FarSight by Sonus provides a collection of dashboards for Splunk® Enterprise that correlate network activity with applications performance monitoring, enabling administrators to fine-tune networking resources in real-time for optimal performance. FarSight facilitates efficient enterprise resources allocation and cost-effective capacity planning
To understand the power of FarSight, we have created an interactive template that you can download to your PC and install to a local instance of Splunk Enterprise. The template simulates a distributed application and network during both expected and abnormal operating conditions. FarSight’s dashboard stitches together statistics of individual flows within the shared bandwidth on switch ports, providing metrics on end-to-end services and give operators insight into what’s happening on the network in real-time as well as historical views of network activity. When network issues arise, administrators can perform root cause analysis and problem remediation immediately.
The diagram in the overview shows the architecture of the template. An enterprise network application is simulated in which clients connect to an application server that is backed onto a database. These application components are assumed to be running on physically disparate machines in the data center and communicate via interconnected switching hardware as shown in the diagram below. Also shown is a SAN array that is used periodically for database backup. Sonus NaaS-IQ configures, orchestrates and automates the network on behalf of the storage and compute resources.
The template initially shows application and network statistics to understand their respective states under normal load. Splunk is used to collect, analyze and report on machine data from all elements of the system including, web client, database, application web server as well as data collected from Sonus NaaS-IQ and the OpenFlow-enabled switches. Once baseline behavior is established, it simulates an unanticipated low-priority database backup that causes switch link saturation and degradation of enterprise application performance.
By understanding the real-time network behavior including flows and switch port bandwidth, flows per switch, and allocated capacity, and correlating them with applications and services, administrators can immediately respond to the demands that the application is placing on the network. This deeper insight into traditionally siloed elements of your data center and WAN infrastructures helps increase your operational efficiency by appropriately allocating enterprise resources and reducing MTTR.
For fastest response to support, setup, help or feedback, please post to http://answers.splunk.com and tag your questions with sonusnetworks. For additional support, please visit https://support.sonus.net
Please note: This template is designed to generate simulated traffic and should not be installed in a production Splunk environment. If you do not have a non-production copy of the latest version of Splunk to run FarSight against, it can be downloaded here.
This template ONLY works on Splunk 5.x
FarSight by Sonus Networks requires the following:
Ensure that the software listed in the Dependencies section is installed.
Install FarSight by Sonus into Splunk as described in the Splunk documentation.
In Splunk, the template landing page contains a detailed quick start guide.
Splunk's App Certification program uses a specific set of criteria to evaluate the level of quality, usability and security your app offers to its users. In addition, we evaluate the documentation and support you offer to your app's users.
As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 50GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps and add-ons from Splunk, our partners and our community. Find an app or add-on for most any data source and user need, or simply create your own with help from our developer portal.