Tutorial: How to Import Business Drivers from Splunk into BCO

The first version of Moviri Integration for BMC Capacity Optimization – Splunk was released in July 2013. This additional component for BMC Capacity Optimization product (BCO hereafter) enables you to setup a continuous data flow between Splunk and BCO for capacity-relevant metrics. The integration consists of three connectors, targeted at different data transfer scenarios:

• Splunk Generic allows to import almost any kind of KPIs, related to both business metrics or infrastructure utilization, that are stored in Splunk, by performing either a custom search query or a Splunk saved search
• Splunk Web Logs imports web volumes for NCSA-compliant web servers (e.g. Apache) and Microsoft internet Information Services web servers, that are monitored by Splunk in a Splunk standard fashion
• Splunk Unix and Windows imports performance counters for Unix and Windows systems, that are monitored by Splunk in a Splunk standard fashion

Once imported, data can be reported and analyzed leveraging the various BMC Capacity Optimization features, in order to:

• Gain visibility over time behavior of the imported series: set baselines, identify bottlenecks, spot anomalies and periodicity, compute trends
• Compare and correlate with other metrics already imported into BCO to get a deeper understanding of how the IT Services behaves as-a-whole
• Create forecasting models and perform advanced application and services analysis, including what-if analysis, optimization and planning

Here at Moviri we have prepared a document that focuses on the Splunk Generic scenario and describes, step-by-step, how a capacity business metric can be imported from a Splunk instance into BCO, and how it can be successfully used to make informed capacity decisions. You can download the full tutorial here.