Join the Houston and Denver Splunk User Groups for a cross-chapter session on improving cost and performance at scale in your Splunk environment — featuring Ben Hopp, Sr. Director of Customer Architecture at Imply.

As data volumes grow, many Splunk environments face a familiar tradeoff: costs increase or performance slows, especially as queries expand from hours to days or weeks. This challenge often comes down to how different workloads behave — real-time monitoring requires fast, predictable performance on recent data, while investigations and historical analysis place very different demands on the system.

In this session, we'll explore why this tradeoff exists and how teams can better support each workload by applying the right execution model.

Topics we'll cover include:

• Why the cost vs. performance tradeoff exists in growing Splunk environments

• How real-time monitoring, investigations, and historical analysis place different demands on the system

• Applying the right execution model — indexed data for fast detection, elastic compute for investigations, object storage for cost-efficient analysis

• Retaining more data, improving query performance, and reducing costs — without changing dashboards, alerts, or how your teams work today

Agenda:

• 3:30 PM – Meet and Greet / Networking

• 4:00 PM – Presentation and Q&A

• 5:00 PM – Continued Discussion - Muldoon's

📍 Houston Location: Fulcrum HQ - 2603 Augusta Dr Suite 1325, Houston, TX 77057
📍 Denver Location: Virtual
💻 Virtual Option: SUG : Getting More from Splunk: Improving Cost and Performance at Scale | Meeting-Join | Microsoft Teams