Syncsort Ironstream and the Splunk free edition fully support the unique fault analysis data from Compuware Abend-Aid and Application Audit for insight into failures and application use or privledged users activity.
http://www.compuware.com/partners/syncsort.html There are free Splunk Apps for both in SplunkBase. In broad I think that applying analytics and machine learning to mainframe data is still a largely untapped gold mine for customers to understand their own systems. All too often we have the best instrumented platform but report on that data using tools equivalent to stone knives and bear skins. Best Regards, Sam Knutson Compuware VP, Product Management @samknutson<https://twitter.com/samknutson> samuel.knut...@compuware.com<mailto:samuel.knut...@compuware.com> M: +1 301 996-1318<tel:+1%20301%20996-1318> On Jun 8, 2017, at 4:41 PM, Blaicher, Christopher Y. <cblaic...@syncsort.com<mailto:cblaic...@syncsort.com>> wrote: Biased Product Plug by the Product Architect Syncsort's Ironstream product is designed to supply realtime data from z/OS systems to a Splunk repository. Data can include SYSLOG, SMF records, RMF data, SYSPRINT from the JES spool, system performance data, Log4j files, Flat files and data provided via user API's. We continue to add sources as users identify new requirements. Our growing number of customers use this data for security, operational, monitoring and many other functions using Splunk application dash boards. Splunk has an application store that has a number of free Splunk applications that can be used to start getting value from the data on day one. We also offer a free limited use version of Ironstream that will allow you do download any amount of SYSLOG data. You can go to and get more information at http://www.syncsort.com/en/Products/Mainframe/Ironstream. From that page you can see a video that shows some of what can be done using Ironstream and Splunk. Also, at that site you can download the free version and play with it yourself. Chris Blaicher Technical Architect Mainframe Development P: 201-930-8234 | M: 512-627-3803 E: cblaic...@syncsort.com<mailto:cblaic...@syncsort.com> Syncsort Incorporated 2 Blue Hill Plaza #1563 Pearl River, NY 10965 www.syncsort.com<http://www.syncsort.com> Data quality leader Trillium Software is now a part of Syncsort. -----Original Message----- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Pew, Curtis G Sent: Thursday, June 8, 2017 12:55 PM To: IBM-MAIN@LISTSERV.UA.EDU<mailto:IBM-MAIN@LISTSERV.UA.EDU> Subject: Re: Syncsort With Splunk On Jun 8, 2017, at 11:03 AM, Jake Anderson <justmainfra...@gmail.com<mailto:justmainfra...@gmail.com><mailto:justmainfra...@gmail.com>> wrote: Is there anybody in the group who have used syncsort with Splunk ? We forward our OPERLOG to Splunk, although we don’t use Syncsort’s forwarder. (I wrote my own; it wasn’t that hard.) Our main motivation was to show that the mainframe group are “team players” since everyone else around here was investing in Splunk, but it is actually quite useful. We’ve set up a few regular reports of classes of ABENDs or other errors we like to keep track of, and it allows us to go back and do searches for messages when an issue arises that we hadn’t foreseen. The contents of this e-mail are intended for the named addressee only. It contains information that may be confidential. Unless you are the named addressee or an authorized designee, you may not copy or use it, or disclose it to anyone else. If you received it in error please notify us immediately and then destroy it ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
