Story
Splunk
ITCITC Extends Splunk Observability Across Incident Response
ITC, a consumer staples organization in India, uses Splunk Observability from Splunk to support incident response for on-call engineers.
Value results
| Category | Value result |
|---|---|
| Productivity | Fewer stalled items because log investigation has a clear owner |
| Productivity | Handoffs in incident response sit in a shared queue instead of a mailbox trail |
| Risk and compliance | Splunk Observability is the governed place on-call engineers use for incident response |
Story
Inside ITC, incident response used to depend on whoever still had the latest file. That pattern is common in consumer staples groups working out of India. On-call engineers needed a system that would still make sense after the original project team moved on.
ITC uses Splunk Observability from Splunk as the working layer for log investigation. Splunk (a Cisco company) is a data platform for security and observability, used to search machine data and investigate incidents. The practical change is simple: incident response has a home, and reviews happen there instead of in a forwarded thread.
Nothing in this writeup invents a savings number. What ITC gets from Splunk is a durable place to run incident response and a way for on-call engineers to see the same log investigation at the same time.
