Story
Splunk
Perkins and WillPerkins and Will Brings Log Investigation onto Splunk
Perkins and Will, an industrials organization in the United States, uses Splunk SOAR from Splunk to support incident response for on-call engineers.
Perkins and Will runs incident response on Splunk so ownership is obvious when work stalls.
“Industrials work at Perkins and Will spans more than one site, even when headquarters sits in the United States.”
“On-call engineers asked for a shared way to run incident response without freezing local judgment.”
Independent write-up. Figures come from public sources or are illustrative.
Value results
| Category | Value result |
|---|---|
| Productivity | Fewer stalled items because log investigation has a clear owner |
| Productivity | Handoffs in incident response sit in a shared queue instead of a mailbox trail |
| Risk and compliance | Splunk SOAR is the governed place on-call engineers use for incident response |
Story
Industrials work at Perkins and Will spans more than one site, even when headquarters sits in the United States. Log investigation was splitting across regional habits. On-call engineers asked for a shared way to run incident response without freezing local judgment.
Splunk (Splunk SOAR) is what they standardized on. Splunk (a Cisco company) is a data platform for security and observability, used to search machine data and investigate incidents. Perkins and Will uses it as the system of record for log investigation, with on-call engineers as the primary operators and other groups coming in through the same queue.
Leaders get a picture they can actually walk. Teams get fewer mystery statuses. The story is about operating change, not an unpublished percentage.
