Embed Size (px)
Citation preview
Copyright©2015SplunkInc.
.conf2016CallforPapers:Tips,TricksandHotTopicsforCustomerSubmissions
InThisDeck…● Slide3:WhySubmit?
● Slides4-6:Tips&TricksforAcceptance
● Slides7-9:.conf2016HotTopics– ITOps&SplunkPlaQorm– Security,ComplianceandFraud
● Slide10:KeyDatesandResources
● Slides11:FAQ
● Slide12,13:DefiniWons– AbstractSubmissionDefiniWons– SkillLevelDefiniWons
2
WhySubmit?What’sinitforYou?!● Leadingupto.conf2016:– 1:1presentaWondevelopmentwithaSplunkContentDevelopmentManager– ComplimentarySpeakerTrainingbyDeFinisCommunicaWons
● At.conf2016:– Acomplimentary.conf2016pass– InvitaWonstospecialSpeaker-onlyVIPeventsat.conf2016withmembersofSplunkExecuWve
Staff
● Anddon’tforgetthatpresenWngat.conf2016will…– PosiWonyouasathoughtleaderinyourcompanyandyourcommunity– Helpyoudocumentthevaluethatyou/yourorganizaWonareprovidingbacktothebusinessusing
Splunk– Befun!
3
WhatMakesaDreamySubmission?Increaseyourchancesofacceptancebyincorpora2ngtheseTips&Tricks!
● IncludeinspiraWonalandrobustcontent!Mightinclude,butnotbelimitedto:‣ ProblemstatementandresoluWon-ie‘Howitwasdone,andwithwhatresults’‣ CleardescripWonofwhattheagendeewilllearnand/orwalkawaybeingabletodo‣ Whatwasthebefore(Splunk)andajer:
– Professional/businessgain– Personalgain– Obstaclesthatwereovercome–Execs,Budget,Resources,etc.
– CreaWveapproachtoobstacles– WaysthatSplunkgrewacrosstheorganizaWon–andwhat’snext
– Howyouwerecompelledtodomorewithyourdata!
4
WhatMakesaDreamySubmission?(cont’d)● Displayclearvisiononskilllevelofaudienceforthepreso:Beginner,Intermediate,AdvancedorGoodforAll
SkillLevels– Couldyoursessionbeup-ordown-leveledFeelfreetocallthisoutintheSessionDetails.
● ClearlyposiWonyoursessionasspeakingto:administrator,user,management,execuWve(CxOs)
● Contentbuiltaroundspecifictypeandlengthofpreso:15minuteTurboTalkvs45minuteTechnicalBreakoutSessionvsPanelDiscussion,etc.
● JazzysessionTitleandQuickAbstractthatwilldrawinagendeesandmakethemwanttoagendthesession!
● DetailedSessionDetailssothattheapprovingcommigeegetsaclearpictureofallyourcompellingcontent,andtheflowofyourpresentaWon.
● Exampledreamy.conf2015presentaWons–– Customer:hgp://conf.splunk.com/speakers/2015.html#search=Finding%20Advanced%20Agacks&– Splunker:hgp://conf.splunk.com/speakers/2015.html#search=Machine%20Learning%20and%20AnalyWcs%20in%20Splunk&
– Splunker:hgp://conf.splunk.com/speakers/2015.html#search=HTTP%20Event%20Collector%2C%20a%20New%20Way%20&
5
WhatMakesaDreamySubmission?(cont’d)● BespecificandsuccinctinyourAbstract.Makeitclearwhatyou'replanningtospeakabout,what
agendeeswilllearn,andwhyitwillbevaluableforthem.Aone-sentenceabstractisnotwhatsuccesslookslikehere.(Neitherisa50-sentenceabstract.)
● IncludescreenshotsofdashboardsorvisualizaWons!WewillNOTsharethesedashboardsexternally,ever.Butwewillsaythatshowingusyou'rebuildinggreatdashboardsasapartofyourapplicaWonincreasesthelikelihoodwe'llacceptyoursession.(Weunderstandthatforsomestoriesandcompaniesthisisnotpossibleordoesn'tmakesenseinthecontextofthesessiontopic.)
● Showusyouknowyourstuff!TherearefieldsintheapplicaWonthatrequestbackgroundonyouandyourusecase.Don'trushthroughorignorethesefields.Usethemtoshowusthatyou'retherealdeal—someonethe.conf2016audiencecanlearnfrom.
● SWllneedmoreguidance?SeepresentaWondecksfrom.conf2015forreferenceHEREonconf.splunk.com.Oremailconfspeakers@splunk.com.
6
HotTopicsfor.conf2016(ITOps&SplunkPlaQorm)● SplunksoluWonareas:– Cloudstrategies– ITOperaWons,ServiceManagementwithSplunkITSI,DevOps– SplunkforBusinessAnalyWcs– IoTandIndustrialData
● Splunk/HunkandotherBigDatatechnologies(Hadoop/Cassandra/MongoDB)
● ThepowerofSPL
● PoweringAnalyWcswithMachineLearning
● RapidROIwithSplunk
● BuildingSplunkApps–howandwhy
● Splunkacrosstheenterprise:scalability,deployment,management,educaWngandempoweringusers
● HowSplunkworks(underthecovers)
● UsingSplunkinaspecificindustry–Healthcare,Retail,Government,Non-profit,etc.
7
HotTopicsfor.conf2016(Security)● SubmissionsthatdescribemethodologyandbestpracWcesandincludethingslike:– InformaWonSecuritybestpracWceandprocess– Methods/techniquestoimprovesecuritydetecWon/response– BestpracWcesinSecurityOperaWonCenters(SOC),Audit,CSIRT,Forensics,hunWng,incidentinvesWgaWons,“detecWons”– “UseCase”development–problemtosolve,howtosolve(theoryofoperaWons)-whylookforsomething,whattolook
for,wheretolookforit
● InteresWng/SampleUseCases–describetheproblemandhowtosolveusingSplunk– Privilegeduser/accountmonitoring– FrauddetecWon&invesWgaWon– DetecWngandrespondingto:ransomware,phishing,infecWon,etc.– Securityforindustrialcontrol&IoTenvironments– DetecWngandrespondingtoInsiderThreat– ClarifyanalyWcs,andapplyingmodelstosecurity– VisualizaWontechniquestodetectandanalyzethreats
8
HotTopicsfor.conf2016(Security)● InteresWngandcreaWveuseofdatatype(s)forsecurity– DNSdataforsecurity– Endpointdataforsecurity– Emaildataforsecurity– Differenttypesofthreatintelligence(internal,external,formats,etc.)howthey’reused– SplunkStreamforsecurity– Socialnetworkdataforsecurity
● MachineLearning&AnalyWcsforSecurity– Howtoleveragemachinelearningmodel,algorithms,techniquesforsecurity– ApproachtousinganalyWcaltechniques– Interplay/integraWonbetweenSplunkandbigdatapensourcetechnologies– Useofthefollowingconcept/capabiliWes:adapWveresponse,workflowacWon,customeralertsandautomaWon– DifferentwaystogetaddiWonaldata/context,managedataflowtoandfromSplunk,takerangeofacWonstodifferent
devices/systems
● Commonmistakes&fixestoSplunkCore/ESforsecurity
9
KeyDatesandResources● CFPOpens:April11,2016
● CFPCloses:May16,2016
● 1stroundofSpeakerAnnouncements:EndofMay
● 1stplanningmee2ngwithSplunkPlanningManager:BysecondweekofJune
● FinalPresenta2onsdue:August30th(NOEXCEPTIONS)– LatepresentaWonswillnotbeincludedinprintedmaterialsorinpresentaWonmaterialsgiventoallagendees
atcheck-in.Itisdifficulttopromoteforsessionswithoutfinalcontent,pleasesubmitinaWmelymannersothatwecandoourparttomakeyoursessionafull-housesuccess!
● ComplimentarySpeakerTraining:TwoopWonaldatesTBD(June/July)
● Findallthings.conf2016atconf.splunk.com
● SeepresentaWondecksfrom.conf2015forreferencehere
10
FAQ● DoIgetafreepass?
– Yes!(Maybe!)SplunkoffersonecomplimentaryFullConferencePasstothePrimarySpeakeroneachsession.Thismeansifyousubmitanacceptedsessionwithmorethanonespeaker,theco-speakerwillonlybeconsideredforacomplimentarypassiftheyparWcipateandcontributeinALLPRE-PLANNINGSESSIONS.AnythirdorlateaddiWonco-speakerswillneedtopurchasetheirpasses.Panelistsdonotreceivecomp’dpasses.
– Splunkdoesnotcoverthecostofairfare,hotelorincidentalsforspeakers.– SplunkUniversitymustbepurchasedseparately.
● WhendoIfindoutifIgotaccepted?– We'llnoWfyacceptedspeakersbeginningonMay30th.
● IfIgetaccepted,willIberefundedthecostofmy2cketifI'vealreadypurchasedit?– Yes!Werecommendthatifyouplantoagend.conf2016thatyoupurchaseyourWcketNOWtotakeadvantageoftheExtraEarlyBirdRateof
$1295!!Ifyou’reoneofouracceptedspeakersandyou’vepurchasedaWcket,wewillprocessafullrefundforyouajeryou’veconfirmedyoursession.
● IfIgetaccepted,cansomeoneelsefrommycompanydothepresenta2on?
– WeacceptSplunkNinjas,notnecessarilycompanies,ascustomerspeakers.Pleasedonotexpectthatsomeoneelsefromyourcompanycanpresentonyourbehalfifyou'reaccepted.Splunkreservestherighttorescindaspeakingslotiftheoriginalapplicantsarenolongeravailabletospeak.
● Ihavemoreques2onsandI'dliketotalktoarealhumanaboutthem.
– Wetotallygetit.Feelfreetoreachouttoconfspeakers@splunk.comandamemberofthe.confTeamwillgetbacktoyouASAP.
11
DefiniWons:AbstractSubmissionTypes● Title:YoursessionWtleshouldclearlyindicatethetopicofyourpresentaWon,anddosoinawaythatagracts
potenWalagendeesforyourpresentaWon.(Limit150characters)
● Abstract:Inafewsentences,explainwhatyoursessionwillcover(pleasedonotusebulletsinyoursubmission).ThisabstractwillbeincludedinourmarkeWngmaterials,websiteandprogramguideandwillberesponsiblefordrivingagendancetoyoursession.(Limit400characters)SeeSampleAbstract
● QuickAbstract:Thisshorterabstractwillbeusedforpocketguides,mobileappsect.Thiscompellingshorterabstractshouldbewrigentoencouragesessionagendance.(Limit200characters)– Example:PrepareforusingITSI-IdenEfyandmonitorallofthedependenciesofyourcriEcalbusinessservices.Lookacrosssilosof
informaEon,includingOS,ApplicaEon,compute,virtualizaEon,storage,andnetworking.AnalyzethisinformaEoninSplunkITSIforadeeperunderstandingofyourcriEcalserverhealth.
● Details:Describethearchitectureofyoursessionhere.Whatarethemainpointsyouplantocover?DescribethepresentaWonflow.Ifapanelwhatarethespecificissuesyouwillhavethepanelistsaddress?Wherewillthedifferenceofopinionscomefrom?(DetailsareforSplunkInternaluseonly,andwillneverbeprinted.ThesedetailswillbeusedforPlanningandContentManagerstodecidewhatsessionswillpresentat.conf2016.ThisistheplacetoputanyandallinformaWonaboutwhythissessionshouldbeaccepted!)(Limit2,500characters)
12
DefiniWons:SkillLevelClassificaWons● SkillLevelRubricbySearch,DevelopingandDeployinghere:hgp://conf.splunk.com/speakers/skill-level.html
● Beginner:Thebeginnertrackencompassessessionsfocusedonthosege�ngstartedwithSplunk.SessionswillcoverfundamentalsaroundtheplaQorm,searchlanguageandidealarchitectures.Whetheryou’reauseroradmin,sessionswiththebeginnerdesignaWonwillgetyouontheroadtoSplunkNinjastatusinnoWme.
● Intermediate:Focusedonprinciplesandconceptsthatwouldappealtoagendeeswithmorethan5yearsofexperience.Ligle,ifany,WmeisspentondefiniWonaltermsandconcepts.ContainsinstrucWvedemos,managementtools,deepprocessdiscussions,orsimilarlevelofcontent.
● Advanced:Sessionsfocusedonadvancedprinciplesandconcepts,gearedtowardagendeeswithdeepsubjectknowledge.Ligle/noWmeisspentondefiningtermsandbackground.ContainsdemonstraWons,linecode,advancedarchitecturediscussions,toolsthatcanbeshared,orsimilarlevelofcontent.Advancedsessionsareinhighdemand.Ifyouchoose'advanced'youwillbeaskedtojusWfythisclassificaWon.
● GoodforallSkillLevels:ThisclassificaWonisusedforcompellingstrategicsessions,introducWonstonewtechnology,orsessionsortrackswhereraWngsarenotasrelevant(e.g.ProfessionalDevelopment).
13
ThankYou!
