You want to know what’s going on in your infrastructure, and you want to remediate fast when there is an issue. That’s challenging when you’ve got a ton of fast-moving applications. That’s where Splunk and Puppet come in. Splunk provides the data intake and analysis to tell you what’s going on while Puppet provides key operational data to improve decision making plus the ability to take immediate, automated action to resolve issues.
Puppet collects timely and useful inventory, change and action data from your whole estate. With the Puppet Report Viewer for Splunk Enterprise that data is readily available in Splunk Enterprise. Recognize issues faster, correlate Puppet data in your current searches, dashboards and alerts. Easily share Puppet data with other Splunk users like your InfoSec team. More details in the blog post: Introducing Puppet and Splunk integrations to improve reporting speed and scale.
Splunk is the place where you analyze and visualize data to make operational and security decisions. Once you’ve recognized an issue, time to resolution is costly when you have to manually access others systems to get the information you need or to make corrective changes. Splunk is about data intake and analysis while the strength of Puppet is to dependably, safely and repeatably take action. The Puppet Report Viewer for Splunk Enterprise speeds time to resolution in two important ways:
In a large environment keeping critical data flowing to Splunk can be a challenge. Puppet Enterprise solves this for you with a single solution that can install Forwarders on remote systems; insure that they are running and configured correctly; and report back to you when they are not. Puppet Enterprise also automates the installation and management of your Splunk server. See the Splunk module available from the Puppet Forge.