZATION

0.99+

SeanPERSON

0.99+

John FordPERSON

0.99+

Teresa CarlsonPERSON

0.99+

ClairePERSON

0.99+

KatiePERSON

0.99+

Steve SchmidtPERSON

0.99+

LALOCATION

0.99+

TeresaPERSON

0.99+

JohnPERSON

0.99+

IBMORGANIZATION

0.99+

Julie SweetPERSON

0.99+

$90 billionQUANTITY

0.99+

AmazonORGANIZATION

0.99+

Silicon valleyLOCATION

0.99+

SplunkORGANIZATION

0.99+

MicrosoftORGANIZATION

0.99+

John LPERSON

0.99+

CiscoORGANIZATION

0.99+

400 customersQUANTITY

0.99+

PaulPERSON

0.99+

oneQUANTITY

0.99+

AccentureORGANIZATION

0.99+

11 business groupsQUANTITY

0.99+

six monthsQUANTITY

0.99+

six minutesQUANTITY

0.99+

SAPORGANIZATION

0.99+

next yearDATE

0.99+

todayDATE

0.99+

over 11 yearsQUANTITY

0.99+

bothQUANTITY

0.98+

11QUANTITY

0.98+

more than a million dollarsQUANTITY

0.98+

firstQUANTITY

0.97+

at.comOTHER

0.97+

this yearDATE

0.97+

SalesforceORGANIZATION

0.97+

22,000QUANTITY

0.96+

OneQUANTITY

0.95+

FirstQUANTITY

0.93+

Splunk .conf21OTHER

0.92+

KoreaLOCATION

0.92+

2021DATE

0.9+

one developersQUANTITY

0.89+

100 fortuneORGANIZATION

0.88+

over 20,000QUANTITY

0.86+

couple of years agoDATE

0.83+

splunk.comOTHER

0.83+

COVIDOTHER

0.8+

Brooke Cunningham, Splunk | Splunk .conf21


 

>>Hello. Welcome back to the cubes coverage of splunk.com virtual this year. I'm John ferry, host of the cube. And one of the great reasons of great reasons of being on site with the team here is we have to bring remote guests in real guests from all no stories, too small. We bring people into the cube to have the right conversations. We've got Brooke Cunningham area, VP of global partner marketing experience. Brooke, welcome to the cube. Thanks for coming on. >>Hey, thank you, John. This is my sixth dot conflict, but this is actually my first time being on the cube. So I'm delighted. >>Great to have you on these new hybrid events. We can bring people in. You don't have to be here. All the execs are here, the partners are here. Great news is happening all around the world. You guys just announced a new partner program for the cloud called partner verse program. This is kind of, you know, mostly partner news is okay. Okay. Partner news partner ecosystem. But I think this is an important story because Splunk is kind of going to the next level of scale. That's to me is my observations walking away from the keynote, a lot of the partners, great technology, great platform, a lot of growth with cloud. We had formula one on you guys have a growing ecosystem. What is the new announcement partner versus about? >>Yes. Thanks, John. And you are spot on. We are growing for scale and Splunk's partner ecosystem is 2200 strong and we were so delighted to have so much partner success highlighted today on the keynotes. And specifically we have announced an all new spunk Splunk partner program called the Splunk partner verse. So we're taking it to new frontiers for our partners, really built for the cloud to help our partners lean into those cloud transformations with their customer. >>Great. Fro can you walk me through some of the numbers inside the numbers for a second? How many partners do you have and what is this program about specifically? >>Yeah, so 2200 partners that we featured some amazing stories in the keynotes today, around some of the momentum we have with partners like AWS, a center blue buoyant, a partner that just recently rearchitected all of their managed services from Splunk enterprise to Splunk cloud, because as they put it, Splunk is the only solution that can truly offer that hybrid solution for their customers. So all new goodness for our partners to help them lean in, to get enabled around all of the Splunk products, as well as to differentiate, differentiate their offerings with a new badging system. And we're going to help our partners really take that to the market by extending and expanding our marketing and creating an all new solutions catalog for our partners to differentiate themselves to their customers. >>You mentioned a couple things I want to double down on this badging thing, get in some of the nuances, but I want to just point out that, you know, and get your reaction to this when you see growth. And I saw this early on with AWS early on, when they performing, when you start to see the ecosystem grow like this, you start to see more enablement. You see more, money-making going on more, more, um, custom solutions, more agility you. So you started to see these things develop around you guys. So what does all this badging mean? How what's in it for me as a partner? Like how do I win on this? >>Yeah, great question. So first of all, John partner listening is a big part of what we do here at Splunk. And it's specifically a major part of what I do in my role. So we create a lot of forums to get that real deal partner feedback. What do they need to be successful with their customers? Especially as Splunk continues to expand our portfolio. And we heard some really clear feedback from our partners. Number one, they need more enablement faster, especially all those new products. They really want to get enabled around new product areas like observability, their customers are asking for it. They secondly told us that being able to differentiate themselves to customers was key. And that showing that they had core expertise around specific solution areas, types of services, as well as specializations. For example, some of our partners that are authorized learning partners, they really want it to be able to showcase these skills and differentiate that to their customers in the market. And it's not a role for us at Splunk to really help them do that. And so we took that feedback and really incorporated it into this new program, badging specifically will help to address some of those things I mentioned. So for example, a lot of badging around those use case areas, security, observability, AOD migrations, as well as specializations. Like I mentioned, for things like, uh, partners that are doing, uh, learning specific partners that are really helping us extend our reach in, in different international markets and so on. >>Okay. Let me just ask a question on the badge if you don't mind. Um, so you mentioned, you mentioned almost like you were going through like verticals is badging to be much more about discovery from a client customer, uh, end user customer standpoint. Are you looking to create kind of much more categorical differentiation is what's the, what, what's the purpose of the badge? Cause I noticed it was like different verticals. I heard security and >>Yeah, so I would say it's think of it as both. So for example, our partners go to market with us in many different ways. Some of them are selling servicing building. So there'll be partner motion badges to really differentiate the different ways that they're supporting customers from a go-to-market approach and then additional badging to help really identify some of those specialization areas around whether that's clunky use cases, specializations and more, uh, for example, a specific badge that we're rolling out right here at.com is around cloud migrations and partners will be able to get started to get engaged on that badge in preparation for our full-scale launch in February, we'll, they'll start to be able to take advantage of learning pathways, get their teams skilled up, and that will then unlock some new incentives as well as, uh, benefits that they can take advantage of things like accessing or of the Splunk's I've experience and the proof of concept platform and really giving their teams more, uh, capability. And, >>You know, I such a recent cross in the hallway here at dot confidence. She was, she and I were talking about how AI and data is enabling a lot of people to create these solutions. So, you know, you got kind of this almost like Amazon web services dynamic, where it's growing really fast and we're hearing stories, how data is driving value. We had formula one on the cube, the keynotes were giving some examples as you start to see this momentum kind of scaling up to the next level, if you're enabling customers, which you are with data, the monetization or the economic shifts, right? So it's healthy ecosystems, the partners create solutions, they deal with the customer, they're making some money, right? So, so can you share your vision on the unit on the economic equation of how partners are tapping into this? Because I almost imagine, um, a thousand flowers are blooming and then you start to see more value being created and Splunk also gets a cut of it, but there's, there should be that kind of deck. And you can talk about that. >>Yeah, absolutely. In fact, one of the things that I have the opportunity to do with our partners is study our partners, success and profitability. And some of the things that we learned from those studies with our partners is that what's really helping our partners to grow their practices with Blanca and their profitability with that business is really the stickiness that they have with their customers, being able to deliver solutions and services and really be those subject matter experts for their customers. And we know that our most successful and profitable partners are servicing their customers across the Splunk cases. So for example, many of our partners came from a security background and they are super deep, super knowledgeable around security, and they are trusted by their customers as the, you know, subject matter experts around security. And so many of them are starting to lean in on some of the new, additional use cases. Observability is a hot topic with our partners right now it's a new and emerging use cases case for them to transition some of the same sets of data that they are addressing in their current appointments with our customers and bring new value with those new use cases. But that's where we're seeing partner profitability growth. >>I love the channel dynamic. There we go, indirect and real and value creation. I got to ask you about the day-to-day dynamic. Of course we all know about the mark injuries and story. Software's eating the world, okay. Software ate the world. Okay. Now that's done. Now we're data is continuing to drive the value proposition. And so that's going to have an impact on how customer your partners serve their customers, ultimately your customer at the end of the day. How, how is that happening? And from a success standpoint, how would you talk to, uh, where people are on the progress of bringing the most innovative solutions? What, where's the headroom, where do you see that going Brook >>There's? I would say there's just endless opportunity here. And we just see so much innovation in our partner ecosystem to create purpose built solutions for their customers business problems. And that's where I think the value of the data comes to life. Really turning that data into doing as is really the Matic for all the things that we're talking about here, uh, at.com 21, that our partners really see these opportunities and then can replicate some of those same solutions for other customers in the same spaces. So for example, you know, really specialized solutions for healthcare where they're, uh, providing, you know, access to all the data across the hospital, or, um, you heard in guard's keynote about unlocking the value of SAP data. This is just a huge opportunity accessing all that data and really turning that data into doing. And we'll be talking even more about the new SAP relationship and the value for the partner ecosystem to go address those FP data sets in their customers. We'll be talking more about that on our partner feature session, which is tomorrow in day two of dotcom. >>Well, you guys to have a nice mix of business in the partner ecosystem from, you know, small boutiques to high-end system integrators and everything in between, I noticed you're doing a lot with censure. Could you talk about how you guys are partnering with the large global system integrators because they're becoming their own clouds. So, you know, as Jerry Chen at Greylock says, are these castles being built in the cloud with real competitive advantage with data? Again, this is a new phenomenon in the past really two years, you're starting to see explosion of, of scale and refactoring business models with data. What's your, what's your reaction to that? >>Absolutely. In fact, we are really leading in with some of these global systems integrators, and you've heard this exciting news in Theresa Carlson's portion of the keynote earlier today, where we've announced a partner, a center partner business group together. And we're so excited about the center and Splunk partner business group. It's going to elevate the Splunk and essential partnership eCenter has invested in thousands and thousands of joint professionals that are skilled up on flunk. They are building a purpose patients. We have so many amazing examples where Splunk and essential work together to solve real life problems. For example, there's a joint solution that helps address anti-human trafficking. Uh, there's a joint solution that helped with vaccine tracking. I mean, just really powerful examples that are just really extending value to customers and solving real life, data problems. >>Well, you guys have a lot of momentum, bro. Congratulations on the success and partner versus we're going to follow it again. It was built for the cloud. I know it's in the headline. It says flunked launches, new partner program for the cloud. Was there a partner program for the on premises and what's different about on the cloud? Was it kind of new, everything is cloud what's that? What does that mean? That statement? Yeah, >>Absolutely. So we, you know, as we've all seen, customers are leaning into the class that growth to the movement, to the cloud, just accelerated during COVID. And so part of that feedback that I referenced earlier that we heard from our partners, they said, we need help. We need help moving faster. And so that's really the underpinning of the all-new Splunk partner vers program is to really that acceleration to skill up our partners and give them the tools to be successful. And so with that, we did want to rebrand and reinvigorate it to really signal this newness. And as it was mentioning earlier, when we were talking about the badges, it's really about making sure we're providing the partners the right enablement so that they can be ready and able to support their customers on this journey, to the cloud, as well as the access, the resources, the support and the marketing so that they can be successful and really featured their expertise and value in the market. >>Well, Brooke, I want to get one final question before we go. Cause I know you have a lot of experience in the partner ecosystems and over your career. And we just interviewed the formula one CEO, uh, Zach brown, and, and they've been very popular with the, with the Netflix series driving to survive. And I was joking with him driving value with data as channel partners and your partners look to the post pandemic survive and thrive trend that people are going through right now. What should they be thinking about when they look at partner versus, and how Splunk can help them drive an advantage, not only just survive, but to actually drive to an advantage. >>I, I just see this as an opportunity for partners that haven't already leaned into the cloud and helping their customers migrate to the cloud now is the time rapid five acceleration is just essential for organizations to reach their most critical missions and their outcomes. And this one partner versus program is a significant move forward for Splunk partners. And we want to pursue a massive market opportunity focused on the cloud with our partners, for our customers. So I just really encourage our partners to engage, participate and join us on this journey. >>Well, it's a lot of evidence to support this vision. Uh, with pandemic, we saw refab replatforming and refactoring the businesses in the cloud at speeds, that unprecedented deployments. So, uh, cloud can, can bring that scale and speed to the table. It's really incredible. So thank you very much for coming on the cube remotely. Thanks have you had, >>Thank you. This was a delight. Really appreciate the time, John and very excited to have my first opportunity to be a >>Okay. You're a cube alumni. We are here in the studios, Splunk studios for their virtual event here with all the top executives and partners bringing in guests remotely. It's a virtual event. So we'll be back in person. I'm Jennifer, the cube. Thanks for watching.

Published Date : Oct 19 2021

SUMMARY :

And one of the great reasons of great reasons of being on site with the team here the cube. Great to have you on these new hybrid events. And specifically we have announced an How many partners do you have and what is this program around some of the momentum we have with partners like AWS, a center blue buoyant, And I saw this early on with AWS early What do they need to be successful with their customers? is badging to be much more about discovery from a client customer, uh, end user customer standpoint. So for example, our partners go to market with We had formula one on the cube, the keynotes were giving some examples as you start to see this momentum In fact, one of the things that I have the opportunity to do with our partners is And so that's going to have an impact on how customer your partners serve their customers, doing as is really the Matic for all the things that we're talking about here, Well, you guys to have a nice mix of business in the partner ecosystem from, you know, small boutiques to high-end It's going to elevate the Splunk and essential partnership eCenter has invested Congratulations on the success and partner versus we're going to follow it again. the partners the right enablement so that they can be ready and able to support their customers on And I was joking with him driving value with data as channel partners And we want to pursue a massive market opportunity focused on the cloud with our Well, it's a lot of evidence to support this vision. to be a We are here in the studios, Splunk studios for their virtual event here

SENTIMENT ANALYSIS :

ENTITIES

EntityCategoryConfidence
JohnPERSON

0.99+

Brooke CunninghamPERSON

0.99+

BrookePERSON

0.99+

Jerry ChenPERSON

0.99+

JenniferPERSON

0.99+

FebruaryDATE

0.99+

Theresa CarlsonPERSON

0.99+

AWSORGANIZATION

0.99+

SplunkORGANIZATION

0.99+

thousandsQUANTITY

0.99+

AmazonORGANIZATION

0.99+

John ferryPERSON

0.99+

Zach brownPERSON

0.99+

2200 partnersQUANTITY

0.99+

NetflixORGANIZATION

0.99+

GreylockORGANIZATION

0.99+

bothQUANTITY

0.99+

tomorrowDATE

0.99+

first opportunityQUANTITY

0.98+

one final questionQUANTITY

0.98+

oneQUANTITY

0.98+

todayDATE

0.97+

first timeQUANTITY

0.97+

this yearDATE

0.95+

pandemicEVENT

0.94+

eCenterORGANIZATION

0.91+

dotcomORGANIZATION

0.91+

a thousand flowersQUANTITY

0.91+

BlancaORGANIZATION

0.9+

sixth dot conflictQUANTITY

0.9+

secondlyQUANTITY

0.89+

firstQUANTITY

0.87+

Splunk .conf21OTHER

0.83+

2200 strongQUANTITY

0.83+

one partnerQUANTITY

0.8+

SAPORGANIZATION

0.79+

day twoQUANTITY

0.7+

earlier todayDATE

0.69+

coupleQUANTITY

0.68+

formula oneQUANTITY

0.65+

joint professionalsQUANTITY

0.65+

splunk.comORGANIZATION

0.62+

at.comORGANIZATION

0.6+

dot confidenceORGANIZATION

0.59+

partner verse programOTHER

0.58+

twoDATE

0.56+

FroPERSON

0.54+

COVIDOTHER

0.53+

yearsQUANTITY

0.52+

SplunkPERSON

0.5+

secondQUANTITY

0.48+

21OTHER

0.42+

Teresa Carlson, Flexport | International Women's Day


 

(upbeat intro music) >> Hello everyone. Welcome to theCUBE's coverage of International Women's Day. I'm your host, John Furrier, here in Palo Alto, California. Got a special remote guest coming in. Teresa Carlson, President and Chief Commercial Officer at Flexport, theCUBE alumni, one of the first, let me go back to 2013, Teresa, former AWS. Great to see you. Thanks for coming on. >> Oh my gosh, almost 10 years. That is unbelievable. It's hard to believe so many years of theCUBE. I love it. >> It's been such a great honor to interview you and follow your career. You've had quite the impressive run, executive level woman in tech. You've done such an amazing job, not only in your career, but also helping other women. So I want to give you props to that before we get started. Thank you. >> Thank you, John. I, it's my, it's been my honor and privilege. >> Let's talk about Flexport. Tell us about your new role there and what it's all about. >> Well, I love it. I'm back working with another Amazonian, Dave Clark, who is our CEO of Flexport, and we are about 3,000 people strong globally in over 90 countries. We actually even have, we're represented in over 160 cities and with local governments and places around the world, which I think is super exciting. We have over 100 network partners and growing, and we are about empowering the global supply chain and trade and doing it in a very disruptive way with the use of platform technology that allows our customers to really have visibility and insight to what's going on. And it's a lot of fun. I'm learning new things, but there's a lot of technology in this as well, so I feel right at home. >> You quite have a knack from mastering growth, technology, and building out companies. So congratulations, and scaling them up too with the systems and processes. So I want to get into that. Let's get into your personal background. Then I want to get into the work you've done and are doing for empowering women in tech. What was your journey about, how did it all start? Like, I know you had a, you know, bumped into it, you went Microsoft, AWS. Take us through your career, how you got into tech, how it all happened. >> Well, I do like to give a shout out, John, to my roots and heritage, which was a speech and language pathologist. So I did start out in healthcare right out of, you know, university. I had an undergraduate and a master's degree. And I do tell everyone now, looking back at my career, I think it was super helpful for me because I learned a lot about human communication, and it has done me very well over the years to really try to understand what environments I'm in and what kind of individuals around the world culturally. So I'm really blessed that I had that opportunity to work in healthcare, and by the way, a shout out to all of our healthcare workers that has helped us get through almost three years of COVID and flu and neurovirus and everything else. So started out there and then kind of almost accidentally got into technology. My first small company I worked for was a company called Keyfile Corporation, which did workflow and document management out of Nashua, New Hampshire. And they were a Microsoft goal partner. And that is actually how I got into big tech world. We ran on exchange, for everybody who knows that term exchange, and we were a large small partner, but large in the world of exchange. And those were the days when you would, the late nineties, you would go and be in the same room with Bill Gates and Steve Ballmer. And I really fell in love with Microsoft back then. I thought to myself, wow, if I could work for a big tech company, I got to hear Bill on stage about saving, he would talk about saving the world. And guess what my next step was? I actually got a job at Microsoft, took a pay cut and a job downgrade. I tell this story all the time. Took like three downgrades in my role. I had been a SVP and went to a manager, and it's one of the best moves I ever made. And I shared that because I really didn't know the world of big tech, and I had to start from the ground up and relearn it. I did that, I just really loved that job. I was at Microsoft from 2000 to 2010, where I eventually ran all of the U.S. federal government business, which was a multi-billion dollar business. And then I had the great privilege of meeting an amazing man, Andy Jassy, who I thought was just unbelievable in his insights and knowledge and openness to understanding new markets. And we talked about government and how government needed the same great technology as every startup. And that led to me going to work for Andy in 2010 and starting up our worldwide public sector business. And I pinch myself some days because we went from two people, no offices, to the time I left we had over 10,000 people, billions in revenue, and 172 countries and had done really amazing work. I think changing the way public sector and government globally really thought about their use of technology and Cloud computing in general. And that kind of has been my career. You know, I was there till 2020, 21 and then did a small stint at Splunk, a small stint back at Microsoft doing a couple projects for Microsoft with CEO, Satya Nadella, who is also an another amazing CEO and leader. And then Dave called me, and I'm at Flexport, so I couldn't be more honored, John. I've just had such an amazing career working with amazing individuals. >> Yeah, I got to say the Amazon One well-documented, certainly by theCUBE and our coverage. We watched you rise and scale that thing. And like I said at a time, this will when we look back as a historic run because of the build out. I mean as a zero to massive billions at a historic time where government was transforming, I would say Microsoft had a good run there with Fed, but it was already established stuff. Federal business was like, you know, blocking and tackling. The Amazon was pure build out. So I have to ask you, what was your big learnings? Because one, you're a Seattle big tech company kind of entrepreneurial in the sense of you got, here's some working capital seed finance and go build that thing, and you're in DC and you're a woman. What did you learn? >> I learned that you really have to have a lot of grit. You, my mom and dad, these are kind of more southern roots words, but stick with itness, you know. you can't give up and no's not in your vocabulary. I found no is just another way to get to yes. That you have to figure out what are all the questions people are going to ask you. I learned to be very patient, and I think one of the things John, for us was our secret sauce was we said to ourselves, if we're going to do something super transformative and truly disruptive, like Cloud computing, which the government really had not utilized, we had to be patient. We had to answer all their questions, and we could not judge in any way what they were thinking because if we couldn't answer all those questions and prove out the capabilities of Cloud computing, we were not going to accomplish our goals. And I do give so much credit to all my colleagues there from everybody like Steve Schmidt who was there, who's still there, who's the CISO, and Charlie Bell and Peter DeSantis and the entire team there that just really helped build that business out. Without them, you know, we would've just, it was a team effort. And I think that's the thing I loved about it was it was not just sales, it was product, it was development, it was data center operations, it was legal, finance. Everybody really worked as a team and we were on board that we had to make a lot of changes in the government relations team. We had to go into Capitol Hill. We had to talk to them about the changes that were required and really get them to understand why Cloud computing could be such a transformative game changer for the way government operates globally. >> Well, I think the whole world and the tech world can appreciate your work and thank you later because you broke down those walls asking those questions. So great stuff. Now I got to say, you're in kind of a similar role at Flexport. Again, transformative supply chain, not new. Computing wasn't new when before Cloud came. Supply chain, not a new concept, is undergoing radical change and transformation. Online, software supply chain, hardware supply chain, supply chain in general, shipping. This is a big part of our economy and how life is working. Similar kind of thing going on, build out, growth, scale. >> It is, it's very much like that, John, I would say, it's, it's kind of a, the model with freight forwarding and supply chain is fairly, it's not as, there's a lot of technology utilized in this global supply chain world, but it's not integrated. You don't have a common operating picture of what you're doing in your global supply chain. You don't have easy access to the information and visibility. And that's really, you know, I was at a conference last week in LA, and it was, the themes were so similar about transparency, access to data and information, being able to act quickly, drive change, know what was happening. I was like, wow, this sounds familiar. Data, AI, machine learning, visibility, common operating picture. So it is very much the same kind of themes that you heard even with government. I do believe it's an industry that is going through transformation and Flexport has been a group that's come in and said, look, we have this amazing idea, number one to give access to everyone. We want every small business to every large business to every government around the world to be able to trade their goods, think about supply chain logistics in a very different way with information they need and want at their fingertips. So that's kind of thing one, but to apply that technology in a way that's very usable across all systems from an integration perspective. So it's kind of exciting. I used to tell this story years ago, John, and I don't think Michael Dell would mind that I tell this story. One of our first customers when I was at Keyfile Corporation was we did workflow and document management, and Dell was one of our customers. And I remember going out to visit them, and they had runners and they would run around, you know, they would run around the floor and do their orders, right, to get all those computers out the door. And when I think of global trade, in my mind I still see runners, you know, running around and I think that's moved to a very digital, right, world that all this stuff, you don't need people doing this. You have machines doing this now, and you have access to the information, and you know, we still have issues resulting from COVID where we have either an under-abundance or an over-abundance of our supply chain. We still have clogs in our shipping, in the shipping yards around the world. So we, and the ports, so we need to also, we still have some clearing to do. And that's the reason technology is important and will continue to be very important in this world of global trade. >> Yeah, great, great impact for change. I got to ask you about Flexport's inclusion, diversity, and equity programs. What do you got going on there? That's been a big conversation in the industry around keeping a focus on not making one way more than the other, but clearly every company, if they don't have a strong program, will be at a disadvantage. That's well reported by McKinsey and other top consultants, diverse workforces, inclusive, equitable, all perform better. What's Flexport's strategy and how are you guys supporting that in the workplace? >> Well, let me just start by saying really at the core of who I am, since the day I've started understanding that as an individual and a female leader, that I could have an impact. That the words I used, the actions I took, the information that I pulled together and had knowledge of could be meaningful. And I think each and every one of us is responsible to do what we can to make our workplace and the world a more diverse and inclusive place to live and work. And I've always enjoyed kind of the thought that, that I could help empower women around the world in the tech industry. Now I'm hoping to do my little part, John, in that in the supply chain and global trade business. And I would tell you at Flexport we have some amazing women. I'm so excited to get to know all. I've not been there that long yet, but I'm getting to know we have some, we have a very diverse leadership team between men and women at Dave's level. I have some unbelievable women on my team directly that I'm getting to know more, and I'm so impressed with what they're doing. And this is a very, you know, while this industry is different than the world I live in day to day, it's also has a lot of common themes to it. So, you know, for us, we're trying to approach every day by saying, let's make sure both our interviewing cycles, the jobs we feel, how we recruit people, how we put people out there on the platforms, that we have diversity and inclusion and all of that every day. And I can tell you from the top, from Dave and all of our leaders, we just had an offsite and we had a big conversation about this is something. It's a drum beat that we have to think about and live by every day and really check ourselves on a regular basis. But I do think there's so much more room for women in the world to do great things. And one of the, one of the areas, as you know very well, we lost a lot of women during COVID, who just left the workforce again. So we kind of went back unfortunately. So we have to now move forward and make sure that we are giving women the opportunity to have great jobs, have the flexibility they need as they build a family, and have a workplace environment that is trusted for them to come into every day. >> There's now clear visibility, at least in today's world, not withstanding some of the setbacks from COVID, that a young girl can look out in a company and see a path from entry level to the boardroom. That's a big change. A lot than even going back 10, 15, 20 years ago. What's your advice to the folks out there that are paying it forward? You see a lot of executive leaderships have a seat at the table. The board still underrepresented by most numbers, but at least you have now kind of this solidarity at the top, but a lot of people doing a lot more now than I've seen at the next levels down. So now you have this leveled approach. Is that something that you're seeing more of? And credit compare and contrast that to 20 years ago when you were, you know, rising through the ranks? What's different? >> Well, one of the main things, and I honestly do not think about it too much, but there were really no women. There were none. When I showed up in the meetings, I literally, it was me or not me at the table, but at the seat behind the table. The women just weren't in the room, and there were so many more barriers that we had to push through, and that has changed a lot. I mean globally that has changed a lot in the U.S. You know, if you look at just our U.S. House of Representatives and our U.S. Senate, we now have the increasing number of women. Even at leadership levels, you're seeing that change. You have a lot more women on boards than we ever thought we would ever represent. While we are not there, more female CEOs that I get an opportunity to see and talk to. Women starting companies, they do not see the barriers. And I will share, John, globally in the U.S. one of the things that I still see that we have that many other countries don't have, which I'm very proud of, women in the U.S. have a spirit about them that they just don't see the barriers in the same way. They believe that they can accomplish anything. I have two sons, I don't have daughters. I have nieces, and I'm hoping someday to have granddaughters. But I know that a lot of my friends who have granddaughters today talk about the boldness, the fortitude, that they believe that there's nothing they can't accomplish. And I think that's what what we have to instill in every little girl out there, that they can accomplish anything they want to. The world is theirs, and we need to not just do that in the U.S., but around the world. And it was always the thing that struck me when I did all my travels at AWS and now with Flexport, I'm traveling again quite a bit, is just the differences you see in the cultures around the world. And I remember even in the Middle East, how I started seeing it change. You've heard me talk a lot on this program about the fact in both Saudi and Bahrain, over 60% of the tech workers were females and most of them held the the hardest jobs, the security, the architecture, the engineering. But many of them did not hold leadership roles. And that is what we've got to change too. To your point, the middle, we want it to get bigger, but the top, we need to get bigger. We need to make sure women globally have opportunities to hold the most precious leadership roles and demonstrate their capabilities at the very top. But that's changed. And I would say the biggest difference is when we show up, we're actually evaluated properly for those kind of roles. We have a ways to go. But again, that part is really changing. >> Can you share, Teresa, first of all, that's great work you've done and I wan to give you props of that as well and all the work you do. I know you champion a lot of, you know, causes in in this area. One question that comes up a lot, I would love to get your opinion 'cause I think you can contribute heavily here is mentoring and sponsorship is huge, comes up all the time. What advice would you share to folks out there who were, I won't say apprehensive, but maybe nervous about how to do the networking and sponsorship and mentoring? It's not just mentoring, it's sponsorship too. What's your best practice? What advice would you give for the best way to handle that? >> Well yeah, and for the women out there, I would say on the mentorship side, I still see mentorship. Like, I don't think you can ever stop having mentorship. And I like to look at my mentors in different parts of my life because if you want to be a well-rounded person, you may have parts of your life every day that you think I'm doing a great job here and I definitely would like to do better there. Whether it's your spiritual life, your physical life, your work life, you know, your leisure life. But I mean there's, and there's parts of my leadership world that I still seek advice from as I try to do new things even in this world. And I tried some new things in between roles. I went out and asked the people that I respected the most. So I just would say for sure have different mentorships and don't be afraid to have that diversity. But if you have mentorships, the second important thing is show up with a real agenda and questions. Don't waste people's time. I'm very sensitive today. If you're, if you want a mentor, you show up and you use your time super effectively and be prepared for that. Sponsorship is a very different thing. And I don't believe we actually do that still in companies. We worked, thank goodness for my great HR team. When I was at AWS, we worked on a few sponsorship programs where for diversity in general, where we would nominate individuals in the company that we felt that weren't, that had a lot of opportunity for growth, but they just weren't getting a seat at the table. And we brought 'em to the table. And we actually kind of had a Chatham House rules where when they came into the meetings, they had a sponsor, not a mentor. They had a sponsor that was with them the full 18 months of this program. We would bring 'em into executive meetings. They would read docs, they could ask questions. We wanted them to be able to open up and ask crazy questions without, you know, feeling wow, I just couldn't answer this question in a normal environment or setting. And then we tried to make sure once they got through the program that we found jobs and support and other special projects that they could go do. But they still had that sponsor and that group of individuals that they'd gone through the program with, John, that they could keep going back to. And I remember sitting there and they asked me what I wanted to get out of the program, and I said two things. I want you to leave this program and say to yourself, I would've never had that experience if I hadn't gone through this program. I learned so much in 18 months. It would probably taken me five years to learn. And that it helped them in their career. The second thing I told them is I wanted them to go out and recruit individuals that look like them. I said, we need diversity, and unless you all feel that we are in an inclusive environment sponsoring all types of individuals to be part of this company, we're not going to get the job done. And they said, okay. And you know, but it was really one, it was very much about them. That we took a group of individuals that had high potential and a very diverse with diverse backgrounds, held 'em up, taught 'em things that gave them access. And two, selfishly I said, I want more of you in my business. Please help me. And I think those kind of things are helpful, and you have to be thoughtful about these kind of programs. And to me that's more sponsorship. I still have people reach out to me from years ago, you know, Microsoft saying, you were so good with me, can you give me a reference now? Can you talk to me about what I should be doing? And I try to, I'm not pray 100%, some things pray fall through the cracks, but I always try to make the time to talk to those individuals because for me, I am where I am today because I got some of the best advice from people like Don Byrne and Linda Zecker and Andy Jassy, who were very honest and upfront with me about my career. >> Awesome. Well, you got a passion for empowering women in tech, paying it forward, but you're quite accomplished and that's why we're so glad to have you on the program here. President and Chief Commercial Officer at Flexport. Obviously storied career and your other jobs, specifically Amazon I think, is historic in my mind. This next chapter looks like it's looking good right now. Final question for you, for the few minutes you have left. Tell us what you're up to at Flexport. What's your goals as President, Chief Commercial Officer? What are you trying to accomplish? Share a little bit, what's on your mind with your current job? >> Well, you kind of said it earlier. I think if I look at my own superpowers, I love customers, I love partners. I get my energy, John, from those interactions. So one is to come in and really help us build even a better world class enterprise global sales and marketing team. Really listen to our customers, think about how we interact with them, build the best executive programs we can, think about new ways that we can offer services to them and create new services. One of my favorite things about my career is I think if you're a business leader, it's your job to come back around and tell your product group and your services org what you're hearing from customers. That's how you can be so much more impactful, that you listen, you learn, and you deliver. So that's one big job. The second job for me, which I am so excited about, is that I have an amazing group called flexport.org under me. And flexport.org is doing amazing things around the world to help those in need. We just announced this new funding program for Tech for Refugees, which brings assistance to millions of people in Ukraine, Pakistan, the horn of Africa, and those who are affected by earthquakes. We just took supplies into Turkey and Syria, and Flexport, recently in fact, just did sent three air shipments to Turkey and Syria for these. And I think we did over a hundred trekking shipments to get earthquake relief. And as you can imagine, it was not easy to get into Syria. But you know, we're very active in the Ukraine, and we are, our goal for flexport.org, John, is to continue to work with our commercial customers and team up with them when they're trying to get supplies in to do that in a very cost effective, easy way, as quickly as we can. So that not-for-profit side of me that I'm so, I'm so happy. And you know, Ryan Peterson, who was our founder, this was his brainchild, and he's really taken this to the next level. So I'm honored to be able to pick that up and look for new ways to have impact around the world. And you know, I've always found that I think if you do things right with a company, you can have a beautiful combination of commercial-ity and giving. And I think Flexport does it in such an amazing and unique way. >> Well, the impact that they have with their system and their technology with logistics and shipping and supply chain is a channel for societal change. And I think that's a huge gift that you have that under your purview. So looking forward to finding out more about flexport.org. I can only imagine all the exciting things around sustainability, and we just had Mobile World Congress for Big Cube Broadcast, 5Gs right around the corner. I'm sure that's going to have a huge impact to your business. >> Well, for sure. And just on gas emissions, that's another thing that we are tracking gas, greenhouse gas emissions. And in fact we've already reduced more than 300,000 tons and supported over 600 organizations doing that. So that's a thing we're also trying to make sure that we're being climate aware and ensuring that we are doing the best job we can at that as well. And that was another thing I was honored to be able to do when we were at AWS, is to really cut out greenhouse gas emissions and really go global with our climate initiatives. >> Well Teresa, it's great to have you on. Security, data, 5G, sustainability, business transformation, AI all coming together to change the game. You're in another hot seat, hot roll, big wave. >> Well, John, it's an honor, and just thank you again for doing this and having women on and really representing us in a big way as we celebrate International Women's Day. >> I really appreciate it, it's super important. And these videos have impact, so we're going to do a lot more. And I appreciate your leadership to the industry and thank you so much for taking the time to contribute to our effort. Thank you, Teresa. >> Thank you. Thanks everybody. >> Teresa Carlson, the President and Chief Commercial Officer of Flexport. I'm John Furrier, host of theCUBE. This is International Women's Day broadcast. Thanks for watching. (upbeat outro music)

Published Date : Mar 6 2023

SUMMARY :

and Chief Commercial Officer It's hard to believe so honor to interview you I, it's my, it's been Tell us about your new role and insight to what's going on. and are doing for And that led to me going in the sense of you got, I learned that you really Now I got to say, you're in kind of And I remember going out to visit them, I got to ask you about And I would tell you at Flexport to 20 years ago when you were, you know, And I remember even in the Middle East, I know you champion a lot of, you know, And I like to look at my to have you on the program here. And I think we did over a I can only imagine all the exciting things And that was another thing I Well Teresa, it's great to have you on. and just thank you again for and thank you so much for taking the time Thank you. and Chief Commercial Officer of Flexport.

SENTIMENT ANALYSIS :

ENTITIES

EntityCategoryConfidence
Satya NadellaPERSON

0.99+

Jeremy BurtonPERSON

0.99+

DavePERSON

0.99+

CiscoORGANIZATION

0.99+

Teresa CarlsonPERSON

0.99+

Dave VellantePERSON

0.99+

Dave VallentePERSON

0.99+

Ryan PetersonPERSON

0.99+

MicrosoftORGANIZATION

0.99+

Andy JassyPERSON

0.99+

TeresaPERSON

0.99+

JohnPERSON

0.99+

Linda ZeckerPERSON

0.99+

AmazonORGANIZATION

0.99+

MikePERSON

0.99+

John FurrierPERSON

0.99+

Steve BallmerPERSON

0.99+

CanadaLOCATION

0.99+

GoogleORGANIZATION

0.99+

AWSORGANIZATION

0.99+

FlexportORGANIZATION

0.99+

Dave ClarkPERSON

0.99+

Mike FrancoPERSON

0.99+

Stu MinimanPERSON

0.99+

2010DATE

0.99+

SyriaLOCATION

0.99+

HallmarkORGANIZATION

0.99+

UkraineLOCATION

0.99+

Don ByrnePERSON

0.99+

Keyfile CorporationORGANIZATION

0.99+

Steve SchmidtPERSON

0.99+

DellORGANIZATION

0.99+

five yearsQUANTITY

0.99+

Dave StanfordPERSON

0.99+

TurkeyLOCATION

0.99+

BostonLOCATION

0.99+

JuneDATE

0.99+

Middle EastLOCATION

0.99+

second jobQUANTITY

0.99+

Michael DellPERSON

0.99+

dozensQUANTITY

0.99+

2013DATE

0.99+

MayDATE

0.99+

2019DATE

0.99+

LALOCATION

0.99+

Amazon Web ServicesORGANIZATION

0.99+

100%QUANTITY

0.99+

Jesse Cugliotta & Nicholas Taylor | The Future of Cloud & Data in Healthcare


 

(upbeat music) >> Welcome back to Supercloud 2. This is Dave Vellante. We're here exploring the intersection of data and analytics in the future of cloud and data. In this segment, we're going to look deeper into the life sciences business with Jesse Cugliotta, who leads the Healthcare and Life Sciences industry practice at Snowflake. And Nicholas Nick Taylor, who's the executive director of Informatics at Ionis Pharmaceuticals. Gentlemen, thanks for coming in theCUBE and participating in the program. Really appreciate it. >> Thank you for having us- >> Thanks for having me. >> You're very welcome, okay, we're go really try to look at data sharing as a use case and try to understand what's happening in the healthcare industry generally and specifically, how Nick thinks about sharing data in a governed fashion whether tapping the capabilities of multiple clouds is advantageous long term or presents more challenges than the effort is worth. And to start, Jesse, you lead this industry practice for Snowflake and it's a challenging and vibrant area. It's one that's hyper-focused on data privacy. So the first question is, you know there was a time when healthcare and other regulated industries wouldn't go near the cloud. What are you seeing today in the industry around cloud adoption and specifically multi-cloud adoption? >> Yeah, for years I've heard that healthcare and life sciences has been cloud diverse, but in spite of all of that if you look at a lot of aspects of this industry today, they've been running in the cloud for over 10 years now. Particularly when you look at CRM technologies or HR or HCM, even clinical technologies like EDC or ETMF. And it's interesting that you mentioned multi-cloud as well because this has always been an underlying reality especially within life sciences. This industry grows through acquisition where companies are looking to boost their future development pipeline either by buying up smaller biotechs, they may have like a late or a mid-stage promising candidate. And what typically happens is the larger pharma could then use their commercial muscle and their regulatory experience to move it to approvals and into the market. And I think the last few decades of cheap capital certainly accelerated that trend over the last couple of years. But this typically means that these new combined institutions may have technologies that are running on multiple clouds or multiple cloud strategies in various different regions to your point. And what we've often found is that they're not planning to standardize everything onto a single cloud provider. They're often looking for technologies that embrace this multi-cloud approach and work seamlessly across them. And I think this is a big reason why we, here at Snowflake, we've seen such strong momentum and growth across this industry because healthcare and life science has actually been one of our fastest growing sectors over the last couple of years. And a big part of that is in fact that we run on not only all three major cloud providers, but individual accounts within each and any one of them, they had the ability to communicate and interoperate with one another, like a globally interconnected database. >> Great, thank you for that setup. And so Nick, tell us more about your role and Ionis Pharma please. >> Sure. So I've been at Ionis for around five years now. You know, when when I joined it was, the IT department was pretty small. There wasn't a lot of warehousing, there wasn't a lot of kind of big data there. We saw an opportunity with Snowflake pretty early on as a provider that would be a lot of benefit for us, you know, 'cause we're small, wanted something that was fairly hands off. You know, I remember the days where you had to get a lot of DBAs in to fine tune your databases, make sure everything was running really, really well. The notion that there's, you know, no indexes to tune, right? There's very few knobs and dials, you can turn on Snowflake. That was appealing that, you know, it just kind of worked. So we found a use case to bring the platform in. We basically used it as a logging replacement as a Splunk kind of replacement with a platform called Elysium Analytics as a way to just get it in the door and give us the opportunity to solve a real world use case, but also to help us start to experiment using Snowflake as a platform. It took us a while to A, get the funding to bring it in, but B, build the momentum behind it. But, you know, as we experimented we added more data in there, we ran a few more experiments, we piloted in few more applications, we really saw the power of the platform and now, we are becoming a commercial organization. And with that comes a lot of major datasets. And so, you know, we really see Snowflake as being a very important part of our ecology going forward to help us build out our infrastructure. >> Okay, and you are running, your group runs on Azure, it's kind of mono cloud, single cloud, but others within Ionis are using other clouds, but you're not currently, you know, collaborating in terms of data sharing. And I wonder if you could talk about how your data needs have evolved over the past decade. I know you came from another highly regulated industry in financial services. So what's changed? You sort of touched on this before, you had these, you know, very specialized individuals who were, you know, DBAs, and, you know, could tune databases and the like, so that's evolved, but how has generally your needs evolved? Just kind of make an observation over the last, you know, five or seven years. What have you seen? >> Well, we, I wasn't in a group that did a lot of warehousing. It was more like online trade capture, but, you know, it was very much on-prem. You know, being in the cloud is very much a dirty word back then. I know that's changed since I've left. But in, you know, we had major, major teams of everyone who could do everything, right. As I mentioned in the pharma organization, there's a lot fewer of us. So the data needs there are very different, right? It's, we have a lot of SaaS applications. One of the difficulties with bringing a lot of SaaS applications on board is obviously data integration. So making sure the data is the same between them. But one of the big problems is joining the data across those SaaS applications. So one of the benefits, one of the things that we use Snowflake for is to basically take data out of these SaaS applications and load them into a warehouse so we can do those joins. So we use technologies like Boomi, we use technologies like Fivetran, like DBT to bring this data all into one place and start to kind of join that basically, allow us to do, run experiments, do analysis, basically take better, find better use for our data that was siloed in the past. You mentioned- >> Yeah. And just to add on to Nick's point there. >> Go ahead. >> That's actually something very common that we're seeing across the industry is because a lot of these SaaS applications that you mentioned, Nick, they're with from vendors that are trying to build their own ecosystem in walled garden. And by definition, many of them do not want to integrate with one another. So from a, you know, from a data platform vendor's perspective, we see this as a huge opportunity to help organizations like Ionis and others kind of deal with the challenges that Nick is speaking about because if the individual platform vendors are never going to make that part of their strategy, we see it as a great way to add additional value to these customers. >> Well, this data sharing thing is interesting. There's a lot of walled gardens out there. Oracle is a walled garden, AWS in many ways is a walled garden. You know, Microsoft has its walled garden. You could argue Snowflake is a walled garden. But the, what we're seeing and the whole reason behind the notion of super-cloud is we're creating an abstraction layer where you actually, in this case for this use case, can share data in a governed manner. Let's forget about the cross-cloud for a moment. I'll come back to that, but I wonder, Nick, if you could talk about how you are sharing data, again, Snowflake sort of, it's, I look at Snowflake like the app store, Apple, we're going to control everything, we're going to guarantee with data clean rooms and governance and the standards that we've created within that platform, we're going to make sure that it's safe for you to share data in this highly regulated industry. Are you doing that today? And take us through, you know, the considerations that you have in that regard. >> So it's kind of early days for us in Snowflake in general, but certainly in data sharing, we have a couple of examples. So data marketplace, you know, that's a great invention. It's, I've been a small IT shop again, right? The fact that we are able to just bring down terabyte size datasets straight into our Snowflake and run analytics directly on that is huge, right? The fact that we don't have to FTP these massive files around run jobs that may break, being able to just have that on tap is huge for us. We've recently been talking to one of our CRO feeds- CRO organizations about getting their data feeds in. Historically, this clinical trial data that comes in on an FTP file, we have to process it, take it through the platforms, put it into the warehouse. But one of the CROs that we talked to recently when we were reinvestigate in what data opportunities they have, they were a Snowflake customer and we are, I think, the first production customer they have, have taken that feed. So they're basically exposing their tables of data that historically came in these FTP files directly into our Snowflake instance now. We haven't taken advantage of that. It only actually flipped the switch about three or four weeks ago. But that's pretty big for us again, right? We don't have to worry about maintaining those jobs that take those files in. We don't have to worry about the jobs that take those and shove them on the warehouse. We now have a feed that's directly there that we can use a tool like DBT to push through directly into our model. And then the third avenue that's came up, actually fairly recently as well was genetics data. So genetics data that's highly, highly regulated. We had to be very careful with that. And we had a conversation with Snowflake about the data white rooms practice, and we see that as a pretty interesting opportunity. We are having one organization run genetic analysis being able to send us those genetic datasets, but then there's another organization that's actually has the in quotes "metadata" around that, so age, ethnicity, location, et cetera. And being able to join those two datasets through some kind of mechanism would be really beneficial to the organization. Being able to build a data white room so we can put that genetic data in a secure place, anonymize it, and then share the amalgamated data back out in a way that's able to be joined to the anonymized metadata, that could be pretty huge for us as well. >> Okay, so this is interesting. So you talk about FTP, which was the common way to share data. And so you basically, it's so, I got it now you take it and do whatever you want with it. Now we're talking, Jesse, about sharing the same copy of live data. How common is that use case in your industry? >> It's become very common over the last couple of years. And I think a big part of it is having the right technology to do it effectively. You know, as Nick mentioned, historically, this was done by people sending files around. And the challenge with that approach, of course, while there are multiple challenges, one, every time you send a file around your, by definition creating a copy of the data because you have to pull it out of your system of record, put it into a file, put it on some server where somebody else picks it up. And by definition at that point you've lost governance. So this creates challenges in general hesitation to doing so. It's not that it hasn't happened, but the other challenge with it is that the data's no longer real time. You know, you're working with a copy of data that was as fresh as at the time at that when that was actually extracted. And that creates limitations in terms of how effective this can be. What we're starting to see now with some of our customers is live sharing of information. And there's two aspects of that that are important. One is that you're not actually physically creating the copy and sending it to someone else, you're actually exposing it from where it exists and allowing another consumer to interact with it from their own account that could be in another region, some are running in another cloud. So this concept of super-cloud or cross-cloud could becoming realized here. But the other important aspect of it is that when that other- when that other entity is querying your data, they're seeing it in a real time state. And this is particularly important when you think about use cases like supply chain planning, where you're leveraging data across various different enterprises. If I'm a manufacturer or if I'm a contract manufacturer and I can see the actual inventory positions of my clients, of my distributors, of the levels of consumption at the pharmacy or the hospital that gives me a lot of indication as to how my demand profile is changing over time versus working with a static picture that may have been from three weeks ago. And this has become incredibly important as supply chains are becoming more constrained and the ability to plan accurately has never been more important. >> Yeah. So the race is on to solve these problems. So it start, we started with, hey, okay, cloud, Dave, we're going to simplify database, we're going to put it in the cloud, give virtually infinite resources, separate compute from storage. Okay, check, we got that. Now we've moved into sort of data clean rooms and governance and you've got an ecosystem that's forming around this to make it safer to share data. And then, you know, nirvana, at least near term nirvana is we're going to build data applications and we're going to be able to share live data and then you start to get into monetization. Do you see, Nick, in the near future where I know you've got relationships with, for instance, big pharma like AstraZeneca, do you see a situation where you start sharing data with them? Is that in the near term? Is that more long term? What are the considerations in that regard? >> I mean, it's something we've been thinking about. We haven't actually addressed that yet. Yeah, I could see situations where, you know, some of these big relationships where we do need to share a lot of data, it would be very nice to be able to just flick a switch and share our data assets across to those organizations. But, you know, that's a ways off for us now. We're mainly looking at bringing data in at the moment. >> One of the things that we've seen in financial services in particular, and Jesse, I'd love to get your thoughts on this, is companies like Goldman or Capital One or Nasdaq taking their stack, their software, their tooling actually putting it on the cloud and facing it to their customers and selling that as a new monetization vector as part of their digital or business transformation. Are you seeing that Jesse at all in healthcare or is it happening today or do you see a day when that happens or is healthier or just too scary to do that? >> No, we're seeing the early stages of this as well. And I think it's for some of the reasons we talked about earlier. You know, it's a much more secure way to work with a colleague if you don't have to copy your data and potentially expose it. And some of the reasons that people have historically copied that data is that they needed to leverage some sort of algorithm or application that a third party was providing. So maybe someone was predicting the ideal location and run a clinical trial for this particular rare disease category where there are only so many patients around the world that may actually be candidates for this disease. So you have to pick the ideal location. Well, sending the dataset to do so, you know, would involve a fairly complicated process similar to what Nick was mentioning earlier. If the company who was providing the logic or the algorithm to determine that location could bring that algorithm to you and you run it against your own data, that's a much more ideal and a much safer and more secure way for this industry to actually start to work with some of these partners and vendors. And that's one of the things that we're looking to enable going into this year is that, you know, the whole concept should be bring the logic to your data versus your data to the logic and the underlying sharing mechanisms that we've spoken about are actually what are powering that today. >> And so thank you for that, Jesse. >> Yes, Dave. >> And so Nick- Go ahead please. >> Yeah, if I could add, yeah, if I could add to that, that's something certainly we've been thinking about. In fact, we'd started talking to Snowflake about that a couple of years ago. We saw the power there again of the platform to be able to say, well, could we, we were thinking in more of a data share, but could we share our data out to say an AI/ML vendor, have them do the analytics and then share the data, the results back to us. Now, you know, there's more powerful mechanisms to do that within the Snowflake ecosystem now, but you know, we probably wouldn't need to have onsite AI/ML people, right? Some of that stuff's very sophisticated, expensive resources, hard to find, you know, it's much better for us to find a company that would be able to build those analytics, maintain those analytics for us. And you know, we saw an opportunity to do that a couple years ago and we're kind of excited about the opportunity there that we can just basically do it with a no op, right? We share the data route, we have the analytics done, we get the result back and it's just fairly seamless. >> I mean, I could have a whole another Cube session on this, guys, but I mean, I just did a a session with Andy Thurai, a Constellation research about how difficult it's been for organization to get ROI because they don't have the expertise in house so they want to either outsource it or rely on vendor R&D companies to inject that AI and machine intelligence directly into applications. My follow-up question to you Nick is, when you think about, 'cause Jesse was talking about, you know, let the data basically stay where it is and you know bring the compute to that data. If that data lives on different clouds, and maybe it's not your group, but maybe it's other parts of Ionis or maybe it's your partners like AstraZeneca, or you know, the AI/ML partners and they're potentially on other clouds or that data is on other clouds. Do you see that, again, coming back to super-cloud, do you see it as an advantage to be able to have a consistent experience across those clouds? Or is that just kind of get in the way and make things more complex? What's your take on that, Nick? >> Well, from the vendors, so from the client side, it's kind of seamless with Snowflake for us. So we know for a fact that one of the datasets we have at the moment, Compile, which is a, the large multi terabyte dataset I was talking about. They're on AWS on the East Coast and we are on Azure on the West Coast. And they had to do a few tweaks in the background to make sure the data was pushed over from, but from my point of view, the data just exists, right? So for me, I think it's hugely beneficial that Snowflake supports this kind of infrastructure, right? We don't have to jump through hoops to like, okay, well, we'll download it here and then re-upload it here. They already have the mechanism in the background to do these multi-cloud shares. So it's not important for us internally at the moment. I could see potentially at some point where we start linking across different groups in the organization that do have maybe Amazon or Google Cloud, but certainly within our providers. We know for a fact that they're on different services at the moment and it just works. >> Yeah, and we learned from Benoit Dageville, who came into the studio on August 9th with first Supercloud in 2022 that Snowflake uses a single global instance across regions and across clouds, yeah, whether or not you can query across you know, big regions, it just depends, right? It depends on latency. You might have to make a copy or maybe do some tweaks in the background. But guys, we got to jump, I really appreciate your time. Really thoughtful discussion on the future of data and cloud, specifically within healthcare and pharma. Thank you for your time. >> Thanks- >> Thanks for having us. >> All right, this is Dave Vellante for theCUBE team and my co-host, John Furrier. Keep it right there for more action at Supercloud 2. (upbeat music)

Published Date : Jan 3 2023

SUMMARY :

and analytics in the So the first question is, you know And it's interesting that you Great, thank you for that setup. get the funding to bring it in, over the last, you know, So one of the benefits, one of the things And just to add on to Nick's point there. that you mentioned, Nick, and the standards that we've So data marketplace, you know, And so you basically, it's so, And the challenge with Is that in the near term? bringing data in at the moment. One of the things that we've seen that algorithm to you and you And so Nick- the results back to us. Or is that just kind of get in the way in the background to do on the future of data and cloud, All right, this is Dave Vellante

SENTIMENT ANALYSIS :

ENTITIES

EntityCategoryConfidence
Jesse CugliottaPERSON

0.99+

Dave VellantePERSON

0.99+

GoldmanORGANIZATION

0.99+

AstraZenecaORGANIZATION

0.99+

MicrosoftORGANIZATION

0.99+

John FurrierPERSON

0.99+

Capital OneORGANIZATION

0.99+

JessePERSON

0.99+

Andy ThuraiPERSON

0.99+

AWSORGANIZATION

0.99+

August 9thDATE

0.99+

NickPERSON

0.99+

NasdaqORGANIZATION

0.99+

Nicholas Nick TaylorPERSON

0.99+

fiveQUANTITY

0.99+

AmazonORGANIZATION

0.99+

IonisORGANIZATION

0.99+

DavePERSON

0.99+

Ionis PharmaORGANIZATION

0.99+

Nicholas TaylorPERSON

0.99+

Ionis PharmaceuticalsORGANIZATION

0.99+

SnowflakeORGANIZATION

0.99+

first questionQUANTITY

0.99+

Benoit DagevillePERSON

0.99+

AppleORGANIZATION

0.99+

seven yearsQUANTITY

0.99+

OracleORGANIZATION

0.99+

2022DATE

0.99+

todayDATE

0.99+

over 10 yearsQUANTITY

0.98+

SnowflakeTITLE

0.98+

oneQUANTITY

0.98+

OneQUANTITY

0.98+

two aspectsQUANTITY

0.98+

firstQUANTITY

0.98+

this yearDATE

0.97+

eachQUANTITY

0.97+

two datasetsQUANTITY

0.97+

West CoastLOCATION

0.97+

four weeks agoDATE

0.97+

around five yearsQUANTITY

0.97+

threeQUANTITY

0.95+

first productionQUANTITY

0.95+

East CoastLOCATION

0.95+

third avenueQUANTITY

0.95+

one organizationQUANTITY

0.94+

theCUBEORGANIZATION

0.94+

couple years agoDATE

0.93+

single cloudQUANTITY

0.92+

single cloud providerQUANTITY

0.92+

hree weeks agoDATE

0.91+

one placeQUANTITY

0.88+

AzureTITLE

0.86+

last couple of yearsDATE

0.85+

Breaking Analysis: Cyber Firms Revert to the Mean


 

(upbeat music) >> From theCube Studios in Palo Alto in Boston, bringing you data driven insights from theCube and ETR. This is Breaking Analysis with Dave Vellante. >> While by no means a safe haven, the cybersecurity sector has outpaced the broader tech market by a meaningful margin, that is up until very recently. Cybersecurity remains the number one technology priority for the C-suite, but as we've previously reported the CISO's budget has constraints just like other technology investments. Recent trends show that economic headwinds have elongated sales cycles, pushed deals into future quarters, and just like other tech initiatives, are pacing cybersecurity investments and breaking them into smaller chunks. Hello and welcome to this week's Wikibon Cube Insights powered by ETR. In this Breaking Analysis we explain how cybersecurity trends are reverting to the mean and tracking more closely with other technology investments. We'll make a couple of valuation comparisons to show the magnitude of the challenge and which cyber firms are feeling the heat, which aren't. There are some exceptions. We'll then show the latest survey data from ETR to quantify the contraction in spending momentum and close with a glimpse of the landscape of emerging cybersecurity companies, the private companies that could be ripe for acquisition, consolidation, or disruptive to the broader market. First, let's take a look at the recent patterns for cyber stocks relative to the broader tech market as a benchmark, as an indicator. Here's a year to date comparison of the bug ETF, which comprises a basket of cyber security names, and we compare that with the tech heavy NASDAQ composite. Notice that on April 13th of this year the cyber ETF was actually in positive territory while the NAS was down nearly 14%. Now by August 16th, the green turned red for cyber stocks but they still meaningfully outpaced the broader tech market by more than 950 basis points as of December 2nd that Delta had contracted. As you can see, the cyber ETF is now down nearly 25%, year to date, while the NASDAQ is down 27% and change. Now take a look at just how far a few of the high profile cybersecurity names have fallen. Here are six security firms that we've been tracking closely since before the pandemic. We've been, you know, tracking dozens but let's just take a look at this data and the subset. We show for comparison the S&P 500 and the NASDAQ, again, just for reference, they're both up since right before the pandemic. They're up relative to right before the pandemic, and then during the pandemic the S&P shot up more than 40%, relative to its pre pandemic level, around February is what we're using for the pre pandemic level, and the NASDAQ peaked at around 65% higher than that February level. They're now down 85% and 71% of their previous. So they're at 85% and 71% respectively from their pandemic highs. You compare that to these six companies, Splunk, which was and still is working through a transition is well below its pre pandemic market value and 44, it's 44% of its pre pandemic high as of last Friday. Palo Alto Networks is the most interesting here, in that it had been facing challenges prior to the pandemic related to a pivot to the Cloud which we reported on at the time. But as we said at that time we believe the company would sort out its Cloud transition, and its go to market challenges, and sales compensation issues, which it did as you can see. And its valuation jumped from 24 billion prior to Covid to 56 billion, and it's holding 93% of its peak value. Its revenue run rate is now over 6 billion with a healthy growth rate of 24% expected for the next quarter. Similarly, Fortinet has done relatively well holding 71% of its peak Covid value, with a healthy 34% revenue guide for the coming quarter. Now, Okta has been the biggest disappointment, a darling of the pandemic Okta's communication snafu, with what was actually a pretty benign hack combined with difficulty absorbing its 7 billion off zero acquisition, knocked the company off track. Its valuation has dropped by 35 billion since its peak during the pandemic, and that's after a nice beat and bounce back quarter just announced by Okta. Now, in our view Okta remains a viable long-term leader in identity. However, its recent fiscal 24 revenue guide was exceedingly conservative at around 16% growth. So either the company is sandbagging, or has such poor visibility that it wants to be like super cautious or maybe it's actually seeing a dramatic slowdown in its business momentum. After all, this is a company that not long ago was putting up 50% plus revenue growth rates. So it's one that bears close watching. CrowdStrike is another big name that we've been talking about on Breaking Analysis for quite some time. It like Okta has led the industry in a key ETR performance indicator that measures customer spending momentum. Just last week, CrowdStrike announced revenue increased more than 50% but new ARR was soft and the company guided conservatively. Not surprisingly, the stock got absolutely crushed as CrowdStrike blamed tepid demand from smaller and midsize firms. Many analysts believe that competition from Microsoft was one factor along with cautious spending amongst those midsize and smaller customers. Notably, large customers remain active. So we'll see if this is a longer term trend or an anomaly. Zscaler is another company in the space that we've reported having great customer spending momentum from the ETR data. But even though the company beat expectations for its recent quarter, like other companies its Outlook was conservative. So other than Palo Alto, and to a lesser extent Fortinet, these companies and others that we're not showing here are feeling the economic pinch and it shows in the compression of value. CrowdStrike, for example, had a 70 billion valuation at one point during the pandemic Zscaler top 50 billion, Okta 45 billion. Now, having said that Palo Alto Networks, Fortinet, CrowdStrike, and Zscaler are all still trading well above their pre pandemic levels that we tracked back in February of 2020. All right, let's go now back to ETR'S January survey and take a look at how much things have changed since the beginning of the year. Remember, this is obviously pre Ukraine, and pre all the concerns about the economic headwinds but here's an X Y graph that shows a net score, or spending momentum on the y-axis, and market presence on the x-axis. The red dotted line at 40% on the vertical indicates a highly elevated net score. Anything above that we think is, you know, super elevated. Now, we filtered the data here to show only those companies with more than 50 responses in the ETR survey. Still really crowded. Note that there were around 20 companies above that red 40% mark, which is a very, you know, high number. It's a, it's a crowded market, but lots of companies with, you know, positive momentum. Now let's jump ahead to the most recent October survey and take a look at what, what's happening. Same graphic plotting, spending momentum, and market presence, and look at the number of companies above that red line and how it's been squashed. It's really compressing, it's still a crowded market, it's still, you know, plenty of green, but the number of companies above 40% that, that key mark has gone from around 20 firms down to about five or six. And it speaks to that compression and IT spending, and of course the elongated sales cycles pushing deals out, taking them in smaller chunks. I can't tell you how many conversations with customers I had, at last week at Reinvent underscoring this exact same trend. The buyers are getting pressure from their CFOs to slow things down, do more with less and, and, and prioritize projects to those that absolutely are critical to driving revenue or cutting costs. And that's rippling through all sectors, including cyber. Now, let's do a bit more playing around with the ETR data and take a look at those companies with more than a hundred citations in the survey this quarter. So N, greater than or equal to a hundred. Now remember the followers of Breaking Analysis know that each quarter we take a look at those, what we call four star security firms. That is, those are the, that are in, that hit the top 10 for both spending momentum, net score, and the N, the mentions in the survey, the presence, the pervasiveness in the survey, and that's what we show here. The left most chart is sorted by spending momentum or net score, and the right hand chart by shared N, or the number of mentions in the survey, that pervasiveness metric. that solid red line denotes the cutoff point at the top 10. And you'll note we've actually cut it off at 11 to account for Auth 0, which is now part of Okta, and is going through a go to market transition, you know, with the company, they're kind of restructuring sales so they can take advantage of that. So starting on the left with spending momentum, again, net score, Microsoft leads all vendors, typical Microsoft, very prominent, although it hadn't always done so, it, for a while, CrowdStrike and Okta were, were taking the top spot, now it's Microsoft. CrowdStrike, still always near the top, but note that CyberArk and Cloudflare have cracked the top five in Okta, which as I just said was consistently at the top, has dropped well off its previous highs. You'll notice that Palo Alto Network Palo Alto Networks with a 38% net score, just below that magic 40% number, is healthy, especially as you look over to the right hand chart. Take a look at Palo Alto with an N of 395. It is the largest of the independent pure play security firms, and has a very healthy net score, although one caution is that net score has dropped considerably since the beginning of the year, which is the case for most of the top 10 names. The only exception is Fortinet, they're the only ones that saw an increase since January in spending momentum as ETR measures it. Now this brings us to the four star security firms, that is those that hit the top 10 in both net score on the left hand side and market presence on the right hand side. So it's Microsoft, Palo Alto, CrowdStrike, Okta, still there even not accounting for a Auth 0, just Okta on its own. If you put in Auth 0, it's, it's even stronger. Adding then in Fortinet and Zscaler. So Microsoft, Palo Alto, CrowdStrike, Okta, Fortinet, and Zscaler. And as we've mentioned since January, only Fortinet has shown an increase in net score since, since that time, again, since the January survey. Now again, this talks to the compression in spending. Now one of the big themes we hear constantly in cybersecurity is the market is overcrowded. Everybody talks about that, me included. The implication there, is there's a lot of room for consolidation and that consolidation can come in the form of M&A, or it can come in the form of people consolidating onto a single platform, and retiring some other vendors, and getting rid of duplicate vendors. We're hearing that as a big theme as well. Now, as we saw in the previous, previous chart, this is a very crowded market and we've seen lots of consolidation in 2022, in the form of M&A. Literally hundreds of M&A deals, with some of the largest companies going private. SailPoint, KnowBe4, Barracuda, Mandiant, Fedora, these are multi billion dollar acquisitions, or at least billion dollars and up, and many of them multi-billion, for these companies, and hundreds more acquisitions in the cyberspace, now less you think the pond is overfished, here's a chart from ETR of emerging tech companies in the cyber security industry. This data comes from ETR's Emerging Technologies Survey, ETS, which is this diamond in a rough that I found a couple quarters ago, and it's ripe with companies that are candidates for M&A. Many would've liked, many of these companies would've liked to, gotten to the public markets during the pandemic, but they, you know, couldn't get there. They weren't ready. So the graph, you know, similar to the previous one, but different, it shows net sentiment on the vertical axis and that's a measurement of, of, of intent to adopt against a mind share on the X axis, which measures, measures the awareness of the vendor in the community. So this is specifically a survey that ETR goes out and, and, and fields only to track those emerging tech companies that are private companies. Now, some of the standouts in Mindshare, are OneTrust, BeyondTrust, Tanium and Endpoint, Net Scope, which we've talked about in previous Breaking Analysis. 1Password, which has been acquisitive on its own. In identity, the managed security service provider, Arctic Wolf Network, a company we've also covered, we've had their CEO on. We've talked about MSSPs as a real trend, particularly in small and medium sized business, we'll come back to that, Sneek, you know, kind of high flyer in both app security and containers, and you can just see the number of companies in the space this huge and it just keeps growing. Now, just to make it a bit easier on the eyes we filtered the data on these companies with with those, and isolated on those with more than a hundred responses only within the survey. And that's what we show here. Some of the names that we just mentioned are a bit easier to see, but these are the ones that really stand out in ERT, ETS, survey of private companies, OneTrust, BeyondTrust, Taniam, Netscope, which is in Cloud, 1Password, Arctic Wolf, Sneek, BitSight, SecurityScorecard, HackerOne, Code42, and Exabeam, and Sim. All of these hit the ETS survey with more than a hundred responses by, by the IT practitioners. Okay, so these firms, you know, maybe they do some M&A on their own. We've seen that with Sneek, as I said, with 1Password has been inquisitive, as have others. Now these companies with the larger footprint, these private companies, will likely be candidate for both buying companies and eventually going public when the markets settle down a bit. So again, no shortage of players to affect consolidation, both buyers and sellers. Okay, so let's finish with some key questions that we're watching. CrowdStrike in particular on its earnings calls cited softness from smaller buyers. Is that because these smaller buyers have stopped adopting? If so, are they more at risk, or are they tactically moving toward the easy button, aka, Microsoft's good enough approach. What does that mean for the market if smaller company cohorts continue to soften? How about MSSPs? Will companies continue to outsource, or pause on on that, as well as try to free up, to try to free up some budget? Adam Celiski at Reinvent last week said, "If you want to save money the Cloud's the best place to do it." Is the cloud the best place to save money in cyber? Well, it would seem that way from the standpoint of controlling budgets with lots of, lots of optionality. You could dial up and dial down services, you know, or does the Cloud add another layer of complexity that has to be understood and managed by Devs, for example? Now, consolidation should favor the likes of Palo Alto and CrowdStrike, cause they're platform players, and some of the larger players as well, like Cisco, how about IBM and of course Microsoft. Will that happen? And how will economic uncertainty impact the risk equation, a particular concern is increase of tax on vulnerable sectors of the population, like the elderly. How will companies and governments protect them from scams? And finally, how many cybersecurity companies can actually remain independent in the slingshot economy? In so many ways the market is still strong, it's just that expectations got ahead of themselves, and now as earnings forecast come, come, come down and come down to earth, it's going to basically come down to who can execute, generate cash, and keep enough runway to get through the knothole. And the one certainty is nobody really knows how tight that knothole really is. All right, let's call it a wrap. Next week we dive deeper into Palo Alto Networks, and take a look at how and why that company has held up so well and what to expect at Ignite, Palo Alto's big user conference coming up later this month in Las Vegas. We'll be there with theCube. Okay, many thanks to Alex Myerson on production and manages the podcast, Ken Schiffman as well, as our newest edition to our Boston studio. Great to have you Ken. Kristin Martin and Cheryl Knight help get the word out on social media and in our newsletters. And Rob Hof is our EIC over at Silicon Angle. He does some great editing for us. Thank you to all. Remember these episodes are all available as podcasts. Wherever you listen, just search Breaking Analysis podcast. I publish each week on wikibond.com and siliconangle.com, or you can email me directly David.vellante@siliconangle.com or DM me @DVellante, or comment on our LinkedIn posts. Please do checkout etr.ai, they got the best survey data in the enterprise tech business. This is Dave Vellante for theCube Insights powered by ETR. Thanks for watching, and we'll see you next time on Breaking Analysis. (upbeat music)

Published Date : Dec 5 2022

SUMMARY :

with Dave Vellante. and of course the elongated

SENTIMENT ANALYSIS :

ENTITIES

EntityCategoryConfidence
Alex MyersonPERSON

0.99+

MicrosoftORGANIZATION

0.99+

Dave VellantePERSON

0.99+

December 2ndDATE

0.99+

OktaORGANIZATION

0.99+

DeltaORGANIZATION

0.99+

Ken SchiffmanPERSON

0.99+

ZscalerORGANIZATION

0.99+

FortinetORGANIZATION

0.99+

Cheryl KnightPERSON

0.99+

Adam CeliskiPERSON

0.99+

CrowdStrikeORGANIZATION

0.99+

CiscoORGANIZATION

0.99+

August 16thDATE

0.99+

April 13thDATE

0.99+

Rob HofPERSON

0.99+

NASDAQORGANIZATION

0.99+

IBMORGANIZATION

0.99+

93%QUANTITY

0.99+

Kristin MartinPERSON

0.99+

Palo AltoLOCATION

0.99+

Arctic Wolf NetworkORGANIZATION

0.99+

38%QUANTITY

0.99+

40%QUANTITY

0.99+

71%QUANTITY

0.99+

JanuaryDATE

0.99+

Palo AltoORGANIZATION

0.99+

Palo Alto NetworksORGANIZATION

0.99+

50%QUANTITY

0.99+

February of 2020DATE

0.99+

Las VegasLOCATION

0.99+

7 billionQUANTITY

0.99+

six companiesQUANTITY

0.99+

SplunkORGANIZATION

0.99+

2022DATE

0.99+

BarracudaORGANIZATION

0.99+

34%QUANTITY

0.99+

24%QUANTITY

0.99+

FebruaryDATE

0.99+

last weekDATE

0.99+

last FridayDATE

0.99+

SailPointORGANIZATION

0.99+

FirstQUANTITY

0.99+

more than 50%QUANTITY

0.99+

85%QUANTITY

0.99+

each weekQUANTITY

0.99+

44%QUANTITY

0.99+

35 billionQUANTITY

0.99+

70 billionQUANTITY

0.99+

KenPERSON

0.99+

KnowBe4ORGANIZATION

0.99+

27%QUANTITY

0.99+

56 billionQUANTITY

0.99+

NetscopeORGANIZATION

0.99+

OctoberDATE

0.99+

Next weekDATE

0.99+

one factorQUANTITY

0.99+

bothQUANTITY

0.99+

hundredsQUANTITY

0.99+

44QUANTITY

0.99+

dozensQUANTITY

0.99+

BeyondTrustORGANIZATION

0.99+

David.vellante@siliconangle.comOTHER

0.99+

24 billionQUANTITY

0.99+

Day 4 Keynote Analysis | AWS re:Invent 2022


 

(upbeat music) >> Good morning everybody. Welcome back to Las Vegas. This is day four of theCUBE's wall-to-wall coverage of our Super Bowl, aka AWS re:Invent 2022. I'm here with my co-host, Paul Gillin. My name is Dave Vellante. Sanjay Poonen is in the house, CEO and president of Cohesity. He's sitting in as our guest market watcher, market analyst, you know, deep expertise, new to the job at Cohesity. He was kind enough to sit in, and help us break down what's happening at re:Invent. But Paul, first thing, this morning we heard from Werner Vogels. He was basically given a masterclass on system design. It reminded me of mainframes years ago. When we used to, you know, bury through those IBM blue books and red books. You remember those Sanjay? That's how we- learned back then. >> Oh God, I remember those, Yeah. >> But it made me think, wow, now you know IBM's more of a systems design, nobody talks about IBM anymore. Everybody talks about Amazon. So you wonder, 20 years from now, you know what it's going to be. But >> Well- >> Werner's amazing. >> He pulled out a 24 year old document. >> Yup. >> That he had written early in Amazon's evolution about synchronous design or about essentially distributed architectures that turned out to be prophetic. >> His big thing was nature is asynchronous. So systems are asynchronous. Synchronous is an illusion. It's an abstraction. It's kind of interesting. But, you know- >> Yeah, I mean I've had synonyms for things. Timeless architecture. Werner's an absolute legend. I mean, when you think about folks who've had, you know, impact on technology, you think of people like Jony Ive in design. >> Dave: Yeah. >> You got to think about people like Werner in architecture and just the fact that Andy and the team have been able to keep him engaged that long... I pay attention to his keynote. Peter DeSantis has obviously been very, very influential. And then of course, you know, Adam did a good job, you know, watching from, you know, having watched since I was at the first AWS re:Invent conference, at time was President SAP and there was only a thousand people at this event, okay? Andy had me on stage. I think I was one of the first guest of any tech company in 2011. And to see now this become like, it's a mecca. It's a mother of all IT events, and watch sort of even the transition from Andy to Adam is very special. I got to catch some of Ruba's keynote. So while there's some new people in the mix here, this has become a force of nature. And the last time I was here was 2019, before Covid, watched the last two ones online. But it feels like, I don't know 'about what you guys think, it feels like it's back to 2019 levels. >> I was here in 2019. I feel like this was bigger than 2019 but some people have said that it's about the same. >> I think it was 60,000 versus 50,000. >> Yes. So close. >> It was a little bigger in 2019. But it feels like it's more active. >> And then last year, Sanjay, you weren't here but it was 25,000, which was amazing 'cause it was right in that little space between Omicron, before Omicron hit. But you know, let me ask you a question and this is really more of a question about Amazon's maturity and I know you've been following them since early days. But the way I get the question, number one question I get from people is how is Amazon AWS going to be different under Adam than it was under Andy? What do you think? >> I mean, Adam's not new because he was here before. In some senses he knows the Amazon culture from prior, when he was running sales and marketing prior. But then he took the time off and came back. I mean, this will always be, I think, somewhat Andy's baby, right? Because he was the... I, you know, sent him a text, "You should be really proud of what you accomplished", but you know, I think he also, I asked him when I saw him a few weeks ago "Are you going to come to re:Invent?" And he says, "No, I want to leave this to be Adam's show." And Adam's going to have a slightly different view. His keynotes are probably half the time. It's a little bit more vision. There was a lot more customer stories at the beginning of it. Taking you back to the inspirational pieces of it. I think you're going to see them probably pulling up the stack and not just focused in infrastructure. Many of their platform services are evolved. Many of their, even application services. I'm surprised when I talk to customers. Like Amazon Connect, their sort of call center type technologies, an app layer. It's getting a lot. I mean, I've talked to a couple of Fortune 500 companies that are moving off Ayer to Connect. I mean, it's happening and I did not know that. So it's, you know, I think as they move up the stack, the platform's gotten more... The data centric stack has gotten, and you know, in the area we're working with Cohesity, security, data protection, they're an investor in our company. So this is an important, you know, both... I think tech player and a partner for many companies like us. >> I wonder the, you know, the marketplace... there's been a big push on the marketplace by all the cloud companies last couple of years. Do you see that disrupting the way softwares, enterprise software is sold? >> Oh, for sure. I mean, you have to be a ostrich with your head in the sand to not see this wave happening. I mean, what's it? $150 billion worth of revenue. Even though the growth rates dipped a little bit the last quarter or so, it's still aggregatively between Amazon and Azure and Google, you know, 30% growth. And I think we're still in the second or third inning off a grand 1 trillion or 2 trillion of IT, shifting not all of it to the cloud, but significantly faster. So if you add up all of the big things of the on-premise world, they're, you know, they got to a certain size, their growth is stable, but stalling. These guys are growing significantly faster. And then if you add on top of them, platform companies the data companies, Snowflake, MongoDB, Databricks, you know, Datadog, and then apps companies on top of that. I think the move to the Cloud is inevitable. In SaaS companies, I don't know why you would ever implement a CRM solution on-prem. It's all gone to the Cloud. >> Oh, it is. >> That happened 15 years ago. I mean, begin within three, five years of the advent of Salesforce. And the same thing in HR. Why would you deploy a HR solution now? You've got Workday, you've got, you know, others that are so some of those apps markets are are just never coming back to an on-prem capability. >> Sanjay, I want to ask you, you built a reputation for being able to, you know, forecast accurately, hit your plan, you know, you hit your numbers, you're awesome operator. Even though you have a, you know, technology degree, which you know, that's a two-tool star, multi-tool star. But I call it the slingshot economy. This is like, I mean I've seen probably more downturns than anybody in here, you know, given... Well maybe, maybe- >> Maybe me. >> You and I both. I've never seen anything like this, where where visibility is so unpredictable. The economy is sling-shotting. It's like, oh, hurry up, go Covid, go, go go build, build, build supply, then pull back. And now going forward, now pulling back. Slootman said, you know, on the call, "Hey the guide, is the guide." He said, "we put it out there, We do our best to hit it." But you had CrowdStrike had issues you know, mid-market, ServiceNow. I saw McDermott on the other day on the, on the TV. I just want to pay, you know, buy from the guy. He's so (indistinct) >> But mixed, mixed results, Salesforce, you know, Octa now pre-announcing, hey, they're going to be, or announcing, you know, better visibility, forward guide. Elastic kind of got hit really hard. HPE and Dell actually doing really well in the enterprise. >> Yep. >> 'Course Dell getting killed in the client. But so what are you seeing out there? How, as an executive, do you deal with such poor visibility? >> I think, listen, what the last two or three years have taught us is, you know, with the supply chain crisis, with the surge that people thought you may need of, you know, spending potentially in the pandemic, you have to start off with your tech platform being 10 x better than everybody else. And differentiate, differentiate. 'Cause in a crowded market, but even in a market that's getting tougher, if you're not differentiating constantly through technology innovation, you're going to get left behind. So you named a few places, they're all technology innovators, but even if some of them are having challenges, and then I think you're constantly asking yourselves, how do you move from being a point product to a platform with more and more services where you're getting, you know, many of them moving really fast. In the case of Roe, I like him a lot. He's probably one of the most savvy operators, also that I respect. He calls these speedboats, and you know, his core platform started off with the firewall network security. But he's built now a very credible cloud security, cloud AI security business. And I think that's how you need to be thinking as a tech executive. I mean, if you got core, your core beachhead 10 x better than everybody else. And as you move to adjacencies in these new platforms, have you got now speedboats that are getting to a point where they are competitive advantage? Then as you think of the go-to-market perspective, it really depends on where you are as a company. For a company like our size, we need partners a lot more. Because if we're going to, you know, stand on the shoulders of giants like Isaac Newton said, "I see clearly because I stand on the shoulders giants." I need to really go and cultivate Amazon so they become our lead partner in cloud. And then appropriately Microsoft and Google where I need to. And security. Part of what we announced last week was, last month, yeah, last couple of weeks ago, was the data security alliance with the biggest security players. What was I trying to do with that? First time ever done in my industry was get Palo Alto, CrowdStrike, Wallace, Tenable, CyberArk, Splunk, all to build an alliance with me so I could stand on their shoulders with them helping me. If you're a bigger company, you're constantly asking yourself "how do you make sure you're getting your, like Amazon, their top hundred customers spending more with that?" So I think the the playbook evolves, and I'm watching some of these best companies through this time navigate through this. And I think leadership is going to be tested in enormously interesting ways. >> I'll say. I mean, Snowflake is really interesting because they... 67% growth, which is, I mean, that's best in class for a company that's $2 billion. And, but their guide was still, you know, pretty aggressive. You know, so it's like, do you, you know, when it when it's good times you go, "hey, we can we can guide conservatively and know we can beat it." But when you're not certain, you can't dial down too far 'cause your investors start to bail on you. It's a really tricky- >> But Dave, I think listen, at the end of the day, I mean every CEO should not be worried about the short term up and down in the stock price. You're building a long-term multi-billion dollar company. In the case of Frank, he has, I think I shot to a $10 billion, you know, analytics data warehousing data management company on the back of that platform, because he's eyeing the market that, not just Teradata occupies today, but now Oracle occupies or other databases, right? So his tam as it grows bigger, you're going to have some of these things, but that market's big. I think same with Palo Alto. I mean Datadog's another company, 75% growth. >> Yeah. >> At 20% margins, like almost rule of 95. >> Amazing. >> When they're going after, not just the observability market, they're eating up the sim market, security analytics, the APM market. So I think, you know, that's, you look at these case studies of companies who are going from point product to platforms and are steadily able to grow into new tams. You know, to me that's very inspiring. >> I get it. >> Sanjay: That's what I seek to do at our com. >> I get that it's a marathon, but you know, when you're at VMware, weren't you looking at the stock price every day just out of curiosity? I mean listen, you weren't micromanaging it. >> You do, but at the end of the day, and you certainly look at the days of earnings and so on so forth. >> Yeah. >> Because you want to create shareholder value. >> Yeah. >> I'm not saying that you should not but I think in obsession with that, you know, in a short term, >> Going to kill ya. >> Makes you, you know, sort of myopically focused on what may not be the right thing in the long term. Now in the long arc of time, if you're not creating shareholder value... Look at what happened to Steve Bomber. You needed Satya to come in to change things and he's created a lot of value. >> Dave: Yeah, big time. >> But I think in the short term, my comments were really on the quarter to quarter, but over a four a 12 quarter, if companies are growing and creating profitable growth, they're going to get the valuation they deserve. >> Dave: Yeah. >> Do you the... I want to ask you about something Arvind Krishna said in the previous IBM earnings call, that IT is deflationary and therefore it is resistant to the macroeconomic headwinds. So IT spending should actually thrive in a deflation, in a adverse economic climate. Do you think that's true? >> Not all forms of IT. I pay very close attention to surveys from, whether it's the industry analysts or the Morgan Stanleys, or Goldman Sachs. The financial analysts. And I think there's a gluc in certain sectors that will get pulled back. Traditional view is when the economies are growing people spend on the top line, front office stuff, sales, marketing. If you go and look at just the cloud 100 companies, which are the hottest private companies, and maybe with the public market companies, there's way too many companies focused on sales and marketing. Way too many. I think during a downsizing and recession, that's going to probably shrink some, because they were all built for the 2009 to 2021 era, where it was all about the top line. Okay, maybe there's now a proposition for companies who are focused on cost optimization, supply chain visibility. Security's been intangible, that I think is going to continue to an investment. So I tell, listen, if you are a tech investor or if you're an operator, pay attention to CIO priorities. And right now, in our business at Cohesity, part of the reason we've embraced things like ransomware protection, there is a big focus on security. And you know, by intelligently being a management and a security company around data, I do believe we'll continue to be extremely relevant to CIO budgets. There's a ransomware, 20 ransomware attempts every second. So things of that kind make you relevant in a bank. You have to stay relevant to a buying pattern or else you lose momentum. >> But I think what's happening now is actually IT spending's pretty good. I mean, I track this stuff pretty closely. It's just that expectations were so high and now you're seeing earnings estimates come down and so, okay, and then you, yeah, you've got the, you know the inflationary factors and your discounted cash flows but the market's actually pretty good. >> Yeah. >> You know, relative to other downturns that if this is not a... We're not actually not in a downturn. >> Yeah. >> Not yet anyway. It may be. >> There's a valuation there. >> You have to prepare. >> Not sales. >> Yeah, that's right. >> When I was on CNBC, I said "listen, it's a little bit like that story of Joseph. Seven years of feast, seven years of famine." You have to prepare for potentially your worst. And if it's not the worst, you're in good shape. So will it be a recession 2023? Maybe. You know, high interest rates, inflation, war in Russia, Ukraine, maybe things do get bad. But if you belt tightening, if you're focused in operational excellence, if it's not a recession, you're pleasantly surprised. If it is one, you're prepared for it. >> All right. I'm going to put you in the spot and ask you for predictions. Expert analysis on the World Cup. What do you think? Give us the breakdown. (group laughs) >> As my... I wish India was in the World Cup, but you can't get enough Indians at all to play soccer well enough, but we're not, >> You play cricket, though. >> I'm a US man first. I would love to see one of Brazil, or Argentina. And as a Messi person, I don't know if you'll get that, but it would be really special for Messi to lead, to end his career like Maradonna winning a World Cup. I don't know if that'll happen. I'm probably going to go one of the Latin American countries, if the US doesn't make it far enough. But first loyalty to the US team, and then after one of the Latin American countries. >> And you think one of the Latin American countries is best bet to win or? >> I don't know. It's hard to tell. They're all... What happens now at this stage >> So close, right? >> is anybody could win. >> Yeah. You just have lots of shots of gold. I'm a big soccer fan. It could, I mean, I don't know if the US is favored to win, but if they get far enough, you get to the finals, anybody could win. >> I think they get Netherlands next, right? >> That's tough. >> Really tough. >> But... The European teams are good too, but I would like to see US go far enough, and then I'd like to see Latin America with team one of Argentina, or Brazil. That's my prediction. >> I know you're a big Cricket fan. Are you able to follow Cricket the way you like? >> At god unearthly times the night because they're in Australia, right? >> Oh yeah. >> Yeah. >> I watched the T-20 World Cup, select games of it. Yeah, you know, I'm not rapidly following every single game but the World Cup games, I catch you. >> Yeah, it's good. >> It's good. I mean, I love every sport. American football, soccer. >> That's great. >> You get into basketball now, I mean, I hope the Warriors come back strong. Hey, how about the Warriors Celtics? What do we think? We do it again? >> Well- >> This year. >> I'll tell you what- >> As a Boston Celtics- >> I would love that. I actually still, I have to pay off some folks from Palo Alto office with some bets still. We are seeing unprecedented NBA performance this year. >> Yeah. >> It's amazing. You look at the stats, it's like nothing. I know it's early. Like nothing we've ever seen before. So it's exciting. >> Well, always a pleasure talking to you guys. >> Great to have you on. >> Thanks for having me. >> Thank you. Love the expert analysis. >> Sanjay Poonen. Dave Vellante. Keep it right there. re:Invent 2022, day four. We're winding up in Las Vegas. We'll be right back. You're watching theCUBE, the leader in enterprise and emerging tech coverage. (lighthearted soft music)

Published Date : Dec 1 2022

SUMMARY :

When we used to, you know, Yeah. So you wonder, 20 years from now, out to be prophetic. But, you know- I mean, when you think you know, watching from, I feel like this was bigger than 2019 I think it was 60,000 But it feels like it's more active. But you know, let me ask you a question So this is an important, you know, both... I wonder the, you I mean, you have to be a ostrich you know, others that are so But I call it the slingshot economy. I just want to pay, you or announcing, you know, better But so what are you seeing out there? I mean, if you got core, you know, pretty aggressive. I think I shot to a $10 billion, you know, like almost rule of 95. So I think, you know, that's, I seek to do at our com. I mean listen, you and you certainly look Because you want to Now in the long arc of time, on the quarter to quarter, I want to ask you about And you know, by intelligently But I think what's happening now relative to other downturns It may be. But if you belt tightening, to put you in the spot but you can't get enough Indians at all But first loyalty to the US team, It's hard to tell. if the US is favored to win, and then I'd like to see Latin America the way you like? Yeah, you know, I'm not rapidly I mean, I love every sport. I mean, I hope the to pay off some folks You look at the stats, it's like nothing. talking to you guys. Love the expert analysis. in enterprise and emerging tech coverage.

SENTIMENT ANALYSIS :

ENTITIES

EntityCategoryConfidence
AndyPERSON

0.99+

Dave VellantePERSON

0.99+

MessiPERSON

0.99+

Sanjay PoonenPERSON

0.99+

FrankPERSON

0.99+

DavePERSON

0.99+

MicrosoftORGANIZATION

0.99+

WernerPERSON

0.99+

AmazonORGANIZATION

0.99+

GoogleORGANIZATION

0.99+

Paul GillinPERSON

0.99+

AdamPERSON

0.99+

Steve BomberPERSON

0.99+

SanjayPERSON

0.99+

Jony IvePERSON

0.99+

$2 billionQUANTITY

0.99+

DellORGANIZATION

0.99+

2019DATE

0.99+

2011DATE

0.99+

Peter DeSantisPERSON

0.99+

$150 billionQUANTITY

0.99+

$10 billionQUANTITY

0.99+

PaulPERSON

0.99+

last weekDATE

0.99+

AustraliaLOCATION

0.99+

Isaac NewtonPERSON

0.99+

last monthDATE

0.99+

Las VegasLOCATION

0.99+

2009DATE

0.99+

SlootmanPERSON

0.99+

60,000QUANTITY

0.99+

Goldman SachsORGANIZATION

0.99+

Arvind KrishnaPERSON

0.99+

IBMORGANIZATION

0.99+

TenableORGANIZATION

0.99+

2 trillionQUANTITY

0.99+

Las VegasLOCATION

0.99+

CohesityORGANIZATION

0.99+

50,000QUANTITY

0.99+

RubaPERSON

0.99+

24 yearQUANTITY

0.99+

secondQUANTITY

0.99+

30%QUANTITY

0.99+

Boston CelticsORGANIZATION

0.99+

CyberArkORGANIZATION

0.99+

OracleORGANIZATION

0.99+

MaradonnaPERSON

0.99+

CrowdStrikeORGANIZATION

0.99+

thirdQUANTITY

0.99+

last yearDATE

0.99+

WallaceORGANIZATION

0.99+

World CupEVENT

0.99+

SplunkORGANIZATION

0.99+

WarriorsORGANIZATION

0.99+

HPEORGANIZATION

0.99+

Palo AltoORGANIZATION

0.99+

Morgan StanleysORGANIZATION

0.99+

DatadogORGANIZATION

0.99+

Werner VogelsPERSON

0.99+

DatabricksORGANIZATION

0.99+

Palo AltoLOCATION

0.99+

Super BowlEVENT

0.99+

SnowflakeORGANIZATION

0.99+

bothQUANTITY

0.99+

World CupEVENT

0.99+

Patrick Coughlin, Splunk | AWS re:Invent 2022


 

>>Hello and welcome back to the Cube's coverage of AWS Reinvent 2022. I'm John Furrier, host of the Cube. We got a great conversation with Patrick Kauflin, vice president of Go to Market Strategy and specialization at Splunk. We're talking about the open cybersecurity scheme of framework, also known as the O C sf, a joint strategic collaboration between Splunk and aws. It's got a lot of traction momentum. Patrick, thanks for coming on the cube for reinvent coverage. >>John, great to be here. I'm excited for this. >>You know, I love this open source movement and open source and continues to add value, almost sets the standards. You know, we were talking at the CNCF Linux Foundation this past fall about how standards are coming outta open source. Not so much the the classic standards groups, but you start to see the developers voting with their code groups deciding what to adopt de facto standards and security is a real key part of that where data becomes key for resilience. And this has been the top conversation at reinvent and all around the industry, is how to make data a key part of building into cyber resilience. So I wanna get your thoughts about the problem that you see that's emerging that you guys are solving with this group kind of collaboration around the ocs f >>Yeah, well look, John, I I think, I think you, you've already, you've already hit the high notes there. Data is proliferating across the enterprise. The attack surface area is rapidly expanding. The threat landscape is ever changing. You know, we, we just had a, a lot of scares around open SSL before that we had vulnerabilities and, and Confluence and Atlassian, and you go back to log four J and SolarWinds before that and, and challenges with the supply chain. In this year in particular, we've had a, a huge acceleration in, in concerns and threat vectors around operational technology. In our customer base alone, we saw a huge uptake, you know, and double digit percentage of customers that we're concerned about the traditional vectors like, like ransomware, like business email compromise, phishing, but also from insider threat and others. So you've got this, this highly complex environment where data continues to proliferate and flow through new applications, new infrastructure, new services, driving different types of outcomes in the digitally transformed enterprise of today. >>And, and what happens there is, is our customers, particularly in security, are, are left with having to stitch all of this together. And they're trying to get visibility across multiple different services, infrastructure applications across a number of different point solutions that they've bought to help them protect, defend, detect, and respond better. And it's a massive challenge. And you know, when our, when our customers come to us, they are often looking for ways to drive more consolidation across a variety of different solutions. They're looking to drive better outcomes in terms of speed to detection. How do I detect faster? How do I bind the thing that when bang in the night faster? How do I then fix it quickly? And then how do I layer in some automation so hopefully I don't have to do it again? Now, the challenge there that really OCF Ocsf helps to, to solve is to do that effectively, to detect and to respond at the speed at which attackers are demanding. >>Today we have to have normalization of data across this entire landscape of tools, infrastructure, services. We have to have integration to have visibility, and these tools have to work together. But the biggest barrier to that is often data is stored in different structures and in different formats across different solution providers, across different tools that are, that are, that our customers are using. And that that lack of data, normalization, chokes the integration problem. And so, you know, several years ago, a number of very smart people, and this was, this was a initiative s started by Splunk and AWS came together and said, look, we as an industry have to solve this for our customers. We have to start to shoulder this burden for our customers. We can't, we can't make our customers have to be systems integrators. That's not their job. Our job is to help make this easier for them. And so OCS was born and over the last couple of years we've built out this, this collaboration to not just be AWS and Splunk, but over 50 different organizations, cloud service providers, solution providers in the cybersecurity space have come together and said, let's decide on a single unified schema for how we're gonna represent event data in this industry. And I'm very proud to be here today to say that we've launched it and, and I can't wait to see where we go next. >>Yeah, I mean, this is really compelling. I mean, it's so much packed in that, in that statement, I mean, data normalization, you mentioned chokes, this the, the solution and integration as you call it. But really also it's like data's not just stored in silos. It may not even be available, right? So if you don't have availability of data, that's an important point. Number two, you mentioned supply chain, there's physical supply chain that's coming up big time at reinvent this time as well as in open source, the software supply chain. So you now have the perimeter's been dead for multiple years. We've been talking with that for years, everybody knows that. But now combined with the supply chain problem, both physical and software, there's so much more to go on. And so, you know, the leaders in the industry, they're not sitting on their hands. They know this, but they're just overloaded. So, so how do leaders deal with this right now before we get into the ocs f I wanna just get your thoughts on what's the psychology of the, of the business leader who's facing this landscape? >>Yeah, well, I mean unfortunately too many leaders feel like they have to face these trade offs between, you know, how and where they are really focusing cyber resilience investments in the business. And, and often there is a siloed approach across security, IT developer operations or engineering rather than the ability to kind of drive visibility integration and, and connection of outcomes across those different functions. I mean, the truth is the telemetry that, that you get from an application for application performance monitoring or infrastructure monitoring is often incredibly valuable when there's a security incident and vice versa. Some of the security data that, that you may see in a security operation center can be incredibly valuable in trying to investigate a, a performance degradation in an application and understanding where that may come from. And so what we're seeing is this data layer is collapsing faster than the org charts are or the budget line items are in the enterprise. And so at Splunk here, you know, we believe security resilience is, is fundamentally a data problem. And one of the things that we do often is, is actually help connect the dots for our customers and bring our customers together across the silos they may have internally so that they can start to see a holistic picture of what resilience means for their enterprise and how they can drive faster detection outcomes and more automation coverage. >>You know, we recently had an event called Super Cloud, we're going into the next gen kind of a cloud, how data and security are all kind of part of this NextGen application. It's not just us. And we had a panel that was titled The Innovators Dilemma, kind of talk about you some of the challenges. And one of the panelists said, it's not the innovator's dilemma, it's the integrator's dilemma. And you mentioned that earlier, and I think this a key point right now into integration is so critical, not having the data and putting pieces together now open source is becoming a composability market. And I think having things snap together and work well, it's a platform system conversation, not a tool conversation. So I really wanna get into where the OCS f kind of intersects with this area people are working on. It's not just solution architects or cloud cloud native SREs, especially where DevSecOps is. So this that's right, this intersection is critical. How does Ocsf integrate into that integration of the data making that available to make machine learning and automation smarter and more relevant? >>Right, right. Well look, I mean, I I think that's a fantastic question because, you know, we talk about, we use Bud buzzwords like machine learning and, and AI all the time. And you know, I know they're all over the place here at Reinvent and, and the, there's so much promise and hope out there around these technologies and these innovations. However, machine learning AI is only as effective as the data is clean and normalized. And, and we will not realize the promise of these technologies for outcomes in resilience unless we have better ways to normalize data upstream and better ways to integrate that data to the downstream tools where detection and response is happening. And so Ocsf was really about the industry coming together and saying, this is no longer the job of our customers. We are going to create a unified schema that represents the, an event that we will all bite down on. >>Even some of us are competitors, you know, this is, this is that, that no longer matters because at the point, the point is how do we take this burden off of our customers and how do we make the industry safer together? And so 15 initial members came together along with AWS and Splunk to, to start to create that, that initial schema and standardize it. And if you've ever, you know, if you've ever worked with a bunch of technical grumpy security people, it's kind of hard to drive consensus about around just about anything. But, but I, I'm really happy to see how quickly this, this organization has come together, has open sourced the schema, and, and, and just as you said, like I think this, this unlocks the potential for real innovation that's gonna be required to keep up with the bad guys. But right now is getting stymied and held back by the lack of normalization and the lack of integration. >>I've always said Splunk was a, it eats data for breakfast, lunch, and dinner and turns it into insights. And I think you bring up the silo thing. What's interesting is the cross company sharing, I think this hits point on, so I see this as a valuable opportunity for the industry. What's the traction on that? Because, you know, to succeed it does take a village, it takes a community of security practitioners and, and, and architects and developers to kind of coalesce around this defacto movement has been, has been the uptake been good? How's traction? Can you share your thoughts on how this is translating across companies? >>Yeah, absolutely. I mean, look, I, I think cybersecurity has a, has a long track record of, of, of standards development. There's been some fantastic standards recently. Things like sticks and taxi for threat intelligence. There's been things like the, you know, the Mir attack framework coming outta mi mir and, and, and the adoption, the traction that we've seen with Attack in particular has been amazing to, to watch how that has kind of roared onto the scene in the last couple of years and has become table stakes for how you do security operations and incident response. And, you know, I think with ocs f we're gonna see something similar here, but, you know, we are in literally the first innings of, of this. So right now, you know, we're architecting this into our, into every part of our sort of backend systems here at Polan. I know our our collaborators at AWS and elsewhere are doing it too. >>And so I think it starts with bringing this standard now that the standard exists on a, you know, in schema format and there, there's, you know, confluence and Jira tickets around it, how do we then sort of build this into the code of, of the, the collaborators that have been leading the way on this? And you know, it's not gonna happen overnight, but I think in the coming quarters you'll start to see this schema be the standard across the leaders in this space. Companies like Splunk and AWS and others who are leading the way. And often that's what helps drive adoption of a standard is if you can get the, the big dogs, so to speak, to, to, to embrace it. And, and, you know, there's no bigger one than aws and I think there's no, no more important one than Splunk in the cybersecurity space. And so as we adopt this, we hope others will follow. And, and like I said, we've got over 50 organizations contributing to it today. And so I think we're off to a running >>Start. You know, it's interesting, choking innovation or having things kind of get, get slowed down has really been a problem. We've seen successes recently over the past few years. Like Kubernetes has really unlocked and accelerated the cloud native worlds of runtime with containers to, to kind of have the consensus of the community to say, Hey, if we just do this, it gets better. I think this is really compelling with the o the ocs F because if people can come together around this and get unified as well as all the other official standards, things can go highly accelerated. So I think, I think it looks really good and I think it's great initiative and I really appreciate your insight on that, on, on your relationship with Amazon. Okay. It's not just a partnership, it's a strategic collaboration. Could you share that relationship dynamic, how to start, how's it going, what's strategic about it? Share to the audience kind of the relationship between Splunk and a on this important OCS ocsf initiative. >>Look, I, I mean I think this, this year marks the, the 10th year anniversary that, that Splunk and AWS have been collaborating in a variety of different ways. I, I think our, our companies have a fantastic and, and long standing relationship and we've, we've partnered on a number of really important projects together that bring value obviously to our individual companies, but also to our shared customers. When I think about some of the most important customers at Splunk that I spend a significant amount of time with, I I I know how many of those are, are AWS customers as well, and I know how important AWS is to them. So I think it's, it's a, it's a collaboration that is rooted in, in a respect for each other's technologies and innovation, but also in a recognition that, that our shared customers want to see us work better together over time. And it's not, it's not two companies that have kind of decided in a back room that they should work together. It's actually our customers that are, that are pushing us. And I think we're, we're both very customer centric organizations and I think that has helped us actually be better collaborators and better partners together because we're, we're working back backwards from our customers >>As security becomes a physical and software approach. We've seen the trend where even Steven Schmidt at Amazon Web Services is, is the cso, he is not the CSO anymore. So, and I asked him why, he says, well, security's also physical stuff too. So, so he's that's right. Whole lens is now expanded. You mentioned supply chain, physical, digital, this is an important inflection point. Can you summarize in your mind why open cybersecurity schema for is important? I know the unification, but beyond that, what, why is this so important? Why should people pay attention to this? >>You know, I, if, if you'll let me be just a little abstract in meta for a second. I think what's, what's really meaningful at the highest level about the O C S F initiative, and that goes beyond, I think, the tactical value it will provide to, to organizations and to customers in terms of making them safer over the coming years and, and decades. I think what's more important than that is it's really the, one of the first times that you've seen the industry come together and say, we got a problem. We need to solve. That, you know, doesn't really have anything to do with, with our own economics. Our customers are, are hurt. And yeah, some of us may be competitors, you know, we got different cloud service providers that are participating in this along with aws. We got different cybersecurity solution providers participating in this along with Splunk. >>But, but folks who've come together and say, we can actually solve this problem if, if we're able to kind of put aside our competitive differences in the markets and approach this from the perspective of what's best for information security as a whole. And, and I think that's what I'm most proud of and, and what I hope we can do more of in other places in this industry, because I think that kind of collaboration from real market leaders can actually change markets. It can change the, the, the trend lines in terms of how we are keeping up with the bad guys. And, and I'd like to see a lot more of >>That. And we're seeing a lot more new kind of things emerging in the cloud next kind of this next generation architecture and outcomes are happening. I think it's interesting, you know, we always talk about sustainability, supply chain sustainability about making the earth a better place. But you're hitting on this, this meta point about businesses are under threat of going under. I mean, we want to keep businesses to businesses to be sustainable, not just, you know, the, the environment. So if a business goes outta business business, which they, their threats here are, can be catastrophic for companies. I mean, there is, there is a community responsibility to protect businesses so they can sustain and and stay Yeah. Stay producing. This is a real key point. >>Yeah. Yeah. I mean, look, I think, I think one of the things that, you know, we, we, we complain a lot of in, in cyber security about the lack of, of talent, the talent shortage in cyber security. And every year we kinda, we kind of whack ourselves over the head about how hard it is to bring people into this industry. And it's true. But one of the things that I think we forget, John, is, is how important mission is to so many people in what they do for a living and how they work. And I think one of the things that cybersecurity is strongest in information Security General and has been for decades is this sense of mission and people work in this industry be not because it's, it's, it's always the, the, the most lucrative, but because it, it really drives a sense of safety and security in the enterprises and the fabric of the economy that we use every day to go through our lives. And when I think about the spun customers and AWS customers, I think about the, the different products and tools that power my life and, and we need to secure them. And, and sometimes that means coming to work every day at that company and, and doing your job. And sometimes that means working with others better, faster, and stronger to help drive that level of, of, of maturity and security that this industry >>Needs. It's a human, is a human opportunity, human problem and, and challenge. That's a whole nother segment. The role of the talent and the human machines and with scale. Patrick, thanks so much for sharing the information and the insight on the Open cybersecurity schema frame and what it means and why it's important. Thanks for sharing on the Cube, really appreciate it. >>Thanks for having me, John. >>Okay, this is AWS Reinvent 2022 coverage here on the Cube. I'm John Furry, you're the host. Thanks for watching.

Published Date : Nov 30 2022

SUMMARY :

I'm John Furrier, host of the Cube. John, great to be here. Not so much the the classic standards groups, and you go back to log four J and SolarWinds before that and, And you know, when our, when our customers come But the biggest barrier to that is often data And so, you know, the leaders in the industry, they're not sitting on their hands. And one of the things that we do often is, And one of the panelists said, it's not the innovator's dilemma, it's the integrator's dilemma. And you know, I know they're all over the place here at Reinvent and, and the, has open sourced the schema, and, and, and just as you said, like I think this, And I think you bring up the silo thing. that has kind of roared onto the scene in the last couple of years and has become table And you know, it's not gonna happen overnight, but I think in the coming quarters you'll start to see I think this is really compelling with the o the And I think we're, we're both very customer centric organizations I know the unification, but beyond that, what, why is you know, we got different cloud service providers that are participating in this along with aws. And, and I'd like to see a lot more of I think it's interesting, you know, we always talk about sustainability, But one of the things that I think we forget, John, is, is how important The role of the talent and the human machines and with scale. Okay, this is AWS Reinvent 2022 coverage here on the Cube.

SENTIMENT ANALYSIS :

ENTITIES

EntityCategoryConfidence
AWSORGANIZATION

0.99+

Patrick KauflinPERSON

0.99+

JohnPERSON

0.99+

PatrickPERSON

0.99+

AmazonORGANIZATION

0.99+

SplunkORGANIZATION

0.99+

Steven SchmidtPERSON

0.99+

John FurryPERSON

0.99+

John FurrierPERSON

0.99+

Amazon Web ServicesORGANIZATION

0.99+

Patrick CoughlinPERSON

0.99+

two companiesQUANTITY

0.99+

awsORGANIZATION

0.99+

TodayDATE

0.99+

oneQUANTITY

0.99+

bothQUANTITY

0.99+

todayDATE

0.98+

CNCF Linux FoundationORGANIZATION

0.98+

ConfluenceORGANIZATION

0.98+

15 initial membersQUANTITY

0.98+

this yearDATE

0.98+

several years agoDATE

0.98+

ReinventORGANIZATION

0.97+

OCSORGANIZATION

0.97+

singleQUANTITY

0.97+

over 50 organizationsQUANTITY

0.97+

SolarWindsORGANIZATION

0.96+

first timesQUANTITY

0.95+

JORGANIZATION

0.95+

The Innovators DilemmaTITLE

0.95+

SplunkPERSON

0.94+

PolanORGANIZATION

0.92+

OcsfORGANIZATION

0.89+

decadesQUANTITY

0.89+

NextGenORGANIZATION

0.88+

earthLOCATION

0.88+

Go to Market StrategyORGANIZATION

0.87+

OcsfTITLE

0.87+

MirTITLE

0.86+

CubeCOMMERCIAL_ITEM

0.85+

AtlassianORGANIZATION

0.85+

organizationsQUANTITY

0.82+

10th year anniversaryQUANTITY

0.82+

last couple of yearsDATE

0.81+

over 50QUANTITY

0.79+

2022TITLE

0.79+

yearsQUANTITY

0.76+

Reinvent 2022TITLE

0.75+

OCFORGANIZATION

0.74+

first inningsQUANTITY

0.74+

DevSecOpsTITLE

0.73+

secondQUANTITY

0.7+

past fallDATE

0.68+

CTITLE

0.66+

JiraTITLE

0.65+

yearsDATE

0.63+

Super CloudEVENT

0.58+

the panelistsQUANTITY

0.56+

KubernetesTITLE

0.53+

Clint Sharp, Cribl | AWS re:Invent 2022


 

(upbeat music) (background crowd chatter) >> Hello, fantastic cloud community and welcome back to Las Vegas where we are live from the show floor at AWS re:Invent. My name is Savannah Peterson. Joined for the first time. >> Yeah, Doobie. >> VIP, I know. >> All right, let's do this. >> Thanks for having me Dave, I really appreciate it. >> I appreciate you doing all the hard work. >> Yeah. (laughs) >> You, know. >> I don't know about that. We wouldn't be here without you and all these wonderful stories that all the businesses have. >> Well, when I host with John it's hard for me to get a word in edgewise. I'm just kidding, John. (Savannah laughing) >> Shocking, I've never want that experience. >> We're like knocking each other, trying to, we're elbowing. No, it's my turn to speak, (Savannah laughing) so I'm sure we're going to work great together. I'm really looking forward to it. >> Me too Dave, I feel very lucky to be here and I feel very lucky to introduce our guest this afternoon, Clint Sharp, welcome to the show. You are with Cribl. Yeah, how does it feel to be on the show floor today? >> It's amazing to be back at any conference in person and this one is just electric, I mean, there's like a ton of people here love the booth. We're having like a lot of activity. It's been really, really exciting to be here. >> So you're a re:Ieinvent alumni? Have you been here before? You're a Cube alumni. We're going to have an OG conversation about observability, I'm looking forward to it. Just in case folks haven't been watching theCUBE for the last nine years that you've been on it. I know you've been with a few different companies during that time period. Love that you've been with us since 2013. Give us the elevator pitch for Cribl. >> Yeah, so Cribl is an observability company which we're going to talk about today. Our flagship product is a telemetry router. So it just really helps you get data into the right places. We're very specifically in the observability and security markets, so we sell to those buyers and we help them work with logs and metrics and open telemetry, lots of different types of data to get it into the right systems. >> Why did observability all of a sudden become such a hot thing? >> Savannah: Such a hot topic. >> Right, I mean it just came on the scene so quickly and now it's obviously a very crowded space. So why now, and how do you guys differentiate from the crowd? >> Yeah, sure, so I think it's really a post-digital transformation thing Dave, when I think about how I interact with organizations you know, 20 years ago when I started this business I called up American Airlines when things weren't working and now everything's all done digitally, right? I rarely ever interact with a human being and yet if I go on one of these apps and I get a bad experience, switching is just as easy as booking another airline or changing banks or changing telecommunications providers. So companies really need an ability to dive into this data at very high fidelity to understand what Dave's experience with their service or their applications are. And for the same reasons on the security side, we need very, very high fidelity data in order to understand whether malicious actors are working their way around inside of the enterprise. And so that's really changed the tooling that we had, which, in prior years, it was really hard to ask arbitrary questions of that data. You really had to deal with whatever the vendor gave you or you know, whatever the tool came with. And observability is really an evolution, allowing people to ask and answer questions of their data that they really weren't planning in advance. >> Dave: Like what kind of questions are people asking? >> Yeah sure so what is Dave's performance with this application? I see that a malicious actor has made their way on the inside of my network. Where did they go? What did they do? What files did they access? What network connections did they open? And the scale of machine data of this machine to machine communication is so much larger than what you tend to see with like human generated data, transactional data, that we really need different systems to deal with that type of data. >> And what would you say is your secret sauce? Like some people come at it, some search, some come at it from security. What's your sort of superpower as Lisa likes to say? >> Yeah, so we're a customer's first company. And so one of the things I think that we've done incredibly well is go look at the market and look for problems that are not being solved by other vendors. And so when we created this category of an observability pipeline, nobody was really marketing an observability pipeline at that time. And really the problem that customers had is they have data from a lot of different sources and they need to get it to a lot of different destinations. And a lot of that data is not particularly valuable. And in fact, one of the things that we like to say about this class of data is that it's really not valuable until it is, right? And so if I have a security breach, if I have an outage and I need to start pouring through this data suddenly the data is very, very valuable. And so customers need a lot of different places to store this data. I might want that data in a logging system. I might want that data in a metric system. I might want that data in a distributed tracing system. I might want that data in a data lake. In fact AWS just announced their security data lake product today. >> Big topic all day. >> Yeah, I mean like you can see that the industry is going in this way. People want to be able to store massively greater quantities of data than they can cost effectively do today. >> Let's talk about that just a little bit. The tension between data growth, like you said it's not valuable until it is or until it's providing context, whether that be good or bad. Let's talk about the tension between data growth and budget growth. How are you seeing that translate in your customers? >> Yeah, well so data's growing in a 25% CAGR per IDC which means we're going to have two and a half times the data in five years. And when you talk to CISOs and CIOs and you ask them, is your budget growing at a 25% CAGR, absolutely not, under no circumstances am I going to have, you know, that much more money. So what got us to 2022 is not going to get us to 2032. And so we really need different approaches for managing this data at scale. And that's where you're starting to see things like the AWS security data lake, Snowflake is moving into this space. You're seeing a lot of different people kind of moving into the database for security and observability type of data. You also have lots of other companies that are competing in broad spectrum observability, companies like Splunk or companies like Datadog. And these guys are all doing it from a data-first approach. I'm going to bring a lot of data into these platforms and give users the ability to work with that data to understand the performance and security of their applications. >> Okay, so carry that through, and you guys are different how? >> Yeah, so we are this pipeline that's sitting in the middle of all these solutions. We don't care whether your data was originally intended for some other tool. We're going to help you in a vendor-neutral way get that data wherever you need to get it. And that gives them the ability to control cost because they can put the right data in the right place. If it's data that's not going to be frequently accessed let's put it in a data lake, the cheapest place we can possibly put that data to rest. Or if I want to put it into my security tool maybe not all of the data that's coming from my vendor, my vendor has to put all the data in their records because who knows what it's going to be used for. But I only use half or a quarter of that information for security. And so what if I just put the paired down results in my more expensive storage but I kept full fidelity data somewhere else. >> Okay so you're observing the observability platforms basically, okay. >> Clint: We're routing that data. >> And then creating- >> It's meta observability. >> Right, observability pipeline. When I think a data pipeline, I think of highly specialized individuals, there's a data analyst, there's a data scientist, there's a quality engineer, you know, etc, et cetera. Do you have specific roles in your customer base that look at different parts of that pipeline and can you describe that? >> Yeah, absolutely, so one of the things I think that we do different is we sell very specifically to the security tooling vendors. And so in that case we are, or not to the vendors, but to the customers themselves. So generally they have a team inside of that organization which is managing their security tooling and their operational tooling. And so we're building tooling very specifically for them, for the types of data they work with for the volumes and scale of data that they work with. And that is giving, and no other vendor is really focusing on them. There's a lot of general purpose data people in the world and we're really the only ones that are focusing very specifically on observability and security data. >> So the announcement today, the security data lake that you were talking about, it's based on the Open Cybersecurity Framework, which I think AWS put forth, right? And said, okay, everybody come on. [Savannah] Yeah, yeah they did. >> So, right, all right. So what are your thoughts on that? You know, how does it fit with your strategy, you know. >> Yeah, so we are again a customer's first neutral company. So if OCSF gains traction, which we hope it does then we'll absolutely help customers get data into that format. But we're kind of this universal adapter so we can take data from other vendors, proprietary schemas, maybe you're coming from one of the other send vendors and you want to translate that to OCSF to use it with the security data lake. We can provide customers the ability to change and reshape that data to fit into any schema from any vendor so that we're really giving security data lake customers the ability to adapt the legacy, the stuff that they have that they can't get rid of 'cause they've had it for 10 years, 20 years and nothing inside of an enterprise ever goes away. That stuff stays forever. >> Legacy. >> Well legacy is working right? I mean somebody's actually, you know, making money on top of this thing. >> We never get rid of stuff. >> No, (laughing) we just added the toolkit. It's like all the old cell phones we have, it's everything. I mean we even do it as individual users and consumers. It's all a part of our little personal library. >> So what's happened in the field company momentum? >> Yeah let's talk trends too. >> Yeah so the company's growing crazily fast. We're north of 400 employees and we're only a hundred and something, you know, a year ago. So you can kind of see we're tripling you know, year over year. >> Savannah: Casual, especially right now in a lot of companies are feeling that scale back. >> Yeah so obviously we're keeping our eye closely on the macro conditions, but we see such a huge opportunity because we're a value player in this space that there's a real flight to value in enterprises right now. They're looking for projects that are going to pay themselves back and we've always had this value prop, we're going to come give you a lot of capabilities but we're probably going to save you money at the same time. And so that's just really resonating incredibly well with enterprises today and giving us an opportunity to continue to grow in the face of some challenging headwinds from a macro perspective. >> Well, so, okay, so people think okay, security is immune from the macro. It's not, I mean- >> Nothing, really. >> No segment is immune. CrowdStrike announced today the CrowdStrike rocket ship's still growing AR 50%, but you know, stocks down, I don't know, 20% right now after our- >> Logically doesn't make- >> Okay stuff happens, but still, you know, it's interesting, the macro, because it was like, to me it's like a slingshot, right? Everybody was like, wow, pandemic, shut down. All of a sudden, oh wow, need tech, boom. >> Savannah: Yeah, digitally transformed today. >> It's like, okay, tap the brakes. You know, when you're driving down the highway and you get that slingshotting effect and I feel like that's what's going on now. So, the premise is that the real leaders, those guys with the best tech that really understand the customers are going to, you know, get through this. What are your customers telling you in terms of, you know they're spending patterns, how they're trying to maybe consolidate vendors and how does that affect you guys? >> Yeah, for sure, I mean, I think, obviously, back to that flight to value, they're looking for vendors who are aligned with their interests. So, you know, as their budgets are getting pressure, what vendors are helping them provide the same capabilities they had to provide to the business before especially from a security perspective 'cause they're going to get cut along with everybody else. If a larger organization is trimming budgets across, security's going to get cut along with everybody else. So is IT operations. And so since they're being asked to do more with less that's you know, really where we're coming in and trying to provide them value. But certainly we're seeing a lot of pressure from IT departments, security departments all over in terms of being able to live and do more with less. >> Yeah, I mean, Celip's got a great quote today. "If you're looking to tighten your belt the cloud is the place to do it." I mean, it's probably true. >> Absolutely, elastic scalability in this, you know, our new search product is based off of AWS Lambda and it gives you truly elastic scalability. These changes in architectures are what's going to allow, it's not that cloud is cheaper, it's that cloud gives you on-demand scalability that allows you to truly control the compute that you're spending. And so as a customer of AWS, like this is giving us capabilities to offer products that are scalable and cost effective in ways that we just have not been able to do in the cloud. >> So what does that mean for the customer that you're using serverless using Lambda? What does that mean for them in terms of what they don't have to do that they maybe had to previously? >> It offers us the ability to try to charge them like a truly cloud native vendor. So in our cloud product we sell a credit model whereby which you deduct credits for usage. So if you're streaming data, you pay for gigabytes. If you're searching data then you're paying for CPU consumption, and so it allows us to charge them only for what they're consuming which means we don't have to manage a whole fleet of servers, and eventually, well we go to managing our own compute quite possibly as we start to get to scale at certain customers. But Lambda allowed us to not have to launch that way, not have to run a bunch of infrastructure. And we've been able to align our charging model with something that we think is the most customer friendly which is true consumption, pay for what you consume. >> So for example, you're saying you don't have to configure the EC2 Instance or figure out the memory sizing, you don't have to worry about any of that. You just basically say go, it figures that out and you can focus on upstream, is that right? >> Yep, and we're able to not only from a cost perspective also from a people perspective, it's allowed us velocity that we did not have before, which is we can go and prototype and build significantly faster because we're not having to worry, you know, in our mature products we use EC2 like everybody else does, right? And so as we're launching new products it's allowed us to iterate much faster and will we eventually go back to running our own compute, who knows, maybe, but it's allowed us a lot faster velocity than we were able to get before. >> I like what I've heard you discuss a lot is the agility and adaptability. We're going to be moving and evolving, choosing different providers. You're very outspoken about being vendor agnostic and I think that's actually a really unique and interesting play because we don't know what the future holds. So we're doing a new game on that note here on theCUBE, new game, new challenge, I suppose I would call it to think of this as your 30 second thought leadership highlight reel, a sizzle of the most important topic or conversation that's happening theme here at the show this year. >> Yeah, I mean, for me, as I think, as we're looking, especially like security data lake, et cetera, it's giving customers ownership of their data. And I think that once you, and I'm a big fan of this concept of open observability, and security should be the same way which is, I should not be locking you in as a vendor into my platform. Data should be stored in open formats that can be analyzed by multiple places. And you've seen this with AWS's announcement, data stored in open formats the same way other vendors store that. And so if you want to plug out AWS and you want to bring somebody else in to analyze your security lake, then great. And as we move into our analysis product, our search product, we'll be able to search data in the security data lake or data that's raw in S3. And we're really just trying to give customers back control over their future so that they don't have to maintain a relationship with a particular vendor. They're always getting the best. And that competition fuels really great product. And I'm really excited for the next 10 years of our industry as we're able to start competing on experiences and giving customers the best products, the customer wins. And I'm really excited about the customer winning. >> Yeah, so customer focused, I love it. What a great note to end on. That was very exciting, very customer focused. So, yo Clint, I have really enjoyed talking to you. Thanks. >> Thanks Clint. >> Thanks so much, it's been a pleasure being on. >> Thanks for enhancing our observability over here, I feel like I'll be looking at things a little bit differently after this conversation. And thank all of you for tuning in to our wonderful afternoon of continuous live coverage here at AWS re:Ieinvent in fabulous Las Vegas, Nevada with Dave Vellante. I'm Savannah Peterson. We're theCUBE, the leading source for high tech coverage. (bright music)

Published Date : Nov 30 2022

SUMMARY :

Joined for the first time. Dave, I really appreciate it. I appreciate you that all the businesses have. it's hard for me to want that experience. I'm really looking forward to it. Yeah, how does it feel to It's amazing to be back for the last nine years and security markets, so and how do you guys And for the same reasons And the scale of machine data And what would you And so one of the things I think that the industry is going in this way. Let's talk about the am I going to have, you We're going to help you the observability and can you describe that? And so in that case we that you were talking about, it's based on So what are your thoughts on that? the ability to change I mean somebody's actually, you know, It's like all the old cell and something, you know, a year ago. of companies are feeling that scale back. that are going to pay themselves back security is immune from the macro. the CrowdStrike rocket it's interesting, the Savannah: Yeah, and you get that slingshotting effect asked to do more with less the cloud is the place to do it." it's that cloud gives you and so it allows us to charge them only and you can focus on And so as we're launching new products I like what I've heard you and security should be the same way What a great note to end on. Thanks so much, it's And thank all of you for tuning in

SENTIMENT ANALYSIS :

ENTITIES

EntityCategoryConfidence
JohnPERSON

0.99+

AWSORGANIZATION

0.99+

ClintPERSON

0.99+

DavePERSON

0.99+

Dave VellantePERSON

0.99+

SavannahPERSON

0.99+

Savannah PetersonPERSON

0.99+

CriblORGANIZATION

0.99+

Clint SharpPERSON

0.99+

LisaPERSON

0.99+

20 yearsQUANTITY

0.99+

25%QUANTITY

0.99+

10 yearsQUANTITY

0.99+

Las VegasLOCATION

0.99+

American AirlinesORGANIZATION

0.99+

DatadogORGANIZATION

0.99+

2022DATE

0.99+

CrowdStrikeORGANIZATION

0.99+

20%QUANTITY

0.99+

SplunkORGANIZATION

0.99+

30 secondQUANTITY

0.99+

DoobiePERSON

0.99+

a year agoDATE

0.99+

LambdaTITLE

0.99+

five yearsQUANTITY

0.99+

halfQUANTITY

0.99+

2013DATE

0.99+

first companyQUANTITY

0.99+

first timeQUANTITY

0.99+

todayDATE

0.99+

2032DATE

0.99+

CubeORGANIZATION

0.98+

20 years agoDATE

0.98+

oneQUANTITY

0.98+

CriblPERSON

0.98+

EC2TITLE

0.98+

this yearDATE

0.97+

Las Vegas, NevadaLOCATION

0.96+

two and a half timesQUANTITY

0.96+

OCSFORGANIZATION

0.93+

S3TITLE

0.91+

this afternoonDATE

0.9+

IeinventORGANIZATION

0.86+

Open Cybersecurity FrameworkTITLE

0.84+

a hundred and somethingQUANTITY

0.82+

CelipPERSON

0.81+

one of the thingsQUANTITY

0.79+

InventEVENT

0.78+

last nine yearsDATE

0.77+

a quarterQUANTITY

0.77+

first neutral companyQUANTITY

0.75+

ARQUANTITY

0.75+

first approachQUANTITY

0.74+

dataQUANTITY

0.72+

re:InventEVENT

0.7+

north of 400 employeesQUANTITY

0.67+

SnowflakeORGANIZATION

0.67+

Breaking Analysis: re:Invent 2022 marks the next chapter in data & cloud


 

from the cube studios in Palo Alto in Boston bringing you data-driven insights from the cube and ETR this is breaking analysis with Dave vellante the ascendancy of AWS under the leadership of Andy jassy was marked by a tsunami of data and corresponding cloud services to leverage that data now those Services they mainly came in the form of Primitives I.E basic building blocks that were used by developers to create more sophisticated capabilities AWS in the 2020s being led by CEO Adam solipski will be marked by four high-level Trends in our opinion one A Rush of data that will dwarf anything we've previously seen two a doubling or even tripling down on the basic elements of cloud compute storage database security Etc three a greater emphasis on end-to-end integration of AWS services to simplify and accelerate customer adoption of cloud and four significantly deeper business integration of cloud Beyond it as an underlying element of organizational operations hello and welcome to this week's wikibon Cube insights powered by ETR in this breaking analysis we extract and analyze nuggets from John furrier's annual sit-down with the CEO of AWS we'll share data from ETR and other sources to set the context for the market and competition in cloud and we'll give you our glimpse of what to expect at re invent in 2022. now before we get into the core of our analysis Alibaba has announced earnings they always announced after the big three you know a month later and we've updated our Q3 slash November hyperscale Computing forecast for the year as seen here and we're going to spend a lot of time on this as most of you have seen the bulk of it already but suffice to say alibaba's cloud business is hitting that same macro Trend that we're seeing across the board but a more substantial slowdown than we expected and more substantial than its peers they're facing China headwinds they've been restructuring its Cloud business and it's led to significantly slower growth uh in in the you know low double digits as opposed to where we had it at 15 this puts our year-end estimates for 2022 Revenue at 161 billion still a healthy 34 growth with AWS surpassing 80 billion in 2022 Revenue now on a related note one of the big themes in Cloud that we've been reporting on is how customers are optimizing their Cloud spend it's a technique that they use and when the economy looks a little shaky and here's a graphic that we pulled from aws's website which shows the various pricing plans at a high level as you know they're much more granular than that and more sophisticated but Simplicity we'll just keep it here basically there are four levels first one here is on demand I.E pay by the drink now we're going to jump down to what we've labeled as number two spot instances that's like the right place at the right time I can use that extra capacity in the moment the third is reserved instances or RIS where I pay up front to get a discount and the fourth is sort of optimized savings plans where customers commit to a one or three year term and for a better price now you'll notice we labeled the choices in a different order than AWS presented them on its website and that's because we believe that the order that we chose is the natural progression for customers this started on demand they maybe experiment with spot instances they move to reserve instances when the cloud bill becomes too onerous and if you're large enough you lock in for one or three years okay the interesting thing is the order in which AWS presents them we believe that on-demand accounts for the majority of AWS customer spending now if you think about it those on-demand customers they're also at risk customers yeah sure there's some switching costs like egress and learning curve but many customers they have multiple clouds and they've got experience and so they're kind of already up to a learning curve and if you're not married to AWS with a longer term commitment there's less friction to switch now AWS here presents the most attractive plan from a financial perspective second after on demand and it's also the plan that makes the greatest commitment from a lock-in standpoint now In fairness to AWS it's also true that there is a trend towards subscription-based pricing and we have some data on that this chart is from an ETR drill down survey the end is 300. pay attention to the bars on the right the left side is sort of busy but the pink is subscription and you can see the trend upward the light blue is consumption based or on demand based pricing and you can see there's a steady Trend toward subscription now we'll dig into this in a later episode of Breaking analysis but we'll share with you a little some tidbits with the data that ETR provides you can select which segment is and pass or you can go up the stack Etc but so when you choose is and paths 44 of customers either prefer or are required to use on-demand pricing whereas around 40 percent of customers say they either prefer or are required to use subscription pricing again that's for is so now the further mu you move up the stack the more prominent subscription pricing becomes often with sixty percent or more for the software-based offerings that require or prefer subscription and interestingly cyber security tracks along with software at around 60 percent that that prefer subscription it's likely because as with software you're not shutting down your cyber protection on demand all right let's get into the expectations for reinvent and we're going to start with an observation in data in this 2018 book seeing digital author David michella made the point that whereas most companies apply data on the periphery of their business kind of as an add-on function successful data companies like Google and Amazon and Facebook have placed data at the core of their operations they've operationalized data and they apply machine intelligence to that foundational element why is this the fact is it's not easy to do what the internet Giants have done very very sophisticated engineering and and and cultural discipline and this brings us to reinvent 2022 in the future of cloud machine learning and AI will increasingly be infused into applications we believe the data stack and the application stack are coming together as organizations build data apps and data products data expertise is moving from the domain of Highly specialized individuals to Everyday business people and we are just at the cusp of this trend this will in our view be a massive theme of not only re invent 22 but of cloud in the 2020s the vision of data mesh We Believe jamachtagani's principles will be realized in this decade now what we'd like to do now is share with you a glimpse of the thinking of Adam solipsky from his sit down with John Furrier each year John has a one-on-one conversation with the CEO of AWS AWS he's been doing this for years and the outcome is a better understanding of the directional thinking of the leader of the number one Cloud platform so we're now going to share some direct quotes I'm going to run through them with some commentary and then bring in some ETR data to analyze the market implications here we go this is from solipsky quote I.T in general and data are moving from departments into becoming intrinsic parts of how businesses function okay we're talking here about deeper business integration let's go on to the next one quote in time we'll stop talking about people who have the word analyst we inserted data he meant data data analyst in their title rather will have hundreds of millions of people who analyze data as part of their day-to-day job most of whom will not have the word analyst anywhere in their title we're talking about graphic designers and pizza shop owners and product managers and data scientists as well he threw that in I'm going to come back to that very interesting so he's talking about here about democratizing data operationalizing data next quote customers need to be able to take an end-to-end integrated view of their entire data Journey from ingestion to storage to harmonizing the data to being able to query it doing business Intelligence and human-based Analysis and being able to collaborate and share data and we've been putting together we being Amazon together a broad Suite of tools from database to analytics to business intelligence to help customers with that and this last statement it's true Amazon has a lot of tools and you know they're beginning to become more and more integrated but again under jassy there was not a lot of emphasis on that end-to-end integrated view we believe it's clear from these statements that solipsky's customer interactions are leading him to underscore that the time has come for this capability okay continuing quote if you have data in one place you shouldn't have to move it every time you want to analyze that data couldn't agree more it would be much better if you could leave that data in place avoid all the ETL which has become a nasty three-letter word more and more we're building capabilities where you can query that data in place end quote okay this we see a lot in the marketplace Oracle with mySQL Heatwave the entire Trend toward converge database snowflake [ __ ] extending their platforms into transaction and analytics respectively and so forth a lot of the partners are are doing things as well in that vein let's go into the next quote the other phenomenon is infusing machine learning into all those capabilities yes the comments from the michelleographic come into play here infusing Ai and machine intelligence everywhere next one quote it's not a data Cloud it's not a separate Cloud it's a series of broad but integrated capabilities to help you manage the end-to-end life cycle of your data there you go we AWS are the cloud we're going to come back to that in a moment as well next set of comments around data very interesting here quote data governance is a huge issue really what customers need is to find the right balance of their organization between access to data and control and if you provide too much access then you're nervous that your data is going to end up in places that it shouldn't shouldn't be viewed by people who shouldn't be viewing it and you feel like you lack security around that data and by the way what happens then is people overreact and they lock it down so that almost nobody can see it it's those handcuffs there's data and asset are reliability we've talked about that for years okay very well put by solipsky but this is a gap in our in our view within AWS today and we're we're hoping that they close it at reinvent it's not easy to share data in a safe way within AWS today outside of your organization so we're going to look for that at re invent 2022. now all this leads to the following statement by solipsky quote data clean room is a really interesting area and I think there's a lot of different Industries in which clean rooms are applicable I think that clean rooms are an interesting way of enabling multiple parties to share and collaborate on the data while completely respecting each party's rights and their privacy mandate okay again this is a gap currently within AWS today in our view and we know snowflake is well down this path and databricks with Delta sharing is also on this curve so AWS has to address this and demonstrate this end-to-end data integration and the ability to safely share data in our view now let's bring in some ETR spending data to put some context around these comments with reference points in the form of AWS itself and its competitors and partners here's a chart from ETR that shows Net score or spending momentum on the x-axis an overlap or pervasiveness in the survey um sorry let me go back up the net scores on the y-axis and overlap or pervasiveness in the survey is on the x-axis so spending momentum by pervasiveness okay or should have share within the data set the table that's inserted there with the Reds and the greens that informs us to how the dots are positioned so it's Net score and then the shared ends are how the plots are determined now we've filtered the data on the three big data segments analytics database and machine learning slash Ai and we've only selected one company with fewer than 100 ends in the survey and that's databricks you'll see why in a moment the red dotted line indicates highly elevated customer spend at 40 percent now as usual snowflake outperforms all players on the y-axis with a Net score of 63 percent off the charts all three big U.S cloud players are above that line with Microsoft and AWS dominating the x-axis so very impressive that they have such spending momentum and they're so large and you see a number of other emerging data players like rafana and datadog mongodbs there in the mix and then more established players data players like Splunk and Tableau now you got Cisco who's gonna you know it's a it's a it's a adjacent to their core networking business but they're definitely into you know the analytics business then the really established players in data like Informatica IBM and Oracle all with strong presence but you'll notice in the red from the momentum standpoint now what you're going to see in a moment is we put red highlights around databricks Snowflake and AWS why let's bring that back up and we'll explain so there's no way let's bring that back up Alex if you would there's no way AWS is going to hit the brakes on innovating at the base service level what we call Primitives earlier solipsky told Furrier as much in their sit down that AWS will serve the technical user and data science Community the traditional domain of data bricks and at the same time address the end-to-end integration data sharing and business line requirements that snowflake is positioned to serve now people often ask Snowflake and databricks how will you compete with the likes of AWS and we know the answer focus on data exclusively they have their multi-cloud plays perhaps the more interesting question is how will AWS compete with the likes of Specialists like Snowflake and data bricks and the answer is depicted here in this chart AWS is going to serve both the technical and developer communities and the data science audience and through end-to-end Integrations and future services that simplify the data Journey they're going to serve the business lines as well but the Nuance is in all the other dots in the hundreds or hundreds of thousands that are not shown here and that's the AWS ecosystem you can see AWS has earned the status of the number one Cloud platform that everyone wants to partner with as they say it has over a hundred thousand partners and that ecosystem combined with these capabilities that we're discussing well perhaps behind in areas like data sharing and integrated governance can wildly succeed by offering the capabilities and leveraging its ecosystem now for their part the snowflakes of the world have to stay focused on the mission build the best products possible and develop their own ecosystems to compete and attract the Mind share of both developers and business users and that's why it's so interesting to hear solipski basically say it's not a separate Cloud it's a set of integrated Services well snowflake is in our view building a super cloud on top of AWS Azure and Google when great products meet great sales and marketing good things can happen so this will be really fun to watch what AWS announces in this area at re invent all right one other topic that solipsky talked about was the correlation between serverless and container adoption and you know I don't know if this gets into there certainly their hybrid place maybe it starts to get into their multi-cloud we'll see but we have some data on this so again we're talking about the correlation between serverless and container adoption but before we get into that let's go back to 2017 and listen to what Andy jassy said on the cube about serverless play the clip very very earliest days of AWS Jeff used to say a lot if I were starting Amazon today I'd have built it on top of AWS we didn't have all the capability and all the functionality at that very moment but he knew what was coming and he saw what people were still able to accomplish even with where the services were at that point I think the same thing is true here with Lambda which is I think if Amazon were starting today it's a given they would build it on the cloud and I think we with a lot of the applications that comprise Amazon's consumer business we would build those on on our serverless capabilities now we still have plenty of capabilities and features and functionality we need to add to to Lambda and our various serverless services so that may not be true from the get-go right now but I think if you look at the hundreds of thousands of customers who are building on top of Lambda and lots of real applications you know finra has built a good chunk of their market watch application on top of Lambda and Thompson Reuters has built you know one of their key analytics apps like people are building real serious things on top of Lambda and the pace of iteration you'll see there will increase as well and I really believe that to be true over the next year or two so years ago when Jesse gave a road map that serverless was going to be a key developer platform going forward and so lipsky referenced the correlation between serverless and containers in the Furrier sit down so we wanted to test that within the ETR data set now here's a screen grab of The View across 1300 respondents from the October ETR survey and what we've done here is we've isolated on the cloud computing segment okay so you can see right there cloud computing segment now we've taken the functions from Google AWS Lambda and Microsoft Azure functions all the serverless offerings and we've got Net score on the vertical axis we've got presence in the data set oh by the way 440 by the way is highly elevated remember that and then we've got on the horizontal axis we have the presence in the data center overlap okay that's relative to each other so remember 40 all these guys are above that 40 mark okay so you see that now what we're going to do this is just for serverless and what we're going to do is we're going to turn on containers to see the correlation and see what happens so watch what happens when we click on container boom everything moves to the right you can see all three move to the right Google drops a little bit but all the others now the the filtered end drops as well so you don't have as many people that are aggressively leaning into both but all three move to the right so watch again containers off and then containers on containers off containers on so you can see a really major correlation between containers and serverless okay so to get a better understanding of what that means I call my friend and former Cube co-host Stu miniman what he said was people generally used to think of VMS containers and serverless as distinctly different architectures but the lines are beginning to blur serverless makes things simpler for developers who don't want to worry about underlying infrastructure as solipsky and the data from ETR indicate serverless and containers are coming together but as Stu and I discussed there's a spectrum where on the left you have kind of native Cloud VMS in the middle you got AWS fargate and in the rightmost anchor is Lambda AWS Lambda now traditionally in the cloud if you wanted to use containers developers would have to build a container image they have to select and deploy the ec2 images that they or instances that they wanted to use they have to allocate a certain amount of memory and then fence off the apps in a virtual machine and then run the ec2 instances against the apps and then pay for all those ec2 resources now with AWS fargate you can run containerized apps with less infrastructure management but you still have some you know things that you can you can you can do with the with the infrastructure so with fargate what you do is you'd build the container images then you'd allocate your memory and compute resources then run the app and pay for the resources only when they're used so fargate lets you control the runtime environment while at the same time simplifying the infrastructure management you gotta you don't have to worry about isolating the app and other stuff like choosing server types and patching AWS does all that for you then there's Lambda with Lambda you don't have to worry about any of the underlying server infrastructure you're just running code AS functions so the developer spends their time worrying about the applications and the functions that you're calling the point is there's a movement and we saw in the data towards simplifying the development environment and allowing the cloud vendor AWS in this case to do more of the underlying management now some folks will still want to turn knobs and dials but increasingly we're going to see more higher level service adoption now re invent is always a fire hose of content so let's do a rapid rundown of what to expect we talked about operate optimizing data and the organization we talked about Cloud optimization there'll be a lot of talk on the show floor about best practices and customer sharing data solipsky is leading AWS into the next phase of growth and that means moving beyond I.T transformation into deeper business integration and organizational transformation not just digital transformation organizational transformation so he's leading a multi-vector strategy serving the traditional peeps who want fine-grained access to core services so we'll see continued Innovation compute storage AI Etc and simplification through integration and horizontal apps further up to stack Amazon connect is an example that's often cited now as we've reported many times databricks is moving from its stronghold realm of data science into business intelligence and analytics where snowflake is coming from its data analytics stronghold and moving into the world of data science AWS is going down a path of snowflake meet data bricks with an underlying cloud is and pass layer that puts these three companies on a very interesting trajectory and you can expect AWS to go right after the data sharing opportunity and in doing so it will have to address data governance they go hand in hand okay price performance that is a topic that will never go away and it's something that we haven't mentioned today silicon it's a it's an area we've covered extensively on breaking analysis from Nitro to graviton to the AWS acquisition of Annapurna its secret weapon new special specialized capabilities like inferential and trainium we'd expect something more at re invent maybe new graviton instances David floyer our colleague said he's expecting at some point a complete system on a chip SOC from AWS and maybe an arm-based server to eventually include high-speed cxl connections to devices and memories all to address next-gen applications data intensive applications with low power requirements and lower cost overall now of course every year Swami gives his usual update on machine learning and AI building on Amazon's years of sagemaker innovation perhaps a focus on conversational AI or a better support for vision and maybe better integration across Amazon's portfolio of you know large language models uh neural networks generative AI really infusing AI everywhere of course security always high on the list that reinvent and and Amazon even has reinforce a conference dedicated to it uh to security now here we'd like to see more on supply chain security and perhaps how AWS can help there as well as tooling to make the cio's life easier but the key so far is AWS is much more partner friendly in the security space than say for instance Microsoft traditionally so firms like OCTA and crowdstrike in Palo Alto have plenty of room to play in the AWS ecosystem we'd expect of course to hear something about ESG it's an important topic and hopefully how not only AWS is helping the environment that's important but also how they help customers save money and drive inclusion and diversity again very important topics and finally come back to it reinvent is an ecosystem event it's the Super Bowl of tech events and the ecosystem will be out in full force every tech company on the planet will have a presence and the cube will be featuring many of the partners from the serial floor as well as AWS execs and of course our own independent analysis so you'll definitely want to tune into thecube.net and check out our re invent coverage we start Monday evening and then we go wall to wall through Thursday hopefully my voice will come back we have three sets at the show and our entire team will be there so please reach out or stop by and say hello all right we're going to leave it there for today many thanks to Stu miniman and David floyer for the input to today's episode of course John Furrier for extracting the signal from the noise and a sit down with Adam solipski thanks to Alex Meyerson who was on production and manages the podcast Ken schiffman as well Kristen Martin and Cheryl Knight helped get the word out on social and of course in our newsletters Rob hoef is our editor-in-chief over at siliconangle does some great editing thank thanks to all of you remember all these episodes are available as podcasts wherever you listen you can pop in the headphones go for a walk just search breaking analysis podcast I published each week on wikibon.com at siliconangle.com or you can email me at david.valante at siliconangle.com or DM me at di vallante or please comment on our LinkedIn posts and do check out etr.ai for the best survey data in the Enterprise Tech business this is Dave vellante for the cube insights powered by ETR thanks for watching we'll see it reinvent or we'll see you next time on breaking analysis [Music]

Published Date : Nov 26 2022

SUMMARY :

so now the further mu you move up the

SENTIMENT ANALYSIS :

ENTITIES

EntityCategoryConfidence
David michellaPERSON

0.99+

Alex MeyersonPERSON

0.99+

Cheryl KnightPERSON

0.99+

AWSORGANIZATION

0.99+

AlibabaORGANIZATION

0.99+

oneQUANTITY

0.99+

Dave vellantePERSON

0.99+

David floyerPERSON

0.99+

Kristen MartinPERSON

0.99+

JohnPERSON

0.99+

sixty percentQUANTITY

0.99+

AmazonORGANIZATION

0.99+

Adam solipskiPERSON

0.99+

John FurrierPERSON

0.99+

MicrosoftORGANIZATION

0.99+

2022DATE

0.99+

Andy jassyPERSON

0.99+

GoogleORGANIZATION

0.99+

OracleORGANIZATION

0.99+

FacebookORGANIZATION

0.99+

hundredsQUANTITY

0.99+

2017DATE

0.99+

Palo AltoLOCATION

0.99+

40 percentQUANTITY

0.99+

alibabaORGANIZATION

0.99+

LambdaTITLE

0.99+

63 percentQUANTITY

0.99+

1300 respondentsQUANTITY

0.99+

Super BowlEVENT

0.99+

80 billionQUANTITY

0.99+

John furrierPERSON

0.99+

ThursdayDATE

0.99+

CiscoORGANIZATION

0.99+

three yearsQUANTITY

0.99+

Monday eveningDATE

0.99+

JessePERSON

0.99+

Stu minimanPERSON

0.99+

siliconangle.comOTHER

0.99+

OctoberDATE

0.99+

thecube.netOTHER

0.99+

fourthQUANTITY

0.99+

a month laterDATE

0.99+

thirdQUANTITY

0.99+

hundreds of thousandsQUANTITY

0.99+

fargateORGANIZATION

0.99+

Patrick Coughlin | AWS re:Invent 2022


 

foreign welcome back to thecube's coverage of AWS re invent 2022 I'm John Furrier host of thecube we've got a great conversation with Patrick Coughlin vice president of go to market strategy and specialization at Splunk we're talking about the open cyber security schema framework also known as the ocsf a joint strategic collaboration between Splunk and AWS it's got a lot of traction momentum Patrick thanks for coming on thecube for reinvent coverage John great to be here I'm excited for this you know I love this open source movement and open source continues to add value almost sets the standards you know we were talking at the cncf Linux Foundation this past fall about how standards are coming out of Open Source not so much the the classic standards groups but you start to see the developers voting with their code groups deciding what to adopt to fact those standards and security is a real key part of that where data becomes key for resilience and this has been the top conversation at re invent and all around the industry is how to make data a key part of building into cyber resilience so I want to get your thoughts about the problem that you see that's emerging that you guys are solving with this group kind of collaboration around the ocsf yeah well look John I I think I think you you've already you've already hit the high notes there uh data is proliferating across the Enterprise uh the attack surface area is rapidly expanding the threat landscape is Ever Changing uh you know we we just had a a lot of uh uh scares around openssl before that we had vulnerabilities and Confluence in atlassian and you go back to log 4J and solarwinds before that um and challenges with the supply chain uh in this year in particular we've had a huge acceleration in in concerns and threat vectors around uh operational technology in our customer base alone we saw a huge uptick you know in double digit percentage of customers that we're concerned about the traditional vectors like like ransomware uh like business email compromise phishing but also from Insider threat and others um so you've got this this highly complex Flex environment where data continues to proliferate and flow through new applications new infrastructure new Services driving different types of outcomes in the digitally transformed Enterprise of today and and what happens there is is our customers particularly in security are left with having to stitch all of this together and they're trying to get visibility across multiple different Services infrastructure applications across a number of different point solutions that they've bought to help them protect defend detect and respond better and it's a massive Challenge and uh you know when our when our customers come to us they are often looking for ways to drive more consolidation uh across a variety of different solutions they're looking to drive better outcomes in terms of speed to detection how do I detect faster how do I find the thing that when banging in the night faster um how do I then fix it quickly and then how do I layer in some automation so hopefully I don't have to do it again now the Challenger that really ocf ocsf helps to to solve is to do that effectively to detect and to respond to the speed at which attackers are demanding today we have to have normalization of data across this entire landscape of tools infrastructure Services we have to have integration to have visibility um and these tools have to work together but the biggest barrier to that is often data is stored in different structures and in different formats across different solution providers across different tools that are that are that our customers are using um and that that lack of data normalization chokes the integration problem and so um you know several years ago a number of very smart people in this position this was a initiative started by Splunk and AWS came together and said look we as an industry have to solve this for our customers we have to start to shoulder this burden for our customers we can't we can't make our customers have to be systems integrators that's not their job our job is to help make this easier for them and so ocsf was born and over the last couple of years um we've built out this this collaboration to not just be AWS and Splunk uh but over uh 50 different organizations um uh um cloud service providers solution providers in the cyber security space have come together and said let's decide on a single unified schema for how we're going to represent event data in this industry um and uh I'm very proud to be here today to say that we've launched it and and um uh I can't wait to see where we go next yeah I mean this is really compelling I mean there's so much packed in that in that statement I mean data normalization you mentioned chokes this the the solution and the integration as you call it but really also it's like data is not just stored in silos it may not even be available right so if you don't have availability of data that's an important Point number two you mentioned supply chain there's physical supply chain is coming up big time at re invent this time as well as in open source the software supply chain so you now have the perimeter has been dead for multiple years we've been talking about that for years everybody knows that but now combined with the supply chain problem both physical and software there's so much more to go on and so you know the leaders in the industry they're not sitting on their hands they know this but they're just overloaded so so how do leaders deal with this right now before we get into the ocsf I want to just get your thoughts on what's the psychology of the of the business leader who's facing this landscape yeah well I mean unfortunately too many leaders feel like they have to face these trade-offs between you know how and where they are really focusing cyber resilience investments in the business um and and often there is a siled approach across security I.T developer operations or engineering rather than the ability to kind of Drive visibility integration and and connection of outcomes across those different functions I mean the truth is the Telemetry that that you get from an application for application performance monitoring or infrastructure monitoring is often incredibly valuable when there's a security incident and vice versa some of the security data um that you may see in a security operations center can be incredibly valuable when trying to investigate a performance degradation in an application and understanding where that may come from and so what we're seeing is this data layer is collapsing faster than the org charts are or the budget line items are in the Enterprise and so at Splunk here you know we believe security resilience is is fundamentally a data problem and one of the things that we do often is is actually help connect the dots for our customers and bring our customers together across the silos they may have internally so that they can start to see a holistic picture of what resilience means for their Enterprise and how they can drive faster detection outcomes and more automation coverage you know we recently had an event called super cloud we're going into the next gen kind of a cloud how data and security are all kind of part of this next-gen applications not just SAS and we had a panel that was titled the innovators dilemma kind of talk about getting some of the challenges and one of the panelists said it's not the innovators dilemma it's the integrators dilemma and you mentioned that earlier I think this is a key point right now integration is so critical not having the data and putting pieces together and now open source is becoming a composability market and I think having things snap together and work well it's a platform system conversation not a tool conversation so I really want to get into where the ocsf kind of intersects with this area people are working on it's not just solution Architects or cloud cloud native sres especially where devsecops is so this this intersection is critical how does ocsf integrate into that integration of the data making that available to make machine learning and automation smarter and more relevant right right well look I mean I I think that's a fantastic question because you know we talk about we use buzzwords like machine learning and AI all the time and you know I I know they're all over the place here at reinvented and and um there's so much promise and hope out there around these Technologies and these Innovations however uh machine learning AI is only as effective as the data is clean and normalized uh and and we will not realize the promise of these Technologies for outcomes in resilience unless we have better ways to normalize data upstream and better ways to integrate that data to the downstream tools where detection and response is happening and so ocsf was really about the industry coming together and saying this is no longer the job of our customers we are going to create a unified schema that represents the an event that we will all bite down on even some of us are competitors you know this is this is that that no longer matters because at the point the point is how do we take this burden off of our customers and how do we make the industry safer together um and so 15 initial members came together um along with AWS and Splunk to to start to create that uh that initial schema and standardize it and if you've ever you know if you ever worked with a bunch of technical grumpy security people it's kind of hard to drive consensus about around just about anything but uh um but I'm really happy to see how quickly this this organization Has Come Together has open sourced the schema um and and just as you said like I think this this unlocks the potential for real Innovation that's going to be required to keep up with the bad guys but right now is getting stymied and held back by the lack of normalization and the lack of integration I've always said Splunk was a it's AIDS data for breakfast lunch and dinner and turns it into insights and I think you bring up The Silo thing what's interesting is the cross company sharing I think this hits point on so I see this as a valuable opportunity for the industry what's the traction on that because you know to succeed it does take a village takes a community of security practitioners and and Architects and developers to kind of coalesce around this de facto movement has been has been uptake been good that's attraction can you share your thoughts on how this is translating across companies yeah absolutely I mean look I I think um cyber security has a long track record of of Standards development um there's been some fantastic standards recently things like um sticks and taxi for threat intelligence there's been things like the you know the minor attack framework coming out of my miter and and the adoption the traction that we've seen with attack in particular has been amazing to watch how that has kind of roared onto the scene in the last couple of years and has become table Stakes for um how you do security operations and incident response um and you know I think with ocsf we're going to see something similar here but you know we are in literally the first Innings of of this um so right now you know we're architecting this into our um into every part of our sort of back end systems here at spelunk I know um our collaborators at AWS and elsewhere are doing it too and so I think it starts with bringing this standard now the standard exists on a uh you know in schema format um and there's you know Confluence and jira tickets around it how do we then sort of build this into the code of of the the collaborators that have been leading the way on this and you know it's not going to happen overnight but I think in the coming quarters you'll start to see this schema um be the standard um across the leaders in this space companies like Splunk and AWS and others who are leading the way and often that's what helps Drive adoption of a standard is if you can get the big dogs so to speak to to embrace it and you know there's no bigger one than AWS and I think there's no no more important one than Splunk in the cyber security space and so as we adopt this we hope others will follow and like I said we've got over 50 organizations contributing to it today and so um I think we're off to a running start you know it's interesting choking Innovation or having things kind of get get slowed down has really been a problem we've seen successes recently over the past few years like kubernetes has really unlocked and accelerated the cloud native worlds of runtime with containers to kind of have the consensus of the community say hey if you we just do this it gets better I think this is really compelling with the ocsf because if people can come together around this and get unified as well as other the other official standards things can go highly accelerated so I think I think it looks really good and I think it's great initiative and I really appreciate your Insight on that on on your relationship with Amazon okay it's not just the Partnerships it's a strategic collaboration could you share that uh relationship Dynamic how to start how's it going what's strategic about it share to the audience kind of the relationship between Splunk and natives on this important ocsf initiative look I I mean I think this this year marks the the 10th year anniversary that that Splunk and AWS have been collaborating in a variety of different ways um I I think our our companies have um a fantastic and long-standing relationship and we've we've partnered on a number of really important projects together that bring value um obviously to our individual companies uh but also to our shared customers um uh when I think about some of the most important customers at Splunk that I spend a significant amount of time with um uh I I know how many of those are our AWS customers as well and I know how important AWS is to them so I think it's it's a it's a collaboration that is rooted in in a respect for each other's Technologies um and Innovation but also in a recognition that that our shared customers want to see us work better together over time and it's not it's not two companies that have kind of decided in a back room that they should work together it's actually our customers that are that are pushing us and I think we're both very customer-centric organizations and I think that has helped us actually be better collaborators and better Partners together um because we're working back backwards from our customers as security becomes a physical and software approach we've seen the trend where even Steven Schmidt at Amazon web services is the CSO he's not the CSO anymore so why he says well security is also physical stuff too so so lens is now expanded you mentioned supply chain physical digital this is an important inflection point can you summarize in your mind why open cyber security scheme information is important I know the unification but beyond that what why is this so important why should people pay attention to this you know I if if you'll let me be just a little abstract and meta for a second yeah I think what's what's really meaningful at the highest level about the ocsf initiative um and then it goes beyond I think the Tactical value it will provide to to organizations and to customers in terms of making them safer um over the coming years and and decades I think what's more important than that is it's really the one of the first times that you've seen um the industry come together and say we got a problem we need to solve that you know doesn't really have anything to do with with our own economics um our customers are are hurting and yeah some of us may be competitors um uh you know we got different cloud service providers that are participating in this along with AWS we've got different cyber security solution providers participating in this along with spelunk um but but folks have come together and say we can actually solve this problem um if if we're able to kind of put aside our competitive differences in the markets and approach this from the perspective of what's best for information security as a whole um and and I think that's what I'm most proud of uh and and what I hope we can do more of in other places in this industry because I think that kind of collaboration from real Market leaders can actually um change markets it can change the the the trend lines in terms of how we are keeping up with the bad guys and and I'd like to see a lot more of that and we're seeing a lot more new kind of things emerging in the cloud next kind of this next Generation architecture and alcohol thumbs are happening I think it's interesting you know we always talk about sustainability supply chain sustainability about making the earth a better place but you're hitting on this this meta point about businesses are under threat of going under I mean we want to keep businesses to businesses to be sustainable not just you know the the environment so if a business goes out of business which the threats here are can be catastrophic for companies I mean there is there is a community responsibility to protect businesses so they can sustain and stay stay producing this is a real key point yeah yeah I mean look I think I think one of the things that you know we We complain a lot in in cyber security about the lack of of talent the talent shortage and cyber security and every year we kind of we kind of uh whack ourselves over the head about how hard it is to bring people into this industry and it's true um but one of the things that I think we forget John is is how important mission is to so many people in what they do for a living and how they work and I think one of the things that cyber security is strongest in information security General and has been for decades is this sense of mission and people work in this industry not because it's it's it's always the the the most lucrative but because it really drives a sense of um Safety and Security in the Enterprises and the fabric of the economy that we use every day to go through our lives and when I think about the sport customers and AWS customers I think about um um the the different products and tools that power my life and and we need to secure them and and sometimes that means coming to work every day at that company and doing your job and sometimes that means working with others better faster and stronger to help drive that level of of maturity and security that this industry needs it's a human it's a human opportunity human problem and and challenge that's a whole other segment the role of the talent and the human machines and with scale Patrick thanks so much for sharing the information and the Insight on the open cyber security schema frame and what it means and why it's important thanks for sharing on thecube really appreciate it thanks for having me John okay this is AWS re invent 2022 coverage here on thecube I'm John Furrier the host thanks for watching foreign [Music]

Published Date : Nov 4 2022

SUMMARY :

one of the things that you know we We

SENTIMENT ANALYSIS :

ENTITIES

EntityCategoryConfidence
Patrick CoughlinPERSON

0.99+

AWSORGANIZATION

0.99+

SplunkORGANIZATION

0.99+

John FurrierPERSON

0.99+

Steven SchmidtPERSON

0.99+

AmazonORGANIZATION

0.99+

PatrickPERSON

0.99+

15 initial membersQUANTITY

0.99+

two companiesQUANTITY

0.99+

oneQUANTITY

0.99+

JohnPERSON

0.99+

todayDATE

0.98+

decadesQUANTITY

0.96+

this yearDATE

0.96+

several years agoDATE

0.95+

10th yearQUANTITY

0.95+

bothQUANTITY

0.95+

singleQUANTITY

0.95+

last couple of yearsDATE

0.92+

2022DATE

0.92+

atlassianTITLE

0.91+

over 50 organizationsQUANTITY

0.91+

earthLOCATION

0.9+

one of the thingsQUANTITY

0.88+

last couple of yearsDATE

0.88+

firstQUANTITY

0.85+

ocsfORGANIZATION

0.85+

secondQUANTITY

0.78+

first timesQUANTITY

0.78+

past fallDATE

0.73+

too manyQUANTITY

0.73+

ChallengerTITLE

0.73+

one ofQUANTITY

0.72+

SplunkPERSON

0.72+

many peopleQUANTITY

0.72+

Linux FoundationORGANIZATION

0.72+

thingsQUANTITY

0.7+

50 different organizationsQUANTITY

0.68+

re:Invent 2022TITLE

0.66+

the panelistsQUANTITY

0.61+

past few yearsDATE

0.58+

spelunkORGANIZATION

0.57+

ocsfTITLE

0.57+

overQUANTITY

0.56+

Point number twoQUANTITY

0.55+

ocsfPERSON

0.5+

ConfluenceORGANIZATION

0.46+

SiloTITLE

0.37+

Breaking Analysis: Survey Says! Takeaways from the latest CIO spending data


 

>> From theCUBE Studios in Palo Alto and Boston, bringing you data driven insights from theCUBE and ETR. This is breaking analysis with Dave Vellante. >> The technology spending outlook is not pretty and very much unpredictable right now. The negative sentiment is of course being driven by the macroeconomic factors in earnings forecasts that have been coming down all year in an environment of rising interest rates. And what's worse, is many people think earnings estimates are still too high. But it's understandable why there's so much uncertainty. I mean, technology is still booming, digital transformations are happening in earnest, leading companies have momentum and they got cash runways. And moreover, the CEOs of these leading companies are still really optimistic. But strong guidance in an environment of uncertainty is somewhat risky. Hello and welcome to this week's Wikibon CUBE Insights Powered by ETR. In this breaking analysis, we share takeaways from ETR'S latest spending survey, which was released to their private clients on October 21st. Today, we're going to review the macro spending data. We're going to share where CIOs think their cloud spend is headed. We're going to look at the actions that organizations are taking to manage uncertainty and then review some of the technology companies that have the most positive and negative outlooks in the ETR data set. Let's first look at the sample makeup from the latest ETR survey. ETR captured more than 1300 respondents in this latest survey. Its highest figure for the year and the quality and seniority of respondents just keeps going up each time we dig into the data. We've got large contributions as you can see here from sea level executives in a broad industry focus. Now the survey is still North America centric with 20% of the respondents coming from overseas and there is a bias toward larger organizations. And nonetheless, we're still talking well over 400 respondents coming from SMBs. Now ETR for those of you who don't know, conducts a quarterly spending intention survey and they also do periodic drilldowns. So just by the way of review, let's take a look at the expectations in the latest drilldown survey for IT spending. Before we look at the broader technology spending intentions survey data, followers of this program know that we reported on this a couple of weeks ago, spending expectations that peaked last December at 8.3% are now down to 5.5% with a slight uptick expected for next year as shown here. Now one CIO in the ETR community said these figures could be understated because of inflation. Now that's an interesting comment. Real GDP in the US is forecast to be around 1.5% in 2022. So these figures are significantly ahead of that. Nominal GDP is forecast to be significantly higher than what is shown in that slide. It was over 9% in June for example. And one would interpret that survey respondents are talking about real dollars which reflects inflationary factors in IT spend. So you might say, well if nominal GDP is in the high single digits this means that IT spending is below GDP which is usually not the case. But the flip side of that is technology tends to be deflationary because prices come down over time on a per unit basis, so this would be a normal and even positive trend. But it's mixed right now with prices on hard to find hardware, they're holding more firms. Software, you know, software tends to be driven by lock in and competition and switching costs. So you have those countervailing factors. Services can be inflationary, especially now as wages rise but certain sectors like laptops and semis and NAND are seeing less demand and maybe even some oversupply. So the way to look at this data is on a relative basis. In other words, IT buyers are reporting 280 basis point drop in spending sentiment from the end of last year. Now, something that we haven't shared from the latest drilldown survey which we will now is how IT bar buyers are thinking about cloud adoption. This chart shows responses from 419 IT execs from that drilldown and depicts the percentage of workloads their organizations have in the cloud today and what the expectation is through years from now. And you can see it's 27% today and it's nearly 50% in three years. Now the nuance is if you look at the question, that ETRS, it's they asked about IaaS and PaaS, which to some could include on-prem. Now, let me come back to that. In particular, financial services, IT, telco and retail and services industry cited expectations for the future for three years out that we're well above the average of the mean adoption levels. Regardless of how you interpret this data there's most certainly plenty of public cloud in the numbers. And whether you believe cloud is an operating environment or a place out there in the cloud, there's plenty of room for workloads to move into a cloud model well beyond mid this decade. So you know, as ho hum as we've been toward recent as-a-service models announced from the likes of HPE with GreenLake and Dell with APEX, the timing of those offerings may be pretty good actually. Now let's expand on some of the data that we showed a couple weeks ago. This chart shows responses from 282 execs on actions their organizations are taking over the next three months. And the Deltas are quite traumatic from the early part of this charter than the left hand side. The brown line is hiring freezes, the black line is freezing IT projects, and the green line is hiring increases and that red line is layoffs. And we put a box around the sort of general area of the isolation economy timeframe. And you can see the wild swings on this chart. By mid last summer, people were kickstarting things and more hiring was going on and the black line shows IT project freezes, you know, came way down. And now, or on the way back up as our hiring freezes. So we're seeing these wild swings in organizational actions and strategies which underscores the lack of predictability. As with supply chains around the world, this is likely due to the fact that organizations, pre pandemic they were optimized for efficiency, not a lot of waste rather than business resilience. Meaning, you know, there's again not a lot of fluff in the system or if there was it got flushed out during the pandemic. And so the need for productivity and automation is becoming increasingly important, especially as actions that solely rely on headcount changes are very, very difficult to manage. Now, let's dig into some of the vendor commentary and take a look at some of the names that have momentum and some of the others possibly facing headwinds. Here's a list of companies that stand out in the ETR survey. Snowflake, once again leads the pack with a positive spending outlook. HashiCorp, CrowdStrike, Databricks, Freshworks and ServiceNow, they round out the top six. Microsoft, they seem to always be in the mix, as do a number of other security and related companies including CyberArk, Zscaler, CloudFlare, Elastic, Datadog, Fortinet, Tenable and to a certain extent Akamai, you can kind of put them sort of in that group. You know, CDN, they got to worry about security. Everybody worries about security, but especially the CDNs. Now the other software names that are highlighted here include Workday and Salesforce. On the negative side, you can see Dynatrace saw some negatives in the latest survey especially around its analytics business. Security is generally holding up better than other sectors but it's still seeing greater levels of pressure than it had previously. So lower spend. And defections relative to its observability peers, that's really for Dynatrace. Now the other one that was somewhat surprising is IBM. You see the IBM was sort of in that negative realm here but IBM reported an outstanding quarter this past week with double digit revenue growth, strong momentum in software, consulting, mainframes and other infrastructure like storage. It's benefiting from the Kyndryl restructuring and it's on track IBM to deliver 10 billion in free cash flow this year. Red Hat is performing exceedingly well and growing in the very high teens. And so look, IBM is in the midst of a major transformation and it seems like a company that is really focused now with hybrid cloud being powered by Red Hat and consulting and a decade plus of AI investments finally paying off. Now the other big thing we'll add is, IBM was once an outstanding acquire of companies and it seems to be really getting its act together on the M&A front. Yes, Red Hat was a big pill to swallow but IBM has done a number of smaller acquisitions, I think seven this year. Like for example, Turbonomic, which is starting to pay off. Arvind Krishna has the company focused once again. And he and Jim J. Kavanaugh, IBM CFO, seem to be very confident on the guidance that they're giving in their business. So that's a real positive in our view for the industry. Okay, the last thing we'd like to do is take 12 of the companies from the previous chart and plot them in context. Now these companies don't necessarily compete with each other, some do. But they are standouts in the ETR survey and in the market. What we're showing here is a view that we like to often show, it's net score or spending velocity on the vertical axis. And it's a measure, that's a measure of the net percentage of customers that are spending more on a particular platform. So ETR asks, are you spending more or less? They subtract less from the mores. I mean I'm simplifying, but that's what net score is. Now in the horizontal axis, that is a measure of overlap which is which measures presence or pervasiveness in the dataset. So bigger the better. We've inserted a table that informs how the dots in the companies are positioned. These companies are all in the green in terms of net score. And that right most column in the table insert is indicative of their presence in the dataset, the end. So higher, again, is better for both columns. Two other notes, the red dotted line there you see at 40%. Anything over that indicates an highly elevated spending momentum for a given platform. And we purposefully took Microsoft out of the mix in this chart because it skews the data due to its large size. Everybody else would cluster on the left and Microsoft would be all alone in the right. So we take them out. Now as we noted earlier, Snowflake once again leads with a net score of 64%, well above the 40% line. Having said that, while adoption rates for Snowflake remains strong the company's spending velocity in the survey has come down to Earth. And many more customers are shifting from where they were last year and the year before in growth mode i.e. spending more year to year with Snowflake to now shifting more toward flat spending. So a plus or minus 5%. So that puts pressure on Snowflake's net score, just based on the math as to how ETR calculates, its proprietary net score methodology. So Snowflake is by no means insulated completely to the macro factors. And this was seen especially in the data in the Fortune 500 cut of the survey for Snowflake. We didn't show that here, just giving you anecdotal commentary from the survey which is backed up by data. So, it showed steeper declines in the Fortune 500 momentum. But overall, Snowflake, very impressive. Now what's more, note the position of Streamlit relative to Databricks. Streamlit is an open source python framework for developing data driven, data science oriented apps. And it's ironic that it's net score and shared in is almost identical to those of data bricks, as the aspirations of Snowflake and Databricks are beginning to collide. Now, however, the Databricks net score has held up very well over the past year and is in the 92nd percentile of its machine learning and AI peers. And while it's seeing some softness, like Snowflake in the Fortune 500, Databricks has steadily moved to the right on the X axis over the last several surveys even though it was unable to get to the public markets and do an IPO during the lockdown tech bubble. Let's come back to the chart. ServiceNow is impressive because it's well above the 40% mark and it has 437 shared in on this cut, the largest of any company that we chose to plot here. The only real negative on ServiceNow is, more large customers are keeping spending levels flat. That's putting a little bit pressure on its net score, but that's just conservatives. It's kind of like Snowflakes, you know, same thing but in a larger scale. But it's defections, the ServiceNow as in Snowflake as well. It's defections remain very, very low, really low churn below 2% for ServiceNow, in fact, within the dataset. Now it's interesting to also see Freshworks hit the list. You can see them as one of the few ITSM vendors that has momentum and can potentially take on ServiceNow. Workday, on this chart, it's the other big app player that's above the 40% line and we're only showing Workday HCM, FYI, in this graphic. It's Workday Financials, that offering, is below the 40% line just for reference. Now let's talk about CrowdStrike. We attended Falcon last month, CrowdStrike's user conference and we're very impressed with the product visio, the company's execution, it's growing partnerships. And you can see in this graphic, the ETR survey data confirms the company's stellar performance with a net score at 50%, well above the 40% mark. And importantly, more than 300 mentions. That's second only to ServiceNow, amongst the 12 companies that we've chosen to highlight here. Only Microsoft, which is not shown here, has a higher net score in the security space than CrowdStrike. And when it comes to presence, CrowdStrike now has caught up to Splunk in terms of pervasion in the survey. Now CyberArk and Zscaler are the other two security firms that are right at that 40% red dotted line. CyberArk for names with over a hundred citations in the security sector, is only behind Microsoft and CrowdStrike. Zscaler for its part in the survey is seeing strong momentum in the Fortune 500, unlike what we said for Snowflake. And its pervasion on the X-axis has been steadily increasing. Again, not that Snowflake and CrowdStrike compete with each other but they're too prominent names and it's just interesting to compare peers and business models. Cloudflare, Elastic and Datadog are slightly below the 40% mark but they made the sort of top 12 that we showed to highlight here and they continue to have positive sentiment in the survey. So, what are the big takeaways from this latest survey, this really quick snapshot that we've taken. As you know, over the next several weeks we're going to dig into it more and more. As we've previously reported, the tide is going out and it's taking virtually all the tech ships with it. But in many ways the current market is a story of heightened expectations coming down to Earth, miscalculations about the economic patterns and the swings and imperfect visibility. Leading Barclays analyst, Ramo Limchao ask the question to guide or not to guide in a recent research note he wrote. His point being, should companies guide or should they be more cautious? Many companies, if not most companies, are actually giving guidance. Indeed, when companies like Oracle and IBM are emphatic about their near term outlook and their visibility, it gives one confidence. On the other hand, reasonable people are asking, will the red hot valuations that we saw over the last two years from the likes of Snowflake, CrowdStrike, MongoDB, Okta, Zscaler, and others. Will they return? Or are we in for a long, drawn out, sideways exercise before we see sustained momentum? And to that uncertainty, we add elections and public policy. It's very hard to predict right now. I'm sorry to be like a two-handed lawyer, you know. On the one hand, on the other hand. But that's just the way it is. Let's just say for our part, we think that once it's clear that interest rates are on their way back down and we'll stabilize it under 4% and we have clarity on the direction of inflation, wages, unemployment and geopolitics, the wild swings and sentiment will subside. But when that happens is anyone's guess. If I had to peg, I'd say 18 months, which puts us at least into the spring of 2024. What's your prediction? You know, it's almost that time of year. Let's hear it. Please keep in touch and let us know what you think. Okay, that's it for now. Many thanks to Alex Myerson. He is on production and he manages the podcast for us. Ken Schiffman as well is our newest addition to the Boston Studio. Kristin Martin and Cheryl Knight, they help get the word out on social media and in our newsletters. And Rob Hoff is our EIC, editor-in-chief over at SiliconANGLE. He does some wonderful editing for us. Thank you all. Remember all these episodes, they are available as podcasts. Wherever you listen, just search breaking analysis podcast. I publish each week on wikibon.com and siliconangle.com. Or you can email me at david.vellante@siliconangle.com or DM me @dvellante. Or feel free to comment on our LinkedIn posts. And please do check out etr.ai. They've got the best survey data in the enterprise tech business. If you haven't checked that out, you should. It'll give you an advantage. This is Dave Vellante for theCUBE Insights Powered by ETR. Thanks for watching. Be well and we'll see you next time on Breaking Analysis. (soft upbeat music)

Published Date : Oct 23 2022

SUMMARY :

in Palo Alto and Boston, and growing in the very high teens.

SENTIMENT ANALYSIS :

ENTITIES

EntityCategoryConfidence
Alex MyersonPERSON

0.99+

IBMORGANIZATION

0.99+

Dave VellantePERSON

0.99+

Jim J. KavanaughPERSON

0.99+

OracleORGANIZATION

0.99+

Ken SchiffmanPERSON

0.99+

October 21stDATE

0.99+

Cheryl KnightPERSON

0.99+

Ramo LimchaoPERSON

0.99+

JuneDATE

0.99+

MicrosoftORGANIZATION

0.99+

Arvind KrishnaPERSON

0.99+

EarthLOCATION

0.99+

Rob HoffPERSON

0.99+

10 billionQUANTITY

0.99+

282 execsQUANTITY

0.99+

12 companiesQUANTITY

0.99+

DellORGANIZATION

0.99+

50%QUANTITY

0.99+

DatabricksORGANIZATION

0.99+

40%QUANTITY

0.99+

USLOCATION

0.99+

27%QUANTITY

0.99+

last yearDATE

0.99+

Kristin MartinPERSON

0.99+

BostonLOCATION

0.99+

2022DATE

0.99+

ZscalerORGANIZATION

0.99+

GreenLakeORGANIZATION

0.99+

APEXORGANIZATION

0.99+

8.3%QUANTITY

0.99+

FortinetORGANIZATION

0.99+

TodayDATE

0.99+

Palo AltoLOCATION

0.99+

david.vellante@siliconangle.comOTHER

0.99+

FreshworksORGANIZATION

0.99+

DatadogORGANIZATION

0.99+

18 monthsQUANTITY

0.99+

TenableORGANIZATION

0.99+

419 IT execsQUANTITY

0.99+

64%QUANTITY

0.99+

three yearsQUANTITY

0.99+

last monthDATE

0.99+

5.5%QUANTITY

0.99+

OktaORGANIZATION

0.99+

next yearDATE

0.99+

92nd percentileQUANTITY

0.99+

spring of 2024DATE

0.99+

CrowdStrikeORGANIZATION

0.99+

more than 300 mentionsQUANTITY

0.99+

ETRORGANIZATION

0.99+

secondQUANTITY

0.99+

each weekQUANTITY

0.99+

ServiceNowORGANIZATION

0.99+

MongoDBORGANIZATION

0.99+

SnowflakeORGANIZATION

0.99+

CyberArkORGANIZATION

0.99+

North AmericaLOCATION

0.99+

HPEORGANIZATION

0.99+

HashiCorpORGANIZATION

0.99+

theCUBE StudiosORGANIZATION

0.99+

SiliconANGLEORGANIZATION

0.99+

more than 1300 respondentsQUANTITY

0.99+

theCUBEORGANIZATION

0.99+

mid last summerDATE

0.99+

437QUANTITY

0.98+

ETRSORGANIZATION

0.98+

this yearDATE

0.98+

both columnsQUANTITY

0.98+

minus 5%QUANTITY

0.98+

last DecemberDATE

0.98+

StreamlitTITLE

0.98+

Daniel Newman, Futurum Research | AnsibleFest 2022


 

>>Hey guys. Welcome back to the Cubes coverage of Ansible Fast 2022. This is day two of our wall to wall coverage. Lisa Martin here with John Ferer. John, we're seeing this world where companies are saying if we can't automate it, we need to, The automation market is transforming. There's been a lot of buzz about that. A lot of technical chops here at Ansible Fest. >>Yeah, I mean, we've got a great guest here coming on Cuba alumni, Dean Newman, future room. He travels every event he's got. He's got his nose to the grindstone ear to the ground. Great analysis. I mean, we're gonna get into why it's important. How does Ansible fit into the big picture? It's really gonna be a great segment. The >>Board do it well, John just did my job for me about, I'll introduce him again. Daniel Newman, one of our alumni is Back Principal Analyst at Future and Research. Great to have you back on the cube. >>Yeah, it's good to join you. Excited to be back in Chicago. I don't know if you guys knew this, but for 40 years, this was my hometown. Now I don't necessarily brag about that anymore. I'm, I live in Austin now. I'm a proud Texan, but I did grow up here actually out in the west suburbs. I got off the plane, I felt the cold air, and I almost turned around and said, Does this thing go back? Yeah. Cause I'm, I've, I've grown thin skin. It did not take me long. I, I like the warm, Come on, >>I'm the saying, I'm from California and I got off the plane Monday. I went, Whoa, I need a coat. And I was in Miami a week ago and it was 85. >>Oh goodness. >>Crazy. So you just flew in. Talk about what's going on, your take on, on Ansible. We've talked a lot with the community, with partners, with customers, a lot of momentum. The flywheel of the community is going around and round and round. What are some of your perspectives that you see? >>Yeah, absolutely. Well, let's you know, I'm gonna take a quick step back. We're entering an era where companies are gonna have to figure out how to do more with less. Okay? We've got exponential data growth, we've got more architectural complexity than ever before. Companies are trying to discern how to deal with many different environments. And just at a macro level, Red Hat is one of the companies that is almost certainly gonna be part of this multi-cloud hybrid cloud era. So that should initially give a lot of confidence to the buying group that are looking at how to automate their environments. You're automating workflows, but really with, with Ansible, we're focused on automating it, automating the network. So as companies are kind of dig out, we're entering this recessionary period, Okay, we're gonna call it what it is. The first thing that they're gonna look at is how do we tech our way out of it? >>I had a wonderful one-on-one conversation with ServiceNow ceo, Bill McDermott, and we saw ServiceNow was in focus this morning in the initial opening session. This is the integration, right? Ansible integrating with ServiceNow. What we need to see is infrastructure automation, layers and applications working in concert to basically enable enterprises to be up and running all the time. Let's first fix the problems that are most common. Let's, let's automate 'em, let's script them. And then at some point, let's have them self resolving, which we saw at the end with Project Wisdom. So as I see it, automation is that layer that enterprises, boards, technologists, all can agree upon are basically here's something that can make our business more efficient, more profitable, and it's gonna deal with this short term downturn in a way that tech is actually gonna be the answer. Just like Bill and I said, let's tech our way out of it. >>If you look at the Red Hat being bought by ibm, you see Project Wisdom Project, not a product, it's a project. Project Wisdom is the confluence of research and practitioners kind of coming together with ai. So bringing AI power to the Ansible is interesting. Red Hat, Linux, Rel OpenShift, I mean, Red Hat's kind of position, isn't it? Kind of be in that right spot where a puck might be coming maybe. I mean, what do you think? >>Yeah, as analysts, we're really good at predicting the, the recent past. It's a joke I always like to make, but Red Hat's been building toward the future. I think for some time. Project Wisdom, first of all, I was very encouraged with it. One of the things that many people in the market probably have commented on is how close is IBM in Red Hat? Now, again, it's a $34 billion acquisition that was made, but boy, the cultures of these two companies couldn't be more different. And of course, Red Hat kind of carries this, this sort of middle ground layer where they provide a lot of value in services to companies that maybe don't use IBM at, at, for the public cloud especially. This was a great indication of how you can take the power of IBM's research, which of course has some of the world's most prolific data scientists, engineers, building things for the future. >>You know, you see things like yesterday they launched a, you know, an AI solution. You know, they're building chips, semiconductors, and technologies that are gonna power the future. They're building quantum. Long story short, they have these really brilliant technologists here that could be adding value to Red Hat. And I don't know that the, the world has fully been able to appreciate that. So when, when they got on stage and they kind of say, Here's how IBM is gonna help power the next generation, I was immediately very encouraged by the fact that the two companies are starting to show signs of how they can collaborate to offer value to their customers. Because of course, as John kind of started off with, his question is, they've kind of been where the puck is going. Open source, Linux hybrid cloud, This is the future. In the future. Every company's multi-cloud. And I said in a one-on-one meeting this morning, every company is going to probably have workloads on every cloud, especially large enterprises. >>Yeah. And I think that the secret's gonna be how do you make that evolve? And one of the things that's coming out of the industry over the years, and looking back as historians, we would say, gotta have standards. Well, with cloud, now people standards might slow things down. So you're gonna start to figure out how does the community and the developers are thinking it'll be the canary in the coal mine. And I'd love to get your reaction on that, because we got Cuban next week. You're seeing people kind of align and try to win the developers, which, you know, I always laugh cuz like, you don't wanna win, you want, you want them on your team, but you don't wanna win them. It's like a, it's like, so developers will decide, >>Well, I, I think what's happening is there are multiple forces that are driving product adoption. And John, getting the developers to support the utilization and adoption of any sort of stack goes a long way. We've seen how sticky it can be, how sticky it is with many of the public cloud pro providers, how sticky it is with certain applications. And it's gonna be sticky here in these interim layers like open source automation. And Red Hat does have a very compelling developer ecosystem. I mean, if you sat in the keynote this morning, I said, you know, if you're not a developer, some of this stuff would've been fairly difficult to understand. But as a developer you saw them laughing at jokes because, you know, what was it the whole part about, you know, it didn't actually, the ping wasn't a success, right? And everybody started laughing and you know, I, I was sitting next to someone who wasn't technical and, and you know, she kinda goes, What, what was so funny? >>I'm like, well, he said it worked. Do you see that? It said zero data trans or whatever that was. So, but if I may just really quickly, one, one other thing I did wanna say about Project Wisdom, John, that the low code and no code to the full stack developer is a continuum that every technology company is gonna have to think deeply about as we go to the future. Because the people that tend to know the process that needs to be automated tend to not be able to code it. And so we've seen every automation company on the planet sort of figuring out and how to address this low code, no code environment. I think the power of this partnership between IBM Research and Red Hat is that they have an incredibly deep bench of capabilities to do things like, like self-training. Okay, you've got so much data, such significant size models and accuracy is a problem, but we need systems that can self teach. They need to be able self-teach, self learn, self-heal so that we can actually get to the crux of what automation is supposed to do for us. And that's supposed to take the mundane out and enable those humans that know how to code to work on the really difficult and hard stuff because the automation's not gonna replace any of that stuff anytime soon. >>So where do you think looking at, at the partnership and the evolution of it between IBM research and Red Hat, and you're saying, you know, they're, they're, they're finally getting this synergy together. How is it gonna affect the future of automation and how is it poised to give them a competitive advantage in the market? >>Yeah, I think the future or the, the competitive space is that, that is, is ecosystems and integration. So yesterday you heard, you know, Red Hat Ansible focusing on a partnership with aws. You know, this week I was at Oracle Cloud world and they're talking about running their database in aws. And, and so I'm kind of going around to get to the answer to your question, but I think collaboration is sort of the future of growth and innovation. You need multiple companies working towards the same goal to put gobs of resources, that's the technical term, gobs of resources towards doing really hard things. And so Ansible has been very successful in automating and securing and focusing on very certain specific workloads that need to be automated, but we need more and there's gonna be more data created. The proliferation, especially the edge. So you saw all this stuff about Rockwell, How do you really automate the edge at scale? You need large models that are able to look and consume a ton of data that are gonna be continuously learning, and then eventually they're gonna be able to deliver value to these companies at scale. IBM plus Red Hat have really great resources to drive this kind of automation. Having said that, I see those partnerships with aws, with Microsoft, with ibm, with ServiceNow. It's not one player coming to the table. It's a lot of players. They >>Gotta be Switzerland. I mean they have the Switzerland. I mean, but the thing about the Amazon deal is like that marketplace integration essentially puts Ansible once a client's in on, on marketplace and you get the central on the same bill. I mean, that's gonna be a money maker for Ansible. I >>Couldn't agree more, John. I think being part of these public cloud marketplaces is gonna be so critical and having Ansible land and of course AWS largest public cloud by volume, largest marketplace today. And my opinion is that partnership will be extensible to the other public clouds over time. That just makes sense. And so you start, you know, I think we've learned this, John, you've done enough of these interviews that, you know, you start with the biggest, with the highest distribution and probability rates, which in this case right now is aws, but it'll land on in Azure, it'll land in Google and it'll continue to, to grow. And that kind of adoption, streamlining make it consumption more consumable. That's >>Always, I think, Red Hat and Ansible, you nailed it on that whole point about multicloud, because what happens then is why would I want to alienate a marketplace audience to use my product when it could span multiple environments, right? So you saw, you heard that Stephanie yesterday talk about they, they didn't say multiple clouds, multiple environments. And I think that is where I think I see this layer coming in because some companies just have to work on all clouds. That's the way it has to be. Why wouldn't you? >>Yeah. Well every, every company will probably end up with some workloads in every cloud. I just think that is the fate. Whether it's how we consume our SaaS, which a lot of people don't think about, but it always tends to be running on another hyperscale public cloud. Most companies tend to be consuming some workloads from every cloud. It's not always direct. So they might have a single control plane that they tend to lead the way with, but that is only gonna continue to change. And every public cloud company seems to be working on figuring out what their niche is. What is the one thing that sort of drives whether, you know, it is, you know, traditional, we know the commoditization of traditional storage network compute. So now you're seeing things like ai, things like automation, things like the edge collaboration tools, software being put into the, to the forefront because it's a different consumption model, it's a different margin and economic model. And then of course it gives competitive advantages. And we've seen that, you know, I came back from Google Cloud next and at Google Cloud next, you know, you can see they're leaning into the data AI cloud. I mean, that is their focus, like data ai. This is how we get people to come in and start using Google, who in most cases, they're probably using AWS or Microsoft today. >>It's a great specialty cloud right there. That's a big use case. I can run data on Google and run something on aws. >>And then of course you've got all kinds of, and this is a little off topic, but you got sovereignty, compliance, regulatory that tends to drive different clouds over, you know, global clouds like Tencent and Alibaba. You know, if your workloads are in China, >>Well, this comes back down at least to the whole complexity issue. I mean, it has to get complex before it gets easier. And I think that's what we're seeing companies opportunities like Ansible to be like, Okay, tame, tame the complexity. >>Yeah. Yeah, I totally agree with you. I mean, look, when I was watching the demonstrations today, my take is there's so many kind of simple, repeatable and mundane tasks in everyday life that enterprises need to, to automate. Do that first, you know? Then the second thing is working on how do you create self-healing, self-teaching, self-learning, You know, and, and I realize I'm a little broken of a broken record at this, but these are those first things to fix. You know, I know we want to jump to the future where we automate every task and we have multi-term conversational AI that is booking our calendars and driving our cars for us. But in the first place, we just need to say, Hey, the network's down. Like, let's make sure that we can quickly get access back to that network again. Let's make sure that we're able to reach our different zones and locations. Let's make sure that robotic arm is continually doing the thing it's supposed to be doing on the schedule that it's been committed to. That's first. And then we can get to some of these really intensive deep metaverse state of automation that we talk about. Self-learning, data replication, synthetic data. I'm just gonna throw terms around. So I sound super smart. >>In your customer conversations though, from an looking at the automation journey, are you finding most of them, or some percentage is, is wanting to go directly into those really complex projects rather than starting with the basics? >>I don't know that you're, you're finding that the customers want to do that? I think it's the architecture that often ends up being a problem is we as, as the vendor side, will tend to talk about the most complex problems that they're able to solve before companies have really started solving the, the immediate problems that are before them. You know, it's, we talk about, you know, the metaphor of the cloud is a great one, but we talk about the cloud, like it's ubiquitous. Yeah. But less than 30% of our workloads are in the public cloud. Automation is still in very early days and in many industries it's fairly nascent. And doing things like self-healing networks is still something that hasn't even been able to be deployed on an enterprise-wide basis, let alone at the industrial layer. Maybe at the company's on manufacturing PLAs or in oil fields. Like these are places that have difficult to reach infrastructure that needs to be running all the time. We need to build systems and leverage the power of automation to keep that stuff up and running. That's, that's just business value, which by the way is what makes the world go running. Yeah. Awesome. >>A lot of customers and users are struggling to find what's the value in automating certain process, What's the ROI in it? How do you help them get there so that they understand how to start, but truly to make it a journey that is a success. >>ROI tends to be a little bit nebulous. It's one of those things I think a lot of analysts do. Things like TCO analysis Yeah. Is an ROI analysis. I think the businesses actually tend to know what the ROI is gonna be because they can basically look at something like, you know, when you have an msa, here's the downtime, right? Business can typically tell you, you know, I guarantee you Amazon could say, Look for every second of downtime, this is how much commerce it costs us. Yeah. A company can generally say, if it was, you know, we had the energy, the windmills company, like they could say every minute that windmill isn't running, we're creating, you know, X amount less energy. So there's a, there's a time value proposition that companies can determine. Now the question is, is about the deployment. You know, we, I've seen it more nascent, like cybersecurity can tend to be nascent. >>Like what does a breach cost us? Well there's, you know, specific costs of actually getting the breach cured or paying for the cybersecurity services. And then there's the actual, you know, ephemeral costs of brand damage and of risks and customer, you know, negative customer sentiment that potentially comes out of it. With automation, I think it's actually pretty well understood. They can look at, hey, if we can do this many more cycles, if we can keep our uptime at this rate, if we can reduce specific workforce, and I'm always very careful about this because I don't believe automation is about replacement or displacement, but I do think it is about up-leveling and it is about helping people work on things that are complex problems that machines can't solve. I mean, said that if you don't need to put as many bodies on something that can be immediately returned to the organization's bottom line, or those resources can be used for something more innovative. So all those things are pretty well understood. Getting the automation to full deployment at scale, though, I think what often, it's not that roi, it's the timeline that gets misunderstood. Like all it projects, they tend to take longer. And even when things are made really easy, like with what Project Wisdom is trying to do, semantically enable through low code, no code and the ability to get more accuracy, it just never tends to happen quite as fast. So, but that's not an automation problem, That's just the crux of it. >>Okay. What are some of the, the next things on your plate? You're quite a, a busy guy. We, you, you were at Google, you were at Oracle, you're here today. What are some of the next things that we can expect from Daniel Newman? >>Oh boy, I moved Really, I do move really quickly and thank you for that. Well, I'm very excited. I'm taking a couple of work personal days. I don't know if you're a fan, but F1 is this weekend. I'm the US Grand Prix. Oh, you're gonna Austin. So I will be, I live in Austin. Oh. So I will be in Austin. I will be at the Grand Prix. It is work because it, you know, I'm going with a number of our clients that have, have sponsorships there. So I'll be spending time figuring out how the data that comes off of these really fun cars is meaningfully gonna change the world. I'll actually be talking to Splunk CEO at the, at the race on Saturday morning. But yeah, I got a lot of great things. I got a, a conversation coming up with the CEO of Twilio next week. We got a huge week of earnings ahead and so I do a lot of work on that. So I'll be on Bloomberg next week with Emily Chang talking about Microsoft and Google. Love talking to Emily, but just as much love being here on, on the queue with you >>Guys. Well we like to hear that. Who you're rooting for F one's your favorite driver. I, >>I, I like Lando. Do you? I'm Norris. I know it's not necessarily a fan favorite, but I'm a bit of a McLaren guy. I mean obviously I have clients with Oracle and Red Bull with Ball Common Ferrari. I've got Cly Splunk and so I have clients in all. So I'm cheering for all of 'em. And on Sunday I'm actually gonna be in the Williams Paddock. So I don't, I don't know if that's gonna gimme me a chance to really root for anything, but I'm always, always a big fan of the underdog. So maybe Latifi. >>There you go. And the data that comes off the how many central unbeliev, the car, it's crazy's. Such a scientific sport. Believable. >>We could have Christian, I was with Christian Horner yesterday, the team principal from Reside. Oh yeah, yeah. He was at the Oracle event and we did a q and a with him and with the CMO of, it's so much fun. F1 has been unbelievable to watch the momentum and what a great, you know, transitional conversation to to, to CX and automation of experiences for fans as the fan has grown by hundreds of percent. But just to circle back full way, I was very encouraged with what I saw today. Red Hat, Ansible, IBM Strong partnership. I like what they're doing in their expanded ecosystem. And automation, by the way, is gonna be one of the most robust investment areas over the next few years, even as other parts of tech continue to struggle that in cyber security. >>You heard it here. First guys, investment in automation and cyber security straight from two analysts. I got to sit between. For our guests and John Furrier, I'm Lisa Martin, you're watching The Cube Live from Chicago, Ansible Fest 22. John and I will be back after a short break. SO'S stick around.

Published Date : Oct 19 2022

SUMMARY :

Welcome back to the Cubes coverage of Ansible Fast 2022. He's got his nose to the grindstone ear to the ground. Great to have you back on the cube. I got off the plane, I felt the cold air, and I almost turned around and said, Does this thing go back? And I was in Miami a week ago and it was 85. The flywheel of the community is going around and round So that should initially give a lot of confidence to the buying group that in concert to basically enable enterprises to be up and running all the time. I mean, what do you think? One of the things that many people in the market And I don't know that the, the world has fully been able to appreciate that. And I'd love to get your reaction on that, because we got Cuban next week. And John, getting the developers to support the utilization Because the people that tend to know the process that needs to be the future of automation and how is it poised to give them a competitive advantage in the market? You need large models that are able to look and consume a ton of data that are gonna be continuously I mean, but the thing about the Amazon deal is like that marketplace integration And so you start, And I think that is where I think I see this What is the one thing that sort of drives whether, you know, it is, you know, I can run data on Google regulatory that tends to drive different clouds over, you know, global clouds like Tencent and Alibaba. I mean, it has to get complex before is continually doing the thing it's supposed to be doing on the schedule that it's been committed to. leverage the power of automation to keep that stuff up and running. how to start, but truly to make it a journey that is a success. to know what the ROI is gonna be because they can basically look at something like, you know, I mean, said that if you don't need to put as many bodies on something that What are some of the next things that we can Love talking to Emily, but just as much love being here on, on the queue with you Who you're rooting for F one's your favorite driver. And on Sunday I'm actually gonna be in the Williams Paddock. And the data that comes off the how many central unbeliev, the car, And automation, by the way, is gonna be one of the most robust investment areas over the next few years, I got to sit between.

SENTIMENT ANALYSIS :

ENTITIES

EntityCategoryConfidence
Lisa MartinPERSON

0.99+

Daniel NewmanPERSON

0.99+

MicrosoftORGANIZATION

0.99+

CaliforniaLOCATION

0.99+

JohnPERSON

0.99+

AlibabaORGANIZATION

0.99+

ChicagoLOCATION

0.99+

Dean NewmanPERSON

0.99+

Emily ChangPERSON

0.99+

John FurrierPERSON

0.99+

AustinLOCATION

0.99+

AmazonORGANIZATION

0.99+

John FererPERSON

0.99+

IBMORGANIZATION

0.99+

EmilyPERSON

0.99+

MiamiLOCATION

0.99+

TencentORGANIZATION

0.99+

ChinaLOCATION

0.99+

OracleORGANIZATION

0.99+

MondayDATE

0.99+

GoogleORGANIZATION

0.99+

AWSORGANIZATION

0.99+

AnsibleORGANIZATION

0.99+

Red HatORGANIZATION

0.99+

40 yearsQUANTITY

0.99+

TwilioORGANIZATION

0.99+

next weekDATE

0.99+

firstQUANTITY

0.99+

yesterdayDATE

0.99+

SundayDATE

0.99+

Saturday morningDATE

0.99+

Futurum ResearchORGANIZATION

0.99+

two companiesQUANTITY

0.99+

BillPERSON

0.99+

Red BullORGANIZATION

0.99+

StephaniePERSON

0.99+

less than 30%QUANTITY

0.99+

85QUANTITY

0.99+

ibmORGANIZATION

0.99+

todayDATE

0.99+

The Cube LiveTITLE

0.99+

two analystsQUANTITY

0.99+

IBM ResearchORGANIZATION

0.99+

McLarenORGANIZATION

0.99+

Bill McDermottPERSON

0.99+

oneQUANTITY

0.99+

Christian HornerPERSON

0.98+

this weekDATE

0.98+

one playerQUANTITY

0.98+

Williams PaddockLOCATION

0.98+

RockwellORGANIZATION

0.98+

Grand PrixEVENT

0.98+

Horizon3.ai Signal | Horizon3.ai Partner Program Expands Internationally


 

hello I'm John Furrier with thecube and welcome to this special presentation of the cube and Horizon 3.ai they're announcing a global partner first approach expanding their successful pen testing product Net Zero you're going to hear from leading experts in their staff their CEO positioning themselves for a successful Channel distribution expansion internationally in Europe Middle East Africa and Asia Pacific in this Cube special presentation you'll hear about the expansion the expanse partner program giving Partners a unique opportunity to offer Net Zero to their customers Innovation and Pen testing is going International with Horizon 3.ai enjoy the program [Music] welcome back everyone to the cube and Horizon 3.ai special presentation I'm John Furrier host of thecube we're here with Jennifer Lee head of Channel sales at Horizon 3.ai Jennifer welcome to the cube thanks for coming on great well thank you for having me so big news around Horizon 3.aa driving Channel first commitment you guys are expanding the channel partner program to include all kinds of new rewards incentives training programs help educate you know Partners really drive more recurring Revenue certainly cloud and Cloud scale has done that you got a great product that fits into that kind of Channel model great Services you can wrap around it good stuff so let's get into it what are you guys doing what are what are you guys doing with this news why is this so important yeah for sure so um yeah we like you said we recently expanded our Channel partner program um the driving force behind it was really just um to align our like you said our Channel first commitment um and creating awareness around the importance of our partner ecosystems um so that's it's really how we go to market is is through the channel and a great International Focus I've talked with the CEO so you know about the solution and he broke down all the action on why it's important on the product side but why now on the go to market change what's the what's the why behind this big this news on the channel yeah for sure so um we are doing this now really to align our business strategy which is built on the concept of enabling our partners to create a high value high margin business on top of our platform and so um we offer a solution called node zero it provides autonomous pen testing as a service and it allows organizations to continuously verify their security posture um so we our company vision we have this tagline that states that our pen testing enables organizations to see themselves Through The Eyes of an attacker and um we use the like the attacker's perspective to identify exploitable weaknesses and vulnerabilities so we created this partner program from a perspective of the partner so the partner's perspective and we've built It Through The Eyes of our partner right so we're prioritizing really what the partner is looking for and uh will ensure like Mutual success for us yeah the partners always want to get in front of the customers and bring new stuff to them pen tests have traditionally been really expensive uh and so bringing it down in one to a service level that's one affordable and has flexibility to it allows a lot of capability so I imagine people getting excited by it so I have to ask you about the program What specifically are you guys doing can you share any details around what it means for the partners what they get what's in it for them can you just break down some of the mechanics and mechanisms or or details yeah yep um you know we're really looking to create business alignment um and like I said establish Mutual success with our partners so we've got two um two key elements that we were really focused on um that we bring to the partners so the opportunity the profit margin expansion is one of them and um a way for our partners to really differentiate themselves and stay relevant in the market so um we've restructured our discount model really um you know highlighting profitability and maximizing profitability and uh this includes our deal registration we've we've created deal registration program we've increased discount for partners who take part in our partner certification uh trainings and we've we have some other partner incentives uh that we we've created that that's going to help out there we've we put this all so we've recently Gone live with our partner portal um it's a Consolidated experience for our partners where they can access our our sales tools and we really view our partners as an extension of our sales and Technical teams and so we've extended all of our our training material that we use internally we've made it available to our partners through our partner portal um we've um I'm trying I'm thinking now back what else is in that partner portal here we've got our partner certification information so all the content that's delivered during that training can be found in the portal we've got deal registration uh um co-branded marketing materials pipeline management and so um this this portal gives our partners a One-Stop place to to go to find all that information um and then just really quickly on the second part of that that I mentioned is our technology really is um really disruptive to the market so you know like you said autonomous pen testing it's um it's still it's well it's still still relatively new topic uh for security practitioners and um it's proven to be really disruptive so um that on top of um just well recently we found an article that um that mentioned by markets and markets that reports that the global pen testing markets really expanding and so it's expected to grow to like 2.7 billion um by 2027. so the Market's there right the Market's expanding it's growing and so for our partners it's just really allows them to grow their revenue um across their customer base expand their customer base and offering this High profit margin while you know getting in early to Market on this just disruptive technology big Market a lot of opportunities to make some money people love to put more margin on on those deals especially when you can bring a great solution that everyone knows is hard to do so I think that's going to provide a lot of value is there is there a type of partner that you guys see emerging or you aligning with you mentioned the alignment with the partners I can see how that the training and the incentives are all there sounds like it's all going well is there a type of partner that's resonating the most or is there categories of partners that can take advantage of this yeah absolutely so we work with all different kinds of Partners we work with our traditional resale Partners um we've worked we're working with systems integrators we have a really strong MSP mssp program um we've got Consulting partners and the Consulting Partners especially with the ones that offer pen test services so we they use us as a as we act as a force multiplier just really offering them profit margin expansion um opportunity there we've got some technology partner partners that we really work with for co-cell opportunities and then we've got our Cloud Partners um you'd mentioned that earlier and so we are in AWS Marketplace so our ccpo partners we're part of the ISP accelerate program um so we we're doing a lot there with our Cloud partners and um of course we uh we go to market with uh distribution Partners as well gotta love the opportunity for more margin expansion every kind of partner wants to put more gross profit on their deals is there a certification involved I have to ask is there like do you get do people get certified or is it just you get trained is it self-paced training is it in person how are you guys doing the whole training certification thing because is that is that a requirement yeah absolutely so we do offer a certification program and um it's been very popular this includes a a seller's portion and an operator portion and and so um this is at no cost to our partners and um we operate both virtually it's it's law it's virtually but live it's not self-paced and we also have in person um you know sessions as well and we also can customize these to any partners that have a large group of people and we can just we can do one in person or virtual just specifically for that partner well any kind of incentive opportunities and marketing opportunities everyone loves to get the uh get the deals just kind of rolling in leads from what we can see if our early reporting this looks like a hot product price wise service level wise what incentive do you guys thinking about and and Joint marketing you mentioned co-sell earlier in pipeline so I was kind of kind of honing in on that piece sure and yes and then to follow along with our partner certification program we do incentivize our partners there if they have a certain number certified their discount increases so that's part of it we have our deal registration program that increases discount as well um and then we do have some um some partner incentives that are wrapped around meeting setting and um moving moving opportunities along to uh proof of value gotta love the education driving value I have to ask you so you've been around the industry you've seen the channel relationships out there you're seeing companies old school new school you know uh Horizon 3.ai is kind of like that new school very cloud specific a lot of Leverage with we mentioned AWS and all the clouds um why is the company so hot right now why did you join them and what's why are people attracted to this company what's the what's the attraction what's the vibe what do you what do you see and what what do you use what did you see in in this company well this is just you know like I said it's very disruptive um it's really in high demand right now and um and and just because because it's new to Market and uh a newer technology so we are we can collaborate with a manual pen tester um we can you know we can allow our customers to run their pen test um with with no specialty teams and um and and then so we and like you know like I said we can allow our partners can actually build businesses profitable businesses so we can they can use our product to increase their services revenue and um and build their business model you know around around our services what's interesting about the pen test thing is that it's very expensive and time consuming the people who do them are very talented people that could be working on really bigger things in the in absolutely customers so bringing this into the channel allows them if you look at the price Delta between a pen test and then what you guys are offering I mean that's a huge margin Gap between street price of say today's pen test and what you guys offer when you show people that they follow do they say too good to be true I mean what are some of the things that people say when you kind of show them that are they like scratch their head like come on what's the what's the catch here right so the cost savings is a huge is huge for us um and then also you know like I said working as a force multiplier with a pen testing company that offers the services and so they can they can do their their annual manual pen tests that may be required around compliance regulations and then we can we can act as the continuous verification of their security um um you know that that they can run um weekly and so it's just um you know it's just an addition to to what they're offering already and an expansion so Jennifer thanks for coming on thecube really appreciate you uh coming on sharing the insights on the channel uh what's next what can we expect from the channel group what are you thinking what's going on right so we're really looking to expand our our Channel um footprint and um very strategically uh we've got um we've got some big plans um for for Horizon 3.ai awesome well thanks for coming on really appreciate it you're watching thecube the leader in high tech Enterprise coverage [Music] [Music] hello and welcome to the Cube's special presentation with Horizon 3.ai with Raina Richter vice president of emea Europe Middle East and Africa and Asia Pacific APAC for Horizon 3 today welcome to this special Cube presentation thanks for joining us thank you for the invitation so Horizon 3 a guy driving Global expansion big international news with a partner first approach you guys are expanding internationally let's get into it you guys are driving this new expanse partner program to new heights tell us about it what are you seeing in the momentum why the expansion what's all the news about well I would say uh yeah in in international we have I would say a similar similar situation like in the US um there is a global shortage of well-educated penetration testers on the one hand side on the other side um we have a raising demand of uh network and infrastructure security and with our approach of an uh autonomous penetration testing I I believe we are totally on top of the game um especially as we have also now uh starting with an international instance that means for example if a customer in Europe is using uh our service node zero he will be connected to a node zero instance which is located inside the European Union and therefore he has doesn't have to worry about the conflict between the European the gdpr regulations versus the US Cloud act and I would say there we have a total good package for our partners that they can provide differentiators to their customers you know we've had great conversations here on thecube with the CEO and the founder of the company around the leverage of the cloud and how successful that's been for the company and honestly I can just Connect the Dots here but I'd like you to weigh in more on how that translates into the go to market here because you got great Cloud scale with with the security product you guys are having success with great leverage there I've seen a lot of success there what's the momentum on the channel partner program internationally why is it so important to you is it just the regional segmentation is it the economics why the momentum well there are it's there are multiple issues first of all there is a raising demand in penetration testing um and don't forget that uh in international we have a much higher level in number a number or percentage in SMB and mid-market customers so these customers typically most of them even didn't have a pen test done once a year so for them pen testing was just too expensive now with our offering together with our partners we can provide different uh ways how customers could get an autonomous pen testing done more than once a year with even lower costs than they had with with a traditional manual paint test so and that is because we have our uh Consulting plus package which is for typically pain testers they can go out and can do a much faster much quicker and their pain test at many customers once in after each other so they can do more pain tests on a lower more attractive price on the other side there are others what even the same ones who are providing um node zero as an mssp service so they can go after s p customers saying okay well you only have a couple of hundred uh IP addresses no worries we have the perfect package for you and then you have let's say the mid Market let's say the thousands and more employees then they might even have an annual subscription very traditional but for all of them it's all the same the customer or the service provider doesn't need a piece of Hardware they only need to install a small piece of a Docker container and that's it and that makes it so so smooth to go in and say okay Mr customer we just put in this this virtual attacker into your network and that's it and and all the rest is done and within within three clicks they are they can act like a pen tester with 20 years of experience and that's going to be very Channel friendly and partner friendly I can almost imagine so I have to ask you and thank you for calling the break calling out that breakdown and and segmentation that was good that was very helpful for me to understand but I want to follow up if you don't mind um what type of partners are you seeing the most traction with and why well I would say at the beginning typically you have the the innovators the early adapters typically Boutique size of Partners they start because they they are always looking for Innovation and those are the ones you they start in the beginning so we have a wide range of Partners having mostly even um managed by the owner of the company so uh they immediately understand okay there is the value and they can change their offering they're changing their offering in terms of penetration testing because they can do more pen tests and they can then add other ones or we have those ones who offer 10 tests services but they did not have their own pen testers so they had to go out on the open market and Source paint testing experts um to get the pen test at a particular customer done and now with node zero they're totally independent they can't go out and say okay Mr customer here's the here's the service that's it we turn it on and within an hour you're up and running totally yeah and those pen tests are usually expensive and hard to do now it's right in line with the sales delivery pretty interesting for a partner absolutely but on the other hand side we are not killing the pain testers business we do something we're providing with no tiers I would call something like the foundation work the foundational work of having an an ongoing penetration testing of the infrastructure the operating system and the pen testers by themselves they can concentrate in the future on things like application pen testing for example so those Services which we we're not touching so we're not killing the paint tester Market we're just taking away the ongoing um let's say foundation work call it that way yeah yeah that was one of my questions I was going to ask is there's a lot of interest in this autonomous pen testing one because it's expensive to do because those skills are required are in need and they're expensive so you kind of cover the entry level and the blockers that are in there I've seen people say to me this pen test becomes a blocker for getting things done so there's been a lot of interest in the autonomous pen testing and for organizations to have that posture and it's an overseas issue too because now you have that that ongoing thing so can you explain that particular benefit for an organization to have that continuously verifying an organization's posture yep certainly so I would say um typically you are you you have to do your patches you have to bring in new versions of operating systems of different Services of uh um operating systems of some components and and they are always bringing new vulnerabilities the difference here is that with node zero we are telling the customer or the partner package we're telling them which are the executable vulnerabilities because previously they might have had um a vulnerability scanner so this vulnerability scanner brought up hundreds or even thousands of cves but didn't say anything about which of them are vulnerable really executable and then you need an expert digging in one cve after the other finding out is it is it really executable yes or no and that is where you need highly paid experts which we have a shortage so with notes here now we can say okay we tell you exactly which ones are the ones you should work on because those are the ones which are executable we rank them accordingly to the risk level how easily they can be used and by a sudden and then the good thing is convert it or indifference to the traditional penetration test they don't have to wait for a year for the next pain test to find out if the fixing was effective they weren't just the next scan and say Yes closed vulnerability is gone the time is really valuable and if you're doing any devops Cloud native you're always pushing new things so pen test ongoing pen testing is actually a benefit just in general as a kind of hygiene so really really interesting solution really bring that global scale is going to be a new new coverage area for us for sure I have to ask you if you don't mind answering what particular region are you focused on or plan to Target for this next phase of growth well at this moment we are concentrating on the countries inside the European Union Plus the United Kingdom um but we are and they are of course logically I'm based into Frankfurt area that means we cover more or less the countries just around so it's like the total dark region Germany Switzerland Austria plus the Netherlands but we also already have Partners in the nordics like in Finland or in Sweden um so it's it's it it's rapidly we have Partners already in the UK and it's rapidly growing so I'm for example we are now starting with some activities in Singapore um um and also in the in the Middle East area um very important we uh depending on let's say the the way how to do business currently we try to concentrate on those countries where we can have um let's say um at least English as an accepted business language great is there any particular region you're having the most success with right now is it sounds like European Union's um kind of first wave what's them yes that's the first definitely that's the first wave and now we're also getting the uh the European instance up and running it's clearly our commitment also to the market saying okay we know there are certain dedicated uh requirements and we take care of this and and we're just launching it we're building up this one uh the instance um in the AWS uh service center here in Frankfurt also with some dedicated Hardware internet in a data center in Frankfurt where we have with the date six by the way uh the highest internet interconnection bandwidth on the planet so we have very short latency to wherever you are on on the globe that's a great that's a great call outfit benefit too I was going to ask that what are some of the benefits your partners are seeing in emea and Asia Pacific well I would say um the the benefits is for them it's clearly they can they can uh talk with customers and can offer customers penetration testing which they before and even didn't think about because it penetrates penetration testing in a traditional way was simply too expensive for them too complex the preparation time was too long um they didn't have even have the capacity uh to um to support a pain an external pain tester now with this service you can go in and say even if they Mr customer we can do a test with you in a couple of minutes within we have installed the docker container within 10 minutes we have the pen test started that's it and then we just wait and and I would say that is we'll we are we are seeing so many aha moments then now because on the partner side when they see node zero the first time working it's like this wow that is great and then they work out to customers and and show it to their typically at the beginning mostly the friendly customers like wow that's great I need that and and I would say um the feedback from the partners is that is a service where I do not have to evangelize the customer everybody understands penetration testing I don't have to say describe what it is they understand the customer understanding immediately yes penetration testing good about that I know I should do it but uh too complex too expensive now with the name is for example as an mssp service provided from one of our partners but it's getting easy yeah it's great and it's great great benefit there I mean I gotta say I'm a huge fan of what you guys are doing I like this continuous automation that's a major benefit to anyone doing devops or any kind of modern application development this is just a godsend for them this is really good and like you said the pen testers that are doing it they were kind of coming down from their expertise to kind of do things that should have been automated they get to focus on the bigger ticket items that's a really big point so we free them we free the pain testers for the higher level elements of the penetration testing segment and that is typically the application testing which is currently far away from being automated yeah and that's where the most critical workloads are and I think this is the nice balance congratulations on the international expansion of the program and thanks for coming on this special presentation really I really appreciate it thank you you're welcome okay this is thecube special presentation you know check out pen test automation International expansion Horizon 3 dot AI uh really Innovative solution in our next segment Chris Hill sector head for strategic accounts will discuss the power of Horizon 3.ai and Splunk in action you're watching the cube the leader in high tech Enterprise coverage foreign [Music] [Music] welcome back everyone to the cube and Horizon 3.ai special presentation I'm John Furrier host of thecube we're with Chris Hill sector head for strategic accounts and federal at Horizon 3.ai a great Innovative company Chris great to see you thanks for coming on thecube yeah like I said uh you know great to meet you John long time listener first time caller so excited to be here with you guys yeah we were talking before camera you had Splunk back in 2013 and I think 2012 was our first splunk.com and boy man you know talk about being in the right place at the right time now we're at another inflection point and Splunk continues to be relevant um and continuing to have that data driving Security in that interplay and your CEO former CTO of his plug as well at Horizon who's been on before really Innovative product you guys have but you know yeah don't wait for a breach to find out if you're logging the right data this is the topic of this thread Splunk is very much part of this new international expansion announcement uh with you guys tell us what are some of the challenges that you see where this is relevant for the Splunk and Horizon AI as you guys expand uh node zero out internationally yeah well so across so you know my role uh within Splunk it was uh working with our most strategic accounts and so I looked back to 2013 and I think about the sales process like working with with our small customers you know it was um it was still very siled back then like I was selling to an I.T team that was either using this for it operations um we generally would always even say yeah although we do security we weren't really designed for it we're a log management tool and we I'm sure you remember back then John we were like sort of stepping into the security space and and the public sector domain that I was in you know security was 70 of what we did when I look back to sort of uh the transformation that I was witnessing in that digital transformation um you know when I look at like 2019 to today you look at how uh the IT team and the security teams are being have been forced to break down those barriers that they used to sort of be silent away would not commute communicate one you know the security guys would be like oh this is my box I.T you're not allowed in today you can't get away with that and I think that the value that we bring to you know and of course Splunk has been a huge leader in that space and continues to do Innovation across the board but I think what we've we're seeing in the space and I was talking with Patrick Coughlin the SVP of uh security markets about this is that you know what we've been able to do with Splunk is build a purpose-built solution that allows Splunk to eat more data so Splunk itself is ulk know it's an ingest engine right the great reason people bought it was you could build these really fast dashboards and grab intelligence out of it but without data it doesn't do anything right so how do you drive and how do you bring more data in and most importantly from a customer perspective how do you bring the right data in and so if you think about what node zero and what we're doing in a horizon 3 is that sure we do pen testing but because we're an autonomous pen testing tool we do it continuously so this whole thought I'd be like oh crud like my customers oh yeah we got a pen test coming up it's gonna be six weeks the week oh yeah you know and everyone's gonna sit on their hands call me back in two months Chris we'll talk to you then right not not a real efficient way to test your environment and shoot we saw that with Uber this week right um you know and that's a case where we could have helped oh just right we could explain the Uber thing because it was a contractor just give a quick highlight of what happened so you can connect the doctor yeah no problem so um it was uh I got I think it was yeah one of those uh you know games where they would try and test an environment um and with the uh pen tester did was he kept on calling them MFA guys being like I need to reset my password we need to set my right password and eventually the um the customer service guy said okay I'm resetting it once he had reset and bypassed the multi-factor authentication he then was able to get in and get access to the building area that he was in or I think not the domain but he was able to gain access to a partial part of that Network he then paralleled over to what I would assume is like a VA VMware or some virtual machine that had notes that had all of the credentials for logging into various domains and So within minutes they had access and that's the sort of stuff that we do you know a lot of these tools like um you know you think about the cacophony of tools that are out there in a GTA architect architecture right I'm gonna get like a z-scale or I'm going to have uh octum and I have a Splunk I've been into the solar system I mean I don't mean to name names we have crowdstriker or Sentinel one in there it's just it's a cacophony of things that don't work together they weren't designed work together and so we have seen so many times in our business through our customer support and just working with customers when we do their pen tests that there will be 5 000 servers out there three are misconfigured those three misconfigurations will create the open door because remember the hacker only needs to be right once the defender needs to be right all the time and that's the challenge and so that's what I'm really passionate about what we're doing uh here at Horizon three I see this my digital transformation migration and security going on which uh we're at the tip of the spear it's why I joined sey Hall coming on this journey uh and just super excited about where the path's going and super excited about the relationship with Splunk I get into more details on some of the specifics of that but um you know well you're nailing I mean we've been doing a lot of things on super cloud and this next gen environment we're calling it next gen you're really seeing devops obviously devsecops has already won the it role has moved to the developer shift left is an indicator of that it's one of the many examples higher velocity code software supply chain you hear these things that means that it is now in the developer hands it is replaced by the new Ops data Ops teams and security where there's a lot of horizontal thinking to your point about access there's no more perimeter huge 100 right is really right on things one time you know to get in there once you're in then you can hang out move around move laterally big problem okay so we get that now the challenges for these teams as they are transitioning organizationally how do they figure out what to do okay this is the next step they already have Splunk so now they're kind of in transition while protecting for a hundred percent ratio of success so how would you look at that and describe the challenge is what do they do what is it what are the teams facing with their data and what's next what are they what are they what action do they take so let's use some vernacular that folks will know so if I think about devsecops right we both know what that means that I'm going to build security into the app it normally talks about sec devops right how am I building security around the perimeter of what's going inside my ecosystem and what are they doing and so if you think about what we're able to do with somebody like Splunk is we can pen test the entire environment from Soup To Nuts right so I'm going to test the end points through to its I'm going to look for misconfigurations I'm going to I'm going to look for um uh credential exposed credentials you know I'm going to look for anything I can in the environment again I'm going to do it at light speed and and what what we're doing for that SEC devops space is to you know did you detect that we were in your environment so did we alert Splunk or the Sim that there's someone in the environment laterally moving around did they more importantly did they log us into their environment and when do they detect that log to trigger that log did they alert on us and then finally most importantly for every CSO out there is going to be did they stop us and so that's how we we do this and I think you when speaking with um stay Hall before you know we've come up with this um boils but we call it fine fix verifying so what we do is we go in is we act as the attacker right we act in a production environment so we're not going to be we're a passive attacker but we will go in on credentialed on agents but we have to assume to have an assumed breach model which means we're going to put a Docker container in your environment and then we're going to fingerprint the environment so we're going to go out and do an asset survey now that's something that's not something that Splunk does super well you know so can Splunk see all the assets do the same assets marry up we're going to log all that data and think and then put load that into this long Sim or the smoke logging tools just to have it in Enterprise right that's an immediate future ad that they've got um and then we've got the fix so once we've completed our pen test um we are then going to generate a report and we can talk about these in a little bit later but the reports will show an executive summary the assets that we found which would be your asset Discovery aspect of that a fix report and the fixed report I think is probably the most important one it will go down and identify what we did how we did it and then how to fix that and then from that the pen tester or the organization should fix those then they go back and run another test and then they validate like a change detection environment to see hey did those fixes taste play take place and you know snehaw when he was the CTO of jsoc he shared with me a number of times about it's like man there would be 15 more items on next week's punch sheet that we didn't know about and it's and it has to do with how we you know how they were uh prioritizing the cves and whatnot because they would take all CBDs it was critical or non-critical and it's like we are able to create context in that environment that feeds better information into Splunk and whatnot that brings that brings up the efficiency for Splunk specifically the teams out there by the way the burnout thing is real I mean this whole I just finished my list and I got 15 more or whatever the list just can keeps growing how did node zero specifically help Splunk teams be more efficient like that's the question I want to get at because this seems like a very scale way for Splunk customers and teams service teams to be more so the question is how does node zero help make Splunk specifically their service teams be more efficient so so today in our early interactions we're building customers we've seen are five things um and I'll start with sort of identifying the blind spots right so kind of what I just talked about with you did we detect did we log did we alert did they stop node zero right and so I would I put that you know a more Layman's third grade term and if I was going to beat a fifth grader at this game would be we can be the sparring partner for a Splunk Enterprise customer a Splunk Essentials customer someone using Splunk soar or even just an Enterprise Splunk customer that may be a small shop with three people and just wants to know where am I exposed so by creating and generating these reports and then having um the API that actually generates the dashboard they can take all of these events that we've logged and log them in and then where that then comes in is number two is how do we prioritize those logs right so how do we create visibility to logs that that um are have critical impacts and again as I mentioned earlier not all cves are high impact regard and also not all or low right so if you daisy chain a bunch of low cves together boom I've got a mission critical AP uh CPE that needs to be fixed now such as a credential moving to an NT box that's got a text file with a bunch of passwords on it that would be very bad um and then third would be uh verifying that you have all of the hosts so one of the things that splunk's not particularly great at and they'll literate themselves they don't do asset Discovery so dude what assets do we see and what are they logging from that um and then for from um for every event that they are able to identify one of the cool things that we can do is actually create this low code no code environment so they could let you know Splunk customers can use Splunk sword to actually triage events and prioritize that event so where they're being routed within it to optimize the Sox team time to Market or time to triage any given event obviously reducing MTR and then finally I think one of the neatest things that we'll be seeing us develop is um our ability to build glass cables so behind me you'll see one of our triage events and how we build uh a Lockheed Martin kill chain on that with a glass table which is very familiar to the community we're going to have the ability and not too distant future to allow people to search observe on those iocs and if people aren't familiar with it ioc it's an instant of a compromise so that's a vector that we want to drill into and of course who's better at Drilling in the data and smoke yeah this is a critter this is an awesome Synergy there I mean I can see a Splunk customer going man this just gives me so much more capability action actionability and also real understanding and I think this is what I want to dig into if you don't mind understanding that critical impact okay is kind of where I see this coming got the data data ingest now data's data but the question is what not to log you know where are things misconfigured these are critical questions so can you talk about what it means to understand critical impact yeah so I think you know going back to the things that I just spoke about a lot of those cves where you'll see um uh low low low and then you daisy chain together and they're suddenly like oh this is high now but then your other impact of like if you're if you're a Splunk customer you know and I had it I had several of them I had one customer that you know terabytes of McAfee data being brought in and it was like all right there's a lot of other data that you probably also want to bring but they could only afford wanted to do certain data sets because that's and they didn't know how to prioritize or filter those data sets and so we provide that opportunity to say hey these are the critical ones to bring in but there's also the ones that you don't necessarily need to bring in because low cve in this case really does mean low cve like an ILO server would be one that um that's the print server uh where the uh your admin credentials are on on like a printer and so there will be credentials on that that's something that a hacker might go in to look at so although the cve on it is low is if you daisy chain with somebody that's able to get into that you might say Ah that's high and we would then potentially rank it giving our AI logic to say that's a moderate so put it on the scale and we prioritize those versus uh of all of these scanners just going to give you a bunch of CDs and good luck and translating that if I if I can and tell me if I'm wrong that kind of speaks to that whole lateral movement that's it challenge right print serve a great example looks stupid low end who's going to want to deal with the print server oh but it's connected into a critical system there's a path is that kind of what you're getting at yeah I use Daisy Chain I think that's from the community they came from uh but it's just a lateral movement it's exactly what they're doing in those low level low critical lateral movements is where the hackers are getting in right so that's the beauty thing about the uh the Uber example is that who would have thought you know I've got my monthly Factor authentication going in a human made a mistake we can't we can't not expect humans to make mistakes we're fallible right the reality is is once they were in the environment they could have protected themselves by running enough pen tests to know that they had certain uh exposed credentials that would have stopped the breach and they did not had not done that in their environment and I'm not poking yeah but it's an interesting Trend though I mean it's obvious if sometimes those low end items are also not protected well so it's easy to get at from a hacker standpoint but also the people in charge of them can be fished easily or spearfished because they're not paying attention because they don't have to no one ever told them hey be careful yeah for the community that I came from John that's exactly how they they would uh meet you at a uh an International Event um introduce themselves as a graduate student these are National actor States uh would you mind reviewing my thesis on such and such and I was at Adobe at the time that I was working on this instead of having to get the PDF they opened the PDF and whoever that customer was launches and I don't know if you remember back in like 2008 time frame there was a lot of issues around IP being by a nation state being stolen from the United States and that's exactly how they did it and John that's or LinkedIn hey I want to get a joke we want to hire you double the salary oh I'm gonna click on that for sure you know yeah right exactly yeah the one thing I would say to you is like uh when we look at like sort of you know because I think we did 10 000 pen tests last year is it's probably over that now you know we have these sort of top 10 ways that we think and find people coming into the environment the funniest thing is that only one of them is a cve related vulnerability like uh you know you guys know what they are right so it's it but it's it's like two percent of the attacks are occurring through the cves but yeah there's all that attention spent to that and very little attention spent to this pen testing side which is sort of this continuous threat you know monitoring space and and this vulnerability space where I think we play a such an important role and I'm so excited to be a part of the tip of the spear on this one yeah I'm old enough to know the movie sneakers which I loved as a you know watching that movie you know professional hackers are testing testing always testing the environment I love this I got to ask you as we kind of wrap up here Chris if you don't mind the the benefits to Professional Services from this Alliance big news Splunk and you guys work well together we see that clearly what are what other benefits do Professional Services teams see from the Splunk and Horizon 3.ai Alliance so if you're I think for from our our from both of our uh Partners uh as we bring these guys together and many of them already are the same partner right uh is that uh first off the licensing model is probably one of the key areas that we really excel at so if you're an end user you can buy uh for the Enterprise by the number of IP addresses you're using um but uh if you're a partner working with this there's solution ways that you can go in and we'll license as to msps and what that business model on msps looks like but the unique thing that we do here is this C plus license and so the Consulting plus license allows like a uh somebody a small to mid-sized to some very large uh you know Fortune 100 uh consulting firms use this uh by buying into a license called um Consulting plus where they can have unlimited uh access to as many IPS as they want but you can only run one test at a time and as you can imagine when we're going and hacking passwords and um checking hashes and decrypting hashes that can take a while so but for the right customer it's it's a perfect tool and so I I'm so excited about our ability to go to market with uh our partners so that we understand ourselves understand how not to just sell to or not tell just to sell through but we know how to sell with them as a good vendor partner I think that that's one thing that we've done a really good job building bring it into the market yeah I think also the Splunk has had great success how they've enabled uh partners and Professional Services absolutely you know the services that layer on top of Splunk are multi-fold tons of great benefits so you guys Vector right into that ride that way with friction and and the cool thing is that in you know in one of our reports which could be totally customized uh with someone else's logo we're going to generate you know so I I used to work in another organization it wasn't Splunk but we we did uh you know pen testing as for for customers and my pen testers would come on site they'd do the engagement and they would leave and then another release someone would be oh shoot we got another sector that was breached and they'd call you back you know four weeks later and so by August our entire pen testings teams would be sold out and it would be like well even in March maybe and they're like no no I gotta breach now and and and then when they do go in they go through do the pen test and they hand over a PDF and they pack on the back and say there's where your problems are you need to fix it and the reality is that what we're going to generate completely autonomously with no human interaction is we're going to go and find all the permutations of anything we found and the fix for those permutations and then once you've fixed everything you just go back and run another pen test it's you know for what people pay for one pen test they can have a tool that does that every every Pat patch on Tuesday and that's on Wednesday you know triage throughout the week green yellow red I wanted to see the colors show me green green is good right not red and one CIO doesn't want who doesn't want that dashboard right it's it's exactly it and we can help bring I think that you know I'm really excited about helping drive this with the Splunk team because they get that they understand that it's the green yellow red dashboard and and how do we help them find more green uh so that the other guys are in red yeah and get in the data and do the right thing and be efficient with how you use the data know what to look at so many things to pay attention to you know the combination of both and then go to market strategy real brilliant congratulations Chris thanks for coming on and sharing um this news with the detail around the Splunk in action around the alliance thanks for sharing John my pleasure thanks look forward to seeing you soon all right great we'll follow up and do another segment on devops and I.T and security teams as the new new Ops but and super cloud a bunch of other stuff so thanks for coming on and our next segment the CEO of horizon 3.aa will break down all the new news for us here on thecube you're watching thecube the leader in high tech Enterprise coverage [Music] yeah the partner program for us has been fantastic you know I think prior to that you know as most organizations most uh uh most Farmers most mssps might not necessarily have a a bench at all for penetration testing uh maybe they subcontract this work out or maybe they do it themselves but trying to staff that kind of position can be incredibly difficult for us this was a differentiator a a new a new partner a new partnership that allowed us to uh not only perform services for our customers but be able to provide a product by which that they can do it themselves so we work with our customers in a variety of ways some of them want more routine testing and perform this themselves but we're also a certified service provider of horizon 3 being able to perform uh penetration tests uh help review the the data provide color provide analysis for our customers in a broader sense right not necessarily the the black and white elements of you know what was uh what's critical what's high what's medium what's low what you need to fix but are there systemic issues this has allowed us to onboard new customers this has allowed us to migrate some penetration testing services to us from from competitors in the marketplace But ultimately this is occurring because the the product and the outcome are special they're unique and they're effective our customers like what they're seeing they like the routineness of it many of them you know again like doing this themselves you know being able to kind of pen test themselves parts of their networks um and the the new use cases right I'm a large organization I have eight to ten Acquisitions per year wouldn't it be great to have a tool to be able to perform a penetration test both internal and external of that acquisition before we integrate the two companies and maybe bringing on some risk it's a very effective partnership uh one that really is uh kind of taken our our Engineers our account Executives by storm um you know this this is a a partnership that's been very valuable to us [Music] a key part of the value and business model at Horizon 3 is enabling Partners to leverage node zero to make more revenue for themselves our goal is that for sixty percent of our Revenue this year will be originated by partners and that 95 of our Revenue next year will be originated by partners and so a key to that strategy is making us an integral part of your business models as a partner a key quote from one of our partners is that we enable every one of their business units to generate Revenue so let's talk about that in a little bit more detail first is that if you have a pen test Consulting business take Deloitte as an example what was six weeks of human labor at Deloitte per pen test has been cut down to four days of Labor using node zero to conduct reconnaissance find all the juicy interesting areas of the of the Enterprise that are exploitable and being able to go assess the entire organization and then all of those details get served up to the human to be able to look at understand and determine where to probe deeper so what you see in that pen test Consulting business is that node zero becomes a force multiplier where those Consulting teams were able to cover way more accounts and way more IPS within those accounts with the same or fewer consultants and so that directly leads to profit margin expansion for the Penn testing business itself because node 0 is a force multiplier the second business model here is if you're an mssp as an mssp you're already making money providing defensive cyber security operations for a large volume of customers and so what they do is they'll license node zero and use us as an upsell to their mssb business to start to deliver either continuous red teaming continuous verification or purple teaming as a service and so in that particular business model they've got an additional line of Revenue where they can increase the spend of their existing customers by bolting on node 0 as a purple team as a service offering the third business model or customer type is if you're an I.T services provider so as an I.T services provider you make money installing and configuring security products like Splunk or crowdstrike or hemio you also make money reselling those products and you also make money generating follow-on services to continue to harden your customer environments and so for them what what those it service providers will do is use us to verify that they've installed Splunk correctly improved to their customer that Splunk was installed correctly or crowdstrike was installed correctly using our results and then use our results to drive follow-on services and revenue and then finally we've got the value-added reseller which is just a straight up reseller because of how fast our sales Cycles are these vars are able to typically go from cold email to deal close in six to eight weeks at Horizon 3 at least a single sales engineer is able to run 30 to 50 pocs concurrently because our pocs are very lightweight and don't require any on-prem customization or heavy pre-sales post sales activity so as a result we're able to have a few amount of sellers driving a lot of Revenue and volume for us well the same thing applies to bars there isn't a lot of effort to sell the product or prove its value so vars are able to sell a lot more Horizon 3 node zero product without having to build up a huge specialist sales organization so what I'm going to do is talk through uh scenario three here as an I.T service provider and just how powerful node zero can be in driving additional Revenue so in here think of for every one dollar of node zero license purchased by the IT service provider to do their business it'll generate ten dollars of additional revenue for that partner so in this example kidney group uses node 0 to verify that they have installed and deployed Splunk correctly so Kitty group is a Splunk partner they they sell it services to install configure deploy and maintain Splunk and as they deploy Splunk they're going to use node 0 to attack the environment and make sure that the right logs and alerts and monitoring are being handled within the Splunk deployment so it's a way of doing QA or verifying that Splunk has been configured correctly and that's going to be internally used by kidney group to prove the quality of their services that they've just delivered then what they're going to do is they're going to show and leave behind that node zero Report with their client and that creates a resell opportunity for for kidney group to resell node 0 to their client because their client is seeing the reports and the results and saying wow this is pretty amazing and those reports can be co-branded where it's a pen testing report branded with kidney group but it says powered by Horizon three under it from there kidney group is able to take the fixed actions report that's automatically generated with every pen test through node zero and they're able to use that as the starting point for a statement of work to sell follow-on services to fix all of the problems that node zero identified fixing l11r misconfigurations fixing or patching VMware or updating credentials policies and so on so what happens is node 0 has found a bunch of problems the client often lacks the capacity to fix and so kidney group can use that lack of capacity by the client as a follow-on sales opportunity for follow-on services and finally based on the findings from node zero kidney group can look at that report and say to the customer you know customer if you bought crowdstrike you'd be able to uh prevent node Zero from attacking and succeeding in the way that it did for if you bought humano or if you bought Palo Alto networks or if you bought uh some privileged access management solution because of what node 0 was able to do with credential harvesting and attacks and so as a result kidney group is able to resell other security products within their portfolio crowdstrike Falcon humano Polito networks demisto Phantom and so on based on the gaps that were identified by node zero and that pen test and what that creates is another feedback loop where kidney group will then go use node 0 to verify that crowdstrike product has actually been installed and configured correctly and then this becomes the cycle of using node 0 to verify a deployment using that verification to drive a bunch of follow-on services and resell opportunities which then further drives more usage of the product now the way that we licensed is that it's a usage-based license licensing model so that the partner will grow their node zero Consulting plus license as they grow their business so for example if you're a kidney group then week one you've got you're going to use node zero to verify your Splunk install in week two if you have a pen testing business you're going to go off and use node zero to be a force multiplier for your pen testing uh client opportunity and then if you have an mssp business then in week three you're going to use node zero to go execute a purple team mssp offering for your clients so not necessarily a kidney group but if you're a Deloitte or ATT these larger companies and you've got multiple lines of business if you're Optive for instance you all you have to do is buy one Consulting plus license and you're going to be able to run as many pen tests as you want sequentially so now you can buy a single license and use that one license to meet your week one client commitments and then meet your week two and then meet your week three and as you grow your business you start to run multiple pen tests concurrently so in week one you've got to do a Splunk verify uh verify Splunk install and you've got to run a pen test and you've got to do a purple team opportunity you just simply expand the number of Consulting plus licenses from one license to three licenses and so now as you systematically grow your business you're able to grow your node zero capacity with you giving you predictable cogs predictable margins and once again 10x additional Revenue opportunity for that investment in the node zero Consulting plus license my name is Saint I'm the co-founder and CEO here at Horizon 3. I'm going to talk to you today about why it's important to look at your Enterprise Through The Eyes of an attacker the challenge I had when I was a CIO in banking the CTO at Splunk and serving within the Department of Defense is that I had no idea I was Secure until the bad guys had showed up am I logging the right data am I fixing the right vulnerabilities are my security tools that I've paid millions of dollars for actually working together to defend me and the answer is I don't know does my team actually know how to respond to a breach in the middle of an incident I don't know I've got to wait for the bad guys to show up and so the challenge I had was how do we proactively verify our security posture I tried a variety of techniques the first was the use of vulnerability scanners and the challenge with vulnerability scanners is being vulnerable doesn't mean you're exploitable I might have a hundred thousand findings from my scanner of which maybe five or ten can actually be exploited in my environment the other big problem with scanners is that they can't chain weaknesses together from machine to machine so if you've got a thousand machines in your environment or more what a vulnerability scanner will do is tell you you have a problem on machine one and separately a problem on machine two but what they can tell you is that an attacker could use a load from machine one plus a low from machine two to equal to critical in your environment and what attackers do in their tactics is they chain together misconfigurations dangerous product defaults harvested credentials and exploitable vulnerabilities into attack paths across different machines so to address the attack pads across different machines I tried layering in consulting-based pen testing and the issue is when you've got thousands of hosts or hundreds of thousands of hosts in your environment human-based pen testing simply doesn't scale to test an infrastructure of that size moreover when they actually do execute a pen test and you get the report oftentimes you lack the expertise within your team to quickly retest to verify that you've actually fixed the problem and so what happens is you end up with these pen test reports that are incomplete snapshots and quickly going stale and then to mitigate that problem I tried using breach and attack simulation tools and the struggle with these tools is one I had to install credentialed agents everywhere two I had to write my own custom attack scripts that I didn't have much talent for but also I had to maintain as my environment changed and then three these types of tools were not safe to run against production systems which was the the majority of my attack surface so that's why we went off to start Horizon 3. so Tony and I met when we were in Special Operations together and the challenge we wanted to solve was how do we do infrastructure security testing at scale by giving the the power of a 20-year pen testing veteran into the hands of an I.T admin a network engineer in just three clicks and the whole idea is we enable these fixers The Blue Team to be able to run node Zero Hour pen testing product to quickly find problems in their environment that blue team will then then go off and fix the issues that were found and then they can quickly rerun the attack to verify that they fixed the problem and the whole idea is delivering this without requiring custom scripts be developed without requiring credential agents be installed and without requiring the use of external third-party consulting services or Professional Services self-service pen testing to quickly Drive find fix verify there are three primary use cases that our customers use us for the first is the sock manager that uses us to verify that their security tools are actually effective to verify that they're logging the right data in Splunk or in their Sim to verify that their managed security services provider is able to quickly detect and respond to an attack and hold them accountable for their slas or that the sock understands how to quickly detect and respond and measuring and verifying that or that the variety of tools that you have in your stack most organizations have 130 plus cyber security tools none of which are designed to work together are actually working together the second primary use case is proactively hardening and verifying your systems this is when the I that it admin that network engineer they're able to run self-service pen tests to verify that their Cisco environment is installed in hardened and configured correctly or that their credential policies are set up right or that their vcenter or web sphere or kubernetes environments are actually designed to be secure and what this allows the it admins and network Engineers to do is shift from running one or two pen tests a year to 30 40 or more pen tests a month and you can actually wire those pen tests into your devops process or into your detection engineering and the change management processes to automatically trigger pen tests every time there's a change in your environment the third primary use case is for those organizations lucky enough to have their own internal red team they'll use node zero to do reconnaissance and exploitation at scale and then use the output as a starting point for the humans to step in and focus on the really hard juicy stuff that gets them on stage at Defcon and so these are the three primary use cases and what we'll do is zoom into the find fix verify Loop because what I've found in my experience is find fix verify is the future operating model for cyber security organizations and what I mean here is in the find using continuous pen testing what you want to enable is on-demand self-service pen tests you want those pen tests to find attack pads at scale spanning your on-prem infrastructure your Cloud infrastructure and your perimeter because attackers don't only state in one place they will find ways to chain together a perimeter breach a credential from your on-prem to gain access to your cloud or some other permutation and then the third part in continuous pen testing is attackers don't focus on critical vulnerabilities anymore they know we've built vulnerability Management Programs to reduce those vulnerabilities so attackers have adapted and what they do is chain together misconfigurations in your infrastructure and software and applications with dangerous product defaults with exploitable vulnerabilities and through the collection of credentials through a mix of techniques at scale once you've found those problems the next question is what do you do about it well you want to be able to prioritize fixing problems that are actually exploitable in your environment that truly matter meaning they're going to lead to domain compromise or domain user compromise or access your sensitive data the second thing you want to fix is making sure you understand what risk your crown jewels data is exposed to where is your crown jewels data is in the cloud is it on-prem has it been copied to a share drive that you weren't aware of if a domain user was compromised could they access that crown jewels data you want to be able to use the attacker's perspective to secure the critical data you have in your infrastructure and then finally as you fix these problems you want to quickly remediate and retest that you've actually fixed the issue and this fine fix verify cycle becomes that accelerator that drives purple team culture the third part here is verify and what you want to be able to do in the verify step is verify that your security tools and processes in people can effectively detect and respond to a breach you want to be able to integrate that into your detection engineering processes so that you know you're catching the right security rules or that you've deployed the right configurations you also want to make sure that your environment is adhering to the best practices around systems hardening in cyber resilience and finally you want to be able to prove your security posture over a time to your board to your leadership into your regulators so what I'll do now is zoom into each of these three steps so when we zoom in to find here's the first example using node 0 and autonomous pen testing and what an attacker will do is find a way to break through the perimeter in this example it's very easy to misconfigure kubernetes to allow an attacker to gain remote code execution into your on-prem kubernetes environment and break through the perimeter and from there what the attacker is going to do is conduct Network reconnaissance and then find ways to gain code execution on other machines in the environment and as they get code execution they start to dump credentials collect a bunch of ntlm hashes crack those hashes using open source and dark web available data as part of those attacks and then reuse those credentials to log in and laterally maneuver throughout the environment and then as they loudly maneuver they can reuse those credentials and use credential spraying techniques and so on to compromise your business email to log in as admin into your cloud and this is a very common attack and rarely is a CV actually needed to execute this attack often it's just a misconfiguration in kubernetes with a bad credential policy or password policy combined with bad practices of credential reuse across the organization here's another example of an internal pen test and this is from an actual customer they had 5 000 hosts within their environment they had EDR and uba tools installed and they initiated in an internal pen test on a single machine from that single initial access point node zero enumerated the network conducted reconnaissance and found five thousand hosts were accessible what node 0 will do under the covers is organize all of that reconnaissance data into a knowledge graph that we call the Cyber terrain map and that cyber Terrain map becomes the key data structure that we use to efficiently maneuver and attack and compromise your environment so what node zero will do is they'll try to find ways to get code execution reuse credentials and so on in this customer example they had Fortinet installed as their EDR but node 0 was still able to get code execution on a Windows machine from there it was able to successfully dump credentials including sensitive credentials from the lsas process on the Windows box and then reuse those credentials to log in as domain admin in the network and once an attacker becomes domain admin they have the keys to the kingdom they can do anything they want so what happened here well it turns out Fortinet was misconfigured on three out of 5000 machines bad automation the customer had no idea this had happened they would have had to wait for an attacker to show up to realize that it was misconfigured the second thing is well why didn't Fortinet stop the credential pivot in the lateral movement and it turned out the customer didn't buy the right modules or turn on the right services within that particular product and we see this not only with Ford in it but we see this with Trend Micro and all the other defensive tools where it's very easy to miss a checkbox in the configuration that will do things like prevent credential dumping the next story I'll tell you is attackers don't have to hack in they log in so another infrastructure pen test a typical technique attackers will take is man in the middle uh attacks that will collect hashes so in this case what an attacker will do is leverage a tool or technique called responder to collect ntlm hashes that are being passed around the network and there's a variety of reasons why these hashes are passed around and it's a pretty common misconfiguration but as an attacker collects those hashes then they start to apply techniques to crack those hashes so they'll pass the hash and from there they will use open source intelligence common password structures and patterns and other types of techniques to try to crack those hashes into clear text passwords so here node 0 automatically collected hashes it automatically passed the hashes to crack those credentials and then from there it starts to take the domain user user ID passwords that it's collected and tries to access different services and systems in your Enterprise in this case node 0 is able to successfully gain access to the Office 365 email environment because three employees didn't have MFA configured so now what happens is node 0 has a placement and access in the business email system which sets up the conditions for fraud lateral phishing and other techniques but what's especially insightful here is that 80 of the hashes that were collected in this pen test were cracked in 15 minutes or less 80 percent 26 of the user accounts had a password that followed a pretty obvious pattern first initial last initial and four random digits the other thing that was interesting is 10 percent of service accounts had their user ID the same as their password so VMware admin VMware admin web sphere admin web Square admin so on and so forth and so attackers don't have to hack in they just log in with credentials that they've collected the next story here is becoming WS AWS admin so in this example once again internal pen test node zero gets initial access it discovers 2 000 hosts are network reachable from that environment if fingerprints and organizes all of that data into a cyber Terrain map from there it it fingerprints that hpilo the integrated lights out service was running on a subset of hosts hpilo is a service that is often not instrumented or observed by security teams nor is it easy to patch as a result attackers know this and immediately go after those types of services so in this case that ILO service was exploitable and were able to get code execution on it ILO stores all the user IDs and passwords in clear text in a particular set of processes so once we gain code execution we were able to dump all of the credentials and then from there laterally maneuver to log in to the windows box next door as admin and then on that admin box we're able to gain access to the share drives and we found a credentials file saved on a share Drive from there it turned out that credentials file was the AWS admin credentials file giving us full admin authority to their AWS accounts not a single security alert was triggered in this attack because the customer wasn't observing the ILO service and every step thereafter was a valid login in the environment and so what do you do step one patch the server step two delete the credentials file from the share drive and then step three is get better instrumentation on privileged access users and login the final story I'll tell is a typical pattern that we see across the board with that combines the various techniques I've described together where an attacker is going to go off and use open source intelligence to find all of the employees that work at your company from there they're going to look up those employees on dark web breach databases and other forms of information and then use that as a starting point to password spray to compromise a domain user all it takes is one employee to reuse a breached password for their Corporate email or all it takes is a single employee to have a weak password that's easily guessable all it takes is one and once the attacker is able to gain domain user access in most shops domain user is also the local admin on their laptop and once your local admin you can dump Sam and get local admin until M hashes you can use that to reuse credentials again local admin on neighboring machines and attackers will start to rinse and repeat then eventually they're able to get to a point where they can dump lsas or by unhooking the anti-virus defeating the EDR or finding a misconfigured EDR as we've talked about earlier to compromise the domain and what's consistent is that the fundamentals are broken at these shops they have poor password policies they don't have least access privilege implemented active directory groups are too permissive where domain admin or domain user is also the local admin uh AV or EDR Solutions are misconfigured or easily unhooked and so on and what we found in 10 000 pen tests is that user Behavior analytics tools never caught us in that lateral movement in part because those tools require pristine logging data in order to work and also it becomes very difficult to find that Baseline of normal usage versus abnormal usage of credential login another interesting Insight is there were several Marquee brand name mssps that were defending our customers environment and for them it took seven hours to detect and respond to the pen test seven hours the pen test was over in less than two hours and so what you had was an egregious violation of the service level agreements that that mssp had in place and the customer was able to use us to get service credit and drive accountability of their sock and of their provider the third interesting thing is in one case it took us seven minutes to become domain admin in a bank that bank had every Gucci security tool you could buy yet in 7 minutes and 19 seconds node zero started as an unauthenticated member of the network and was able to escalate privileges through chaining and misconfigurations in lateral movement and so on to become domain admin if it's seven minutes today we should assume it'll be less than a minute a year or two from now making it very difficult for humans to be able to detect and respond to that type of Blitzkrieg attack so that's in the find it's not just about finding problems though the bulk of the effort should be what to do about it the fix and the verify so as you find those problems back to kubernetes as an example we will show you the path here is the kill chain we took to compromise that environment we'll show you the impact here is the impact or here's the the proof of exploitation that we were able to use to be able to compromise it and there's the actual command that we executed so you could copy and paste that command and compromise that cubelet yourself if you want and then the impact is we got code execution and we'll actually show you here is the impact this is a critical here's why it enabled perimeter breach affected applications will tell you the specific IPS where you've got the problem how it maps to the miter attack framework and then we'll tell you exactly how to fix it we'll also show you what this problem enabled so you can accurately prioritize why this is important or why it's not important the next part is accurate prioritization the hardest part of my job as a CIO was deciding what not to fix so if you take SMB signing not required as an example by default that CVSs score is a one out of 10. but this misconfiguration is not a cve it's a misconfig enable an attacker to gain access to 19 credentials including one domain admin two local admins and access to a ton of data because of that context this is really a 10 out of 10. you better fix this as soon as possible however of the seven occurrences that we found it's only a critical in three out of the seven and these are the three specific machines and we'll tell you the exact way to fix it and you better fix these as soon as possible for these four machines over here these didn't allow us to do anything of consequence so that because the hardest part is deciding what not to fix you can justifiably choose not to fix these four issues right now and just add them to your backlog and surge your team to fix these three as quickly as possible and then once you fix these three you don't have to re-run the entire pen test you can select these three and then one click verify and run a very narrowly scoped pen test that is only testing this specific issue and what that creates is a much faster cycle of finding and fixing problems the other part of fixing is verifying that you don't have sensitive data at risk so once we become a domain user we're able to use those domain user credentials and try to gain access to databases file shares S3 buckets git repos and so on and help you understand what sensitive data you have at risk so in this example a green checkbox means we logged in as a valid domain user we're able to get read write access on the database this is how many records we could have accessed and we don't actually look at the values in the database but we'll show you the schema so you can quickly characterize that pii data was at risk here and we'll do that for your file shares and other sources of data so now you can accurately articulate the data you have at risk and prioritize cleaning that data up especially data that will lead to a fine or a big news issue so that's the find that's the fix now we're going to talk about the verify the key part in verify is embracing and integrating with detection engineering practices so when you think about your layers of security tools you've got lots of tools in place on average 130 tools at any given customer but these tools were not designed to work together so when you run a pen test what you want to do is say did you detect us did you log us did you alert on us did you stop us and from there what you want to see is okay what are the techniques that are commonly used to defeat an environment to actually compromise if you look at the top 10 techniques we use and there's far more than just these 10 but these are the most often executed nine out of ten have nothing to do with cves it has to do with misconfigurations dangerous product defaults bad credential policies and it's how we chain those together to become a domain admin or compromise a host so what what customers will do is every single attacker command we executed is provided to you as an attackivity log so you can actually see every single attacker command we ran the time stamp it was executed the hosts it executed on and how it Maps the minor attack tactics so our customers will have are these attacker logs on one screen and then they'll go look into Splunk or exabeam or Sentinel one or crowdstrike and say did you detect us did you log us did you alert on us or not and to make that even easier if you take this example hey Splunk what logs did you see at this time on the VMware host because that's when node 0 is able to dump credentials and that allows you to identify and fix your logging blind spots to make that easier we've got app integration so this is an actual Splunk app in the Splunk App Store and what you can come is inside the Splunk console itself you can fire up the Horizon 3 node 0 app all of the pen test results are here so that you can see all of the results in one place and you don't have to jump out of the tool and what you'll show you as I skip forward is hey there's a pen test here are the critical issues that we've identified for that weaker default issue here are the exact commands we executed and then we will automatically query into Splunk all all terms on between these times on that endpoint that relate to this attack so you can now quickly within the Splunk environment itself figure out that you're missing logs or that you're appropriately catching this issue and that becomes incredibly important in that detection engineering cycle that I mentioned earlier so how do our customers end up using us they shift from running one pen test a year to 30 40 pen tests a month oftentimes wiring us into their deployment automation to automatically run pen tests the other part that they'll do is as they run more pen tests they find more issues but eventually they hit this inflection point where they're able to rapidly clean up their environment and that inflection point is because the red and the blue teams start working together in a purple team culture and now they're working together to proactively harden their environment the other thing our customers will do is run us from different perspectives they'll first start running an RFC 1918 scope to see once the attacker gained initial access in a part of the network that had wide access what could they do and then from there they'll run us within a specific Network segment okay from within that segment could the attacker break out and gain access to another segment then they'll run us from their work from home environment could they Traverse the VPN and do something damaging and once they're in could they Traverse the VPN and get into my cloud then they'll break in from the outside all of these perspectives are available to you in Horizon 3 and node zero as a single SKU and you can run as many pen tests as you want if you run a phishing campaign and find that an intern in the finance department had the worst phishing behavior you can then inject their credentials and actually show the end-to-end story of how an attacker fished gained credentials of an intern and use that to gain access to sensitive financial data so what our customers end up doing is running multiple attacks from multiple perspectives and looking at those results over time I'll leave you two things one is what is the AI in Horizon 3 AI those knowledge graphs are the heart and soul of everything that we do and we use machine learning reinforcement techniques reinforcement learning techniques Markov decision models and so on to be able to efficiently maneuver and analyze the paths in those really large graphs we also use context-based scoring to prioritize weaknesses and we're also able to drive collective intelligence across all of the operations so the more pen tests we run the smarter we get and all of that is based on our knowledge graph analytics infrastructure that we have finally I'll leave you with this was my decision criteria when I was a buyer for my security testing strategy what I cared about was coverage I wanted to be able to assess my on-prem cloud perimeter and work from home and be safe to run in production I want to be able to do that as often as I wanted I want to be able to run pen tests in hours or days not weeks or months so I could accelerate that fine fix verify loop I wanted my it admins and network Engineers with limited offensive experience to be able to run a pen test in a few clicks through a self-service experience and not have to install agent and not have to write custom scripts and finally I didn't want to get nickeled and dimed on having to buy different types of attack modules or different types of attacks I wanted a single annual subscription that allowed me to run any type of attack as often as I wanted so I could look at my Trends in directions over time so I hope you found this talk valuable uh we're easy to find and I look forward to seeing seeing you use a product and letting our results do the talking when you look at uh you know kind of the way no our pen testing algorithms work is we dynamically select uh how to compromise an environment based on what we've discovered and the goal is to become a domain admin compromise a host compromise domain users find ways to encrypt data steal sensitive data and so on but when you look at the the top 10 techniques that we ended up uh using to compromise environments the first nine have nothing to do with cves and that's the reality cves are yes a vector but less than two percent of cves are actually used in a compromise oftentimes it's some sort of credential collection credential cracking uh credential pivoting and using that to become an admin and then uh compromising environments from that point on so I'll leave this up for you to kind of read through and you'll have the slides available for you but I found it very insightful that organizations and ourselves when I was a GE included invested heavily in just standard vulnerability Management Programs when I was at DOD that's all disa cared about asking us about was our our kind of our cve posture but the attackers have adapted to not rely on cves to get in because they know that organizations are actively looking at and patching those cves and instead they're chaining together credentials from one place with misconfigurations and dangerous product defaults in another to take over an environment a concrete example is by default vcenter backups are not encrypted and so as if an attacker finds vcenter what they'll do is find the backup location and there are specific V sender MTD files where the admin credentials are parsippled in the binaries so you can actually as an attacker find the right MTD file parse out the binary and now you've got the admin credentials for the vcenter environment and now start to log in as admin there's a bad habit by signal officers and Signal practitioners in the in the Army and elsewhere where the the VM notes section of a virtual image has the password for the VM well those VM notes are not stored encrypted and attackers know this and they're able to go off and find the VMS that are unencrypted find the note section and pull out the passwords for those images and then reuse those credentials across the board so I'll pause here and uh you know Patrick love you get some some commentary on on these techniques and other things that you've seen and what we'll do in the last say 10 to 15 minutes is uh is rolled through a little bit more on what do you do about it yeah yeah no I love it I think um I think this is pretty exhaustive what I like about what you've done here is uh you know we've seen we've seen double-digit increases in the number of organizations that are reporting actual breaches year over year for the last um for the last three years and it's often we kind of in the Zeitgeist we pegged that on ransomware which of course is like incredibly important and very top of mind um but what I like about what you have here is you know we're reminding the audience that the the attack surface area the vectors the matter um you know has to be more comprehensive than just thinking about ransomware scenarios yeah right on um so let's build on this when you think about your defense in depth you've got multiple security controls that you've purchased and integrated and you've got that redundancy if a control fails but the reality is that these security tools aren't designed to work together so when you run a pen test what you want to ask yourself is did you detect node zero did you log node zero did you alert on node zero and did you stop node zero and when you think about how to do that every single attacker command executed by node zero is available in an attacker log so you can now see you know at the bottom here vcenter um exploit at that time on that IP how it aligns to minor attack what you want to be able to do is go figure out did your security tools catch this or not and that becomes very important in using the attacker's perspective to improve your defensive security controls and so the way we've tried to make this easier back to like my my my the you know I bleed Green in many ways still from my smoke background is you want to be able to and what our customers do is hey we'll look at the attacker logs on one screen and they'll look at what did Splunk see or Miss in another screen and then they'll use that to figure out what their logging blind spots are and what that where that becomes really interesting is we've actually built out an integration into Splunk where there's a Splunk app you can download off of Splunk base and you'll get all of the pen test results right there in the Splunk console and from that Splunk console you're gonna be able to see these are all the pen tests that were run these are the issues that were found um so you can look at that particular pen test here are all of the weaknesses that were identified for that particular pen test and how they categorize out for each of those weaknesses you can click on any one of them that are critical in this case and then we'll tell you for that weakness and this is where where the the punch line comes in so I'll pause the video here for that weakness these are the commands that were executed on these endpoints at this time and then we'll actually query Splunk for that um for that IP address or containing that IP and these are the source types that surface any sort of activity so what we try to do is help you as quickly and efficiently as possible identify the logging blind spots in your Splunk environment based on the attacker's perspective so as this video kind of plays through you can see it Patrick I'd love to get your thoughts um just seeing so many Splunk deployments and the effectiveness of those deployments and and how this is going to help really Elevate the effectiveness of all of your Splunk customers yeah I'm super excited about this I mean I think this these kinds of purpose-built integration snail really move the needle for our customers I mean at the end of the day when I think about the power of Splunk I think about a product I was first introduced to 12 years ago that was an on-prem piece of software you know and at the time it sold on sort of Perpetual and term licenses but one made it special was that it could it could it could eat data at a speed that nothing else that I'd have ever seen you can ingest massively scalable amounts of data uh did cool things like schema on read which facilitated that there was this language called SPL that you could nerd out about uh and you went to a conference once a year and you talked about all the cool things you were splunking right but now as we think about the next phase of our growth um we live in a heterogeneous environment where our customers have so many different tools and data sources that are ever expanding and as you look at the as you look at the role of the ciso it's mind-blowing to me the amount of sources Services apps that are coming into the ciso span of let's just call it a span of influence in the last three years uh you know we're seeing things like infrastructure service level visibility application performance monitoring stuff that just never made sense for the security team to have visibility into you um at least not at the size and scale which we're demanding today um and and that's different and this isn't this is why it's so important that we have these joint purpose-built Integrations that um really provide more prescription to our customers about how do they walk on that Journey towards maturity what does zero to one look like what does one to two look like whereas you know 10 years ago customers were happy with platforms today they want integration they want Solutions and they want to drive outcomes and I think this is a great example of how together we are stepping to the evolving nature of the market and also the ever-evolving nature of the threat landscape and what I would say is the maturing needs of the customer in that environment yeah for sure I think especially if if we all anticipate budget pressure over the next 18 months due to the economy and elsewhere while the security budgets are not going to ever I don't think they're going to get cut they're not going to grow as fast and there's a lot more pressure on organizations to extract more value from their existing Investments as well as extracting more value and more impact from their existing teams and so security Effectiveness Fierce prioritization and automation I think become the three key themes of security uh over the next 18 months so I'll do very quickly is run through a few other use cases um every host that we identified in the pen test were able to score and say this host allowed us to do something significant therefore it's it's really critical you should be increasing your logging here hey these hosts down here we couldn't really do anything as an attacker so if you do have to make trade-offs you can make some trade-offs of your logging resolution at the lower end in order to increase logging resolution on the upper end so you've got that level of of um justification for where to increase or or adjust your logging resolution another example is every host we've discovered as an attacker we Expose and you can export and we want to make sure is every host we found as an attacker is being ingested from a Splunk standpoint a big issue I had as a CIO and user of Splunk and other tools is I had no idea if there were Rogue Raspberry Pi's on the network or if a new box was installed and whether Splunk was installed on it or not so now you can quickly start to correlate what hosts did we see and how does that reconcile with what you're logging from uh finally or second to last use case here on the Splunk integration side is for every single problem we've found we give multiple options for how to fix it this becomes a great way to prioritize what fixed actions to automate in your soar platform and what we want to get to eventually is being able to automatically trigger soar actions to fix well-known problems like automatically invalidating passwords for for poor poor passwords in our credentials amongst a whole bunch of other things we could go off and do and then finally if there is a well-known kill chain or attack path one of the things I really wish I could have done when I was a Splunk customer was take this type of kill chain that actually shows a path to domain admin that I'm sincerely worried about and use it as a glass table over which I could start to layer possible indicators of compromise and now you've got a great starting point for glass tables and iocs for actual kill chains that we know are exploitable in your environment and that becomes some super cool Integrations that we've got on the roadmap between us and the Splunk security side of the house so what I'll leave with actually Patrick before I do that you know um love to get your comments and then I'll I'll kind of leave with one last slide on this wartime security mindset uh pending you know assuming there's no other questions no I love it I mean I think this kind of um it's kind of glass table's approach to how do you how do you sort of visualize these workflows and then use things like sore and orchestration and automation to operationalize them is exactly where we see all of our customers going and getting away from I think an over engineered approach to soar with where it has to be super technical heavy with you know python programmers and getting more to this visual view of workflow creation um that really demystifies the power of Automation and also democratizes it so you don't have to have these programming languages in your resume in order to start really moving the needle on workflow creation policy enforcement and ultimately driving automation coverage across more and more of the workflows that your team is seeing yeah I think that between us being able to visualize the actual kill chain or attack path with you know think of a of uh the soar Market I think going towards this no code low code um you know configurable sore versus coded sore that's going to really be a game changer in improve or giving security teams a force multiplier so what I'll leave you with is this peacetime mindset of security no longer is sustainable we really have to get out of checking the box and then waiting for the bad guys to show up to verify that security tools are are working or not and the reason why we've got to really do that quickly is there are over a thousand companies that withdrew from the Russian economy over the past uh nine months due to the Ukrainian War there you should expect every one of them to be punished by the Russians for leaving and punished from a cyber standpoint and this is no longer about financial extortion that is ransomware this is about punishing and destroying companies and you can punish any one of these companies by going after them directly or by going after their suppliers and their Distributors so suddenly your attack surface is no more no longer just your own Enterprise it's how you bring your goods to Market and it's how you get your goods created because while I may not be able to disrupt your ability to harvest fruit if I can get those trucks stuck at the border I can increase spoilage and have the same effect and what we should expect to see is this idea of cyber-enabled economic Warfare where if we issue a sanction like Banning the Russians from traveling there is a cyber-enabled counter punch which is corrupt and destroy the American Airlines database that is below the threshold of War that's not going to trigger the 82nd Airborne to be mobilized but it's going to achieve the right effect ban the sale of luxury goods disrupt the supply chain and create shortages banned Russian oil and gas attack refineries to call a 10x spike in gas prices three days before the election this is the future and therefore I think what we have to do is shift towards a wartime mindset which is don't trust your security posture verify it see yourself Through The Eyes of the attacker build that incident response muscle memory and drive better collaboration between the red and the blue teams your suppliers and Distributors and your information uh sharing organization they have in place and what's really valuable for me as a Splunk customer was when a router crashes at that moment you don't know if it's due to an I.T Administration problem or an attacker and what you want to have are different people asking different questions of the same data and you want to have that integrated triage process of an I.T lens to that problem a security lens to that problem and then from there figuring out is is this an IT workflow to execute or a security incident to execute and you want to have all of that as an integrated team integrated process integrated technology stack and this is something that I very care I cared very deeply about as both a Splunk customer and a Splunk CTO that I see time and time again across the board so Patrick I'll leave you with the last word the final three minutes here and I don't see any open questions so please take us home oh man see how you think we spent hours and hours prepping for this together that that last uh uh 40 seconds of your talk track is probably one of the things I'm most passionate about in this industry right now uh and I think nist has done some really interesting work here around building cyber resilient organizations that have that has really I think helped help the industry see that um incidents can come from adverse conditions you know stress is uh uh performance taxations in the infrastructure service or app layer and they can come from malicious compromises uh Insider threats external threat actors and the more that we look at this from the perspective of of a broader cyber resilience Mission uh in a wartime mindset uh I I think we're going to be much better off and and will you talk about with operationally minded ice hacks information sharing intelligence sharing becomes so important in these wartime uh um situations and you know we know not all ice acts are created equal but we're also seeing a lot of um more ad hoc information sharing groups popping up so look I think I think you framed it really really well I love the concept of wartime mindset and um I I like the idea of applying a cyber resilience lens like if you have one more layer on top of that bottom right cake you know I think the it lens and the security lens they roll up to this concept of cyber resilience and I think this has done some great work there for us yeah you're you're spot on and that that is app and that's gonna I think be the the next um terrain that that uh that you're gonna see vendors try to get after but that I think Splunk is best position to win okay that's a wrap for this special Cube presentation you heard all about the global expansion of horizon 3.ai's partner program for their Partners have a unique opportunity to take advantage of their node zero product uh International go to Market expansion North America channel Partnerships and just overall relationships with companies like Splunk to make things more comprehensive in this disruptive cyber security world we live in and hope you enjoyed this program all the videos are available on thecube.net as well as check out Horizon 3 dot AI for their pen test Automation and ultimately their defense system that they use for testing always the environment that you're in great Innovative product and I hope you enjoyed the program again I'm John Furrier host of the cube thanks for watching

Published Date : Sep 28 2022

SUMMARY :

that's the sort of stuff that we do you

SENTIMENT ANALYSIS :

ENTITIES

EntityCategoryConfidence
Patrick CoughlinPERSON

0.99+

Jennifer LeePERSON

0.99+

ChrisPERSON

0.99+

TonyPERSON

0.99+

2013DATE

0.99+

Raina RichterPERSON

0.99+

SingaporeLOCATION

0.99+

EuropeLOCATION

0.99+

PatrickPERSON

0.99+

FrankfurtLOCATION

0.99+

JohnPERSON

0.99+

20-yearQUANTITY

0.99+

hundredsQUANTITY

0.99+

AWSORGANIZATION

0.99+

20 yearsQUANTITY

0.99+

seven minutesQUANTITY

0.99+

95QUANTITY

0.99+

FordORGANIZATION

0.99+

2.7 billionQUANTITY

0.99+

MarchDATE

0.99+

FinlandLOCATION

0.99+

seven hoursQUANTITY

0.99+

sixty percentQUANTITY

0.99+

John FurrierPERSON

0.99+

SwedenLOCATION

0.99+

John FurrierPERSON

0.99+

six weeksQUANTITY

0.99+

seven hoursQUANTITY

0.99+

19 credentialsQUANTITY

0.99+

ten dollarsQUANTITY

0.99+

JenniferPERSON

0.99+

5 000 hostsQUANTITY

0.99+

Horizon 3TITLE

0.99+

WednesdayDATE

0.99+

30QUANTITY

0.99+

eightQUANTITY

0.99+

Asia PacificLOCATION

0.99+

American AirlinesORGANIZATION

0.99+

DeloitteORGANIZATION

0.99+

three licensesQUANTITY

0.99+

two companiesQUANTITY

0.99+

2019DATE

0.99+

European UnionORGANIZATION

0.99+

sixQUANTITY

0.99+

seven occurrencesQUANTITY

0.99+

70QUANTITY

0.99+

three peopleQUANTITY

0.99+

Horizon 3.aiTITLE

0.99+

ATTORGANIZATION

0.99+

Net ZeroORGANIZATION

0.99+

SplunkORGANIZATION

0.99+

UberORGANIZATION

0.99+

fiveQUANTITY

0.99+

less than two percentQUANTITY

0.99+

less than two hoursQUANTITY

0.99+

2012DATE

0.99+

UKLOCATION

0.99+

AdobeORGANIZATION

0.99+

four issuesQUANTITY

0.99+

Department of DefenseORGANIZATION

0.99+

next yearDATE

0.99+

three stepsQUANTITY

0.99+

node 0TITLE

0.99+

15 minutesQUANTITY

0.99+

hundred percentQUANTITY

0.99+

node zeroTITLE

0.99+

10xQUANTITY

0.99+

last yearDATE

0.99+

7 minutesQUANTITY

0.99+

one licenseQUANTITY

0.99+

second thingQUANTITY

0.99+

thousands of hostsQUANTITY

0.99+

five thousand hostsQUANTITY

0.99+

next weekDATE

0.99+