Podcasts about victorops

Joni Klippert has spent many years in startups. Post getting her MBA, she built her early career in Boulder, CO, and became very technical learning new technologies throughout the businesses she worked for, liked VictorOps and Splunk. Outside of tech, she is married with 2 dogs. Her favorite thing to do is travel with her husband to visit Michelin star restaurants. One of her favorites was called Azuermendi in Spain, as it was not only delicious, but an immersive experience.Joni had been building software for engineers for a long time, as a product person. At one point, she started researching the last mile of DevOps, and was surprised how far this particular group was behind, in regard to tooling. She dreamt of automating the pen-testing remediation process, and stumbled upon an opportunity as it relates to DAST - dynamic application security testing.This is the creation story of Stackhawk.SponsorsSpeakeasyQA WolfSnapTradeLinkshttps://www.stackhawk.com/https://www.linkedin.com/in/joniklippert/Our Sponsors:* Check out Kinsta: https://kinsta.com* Check out Vanta: https://vanta.com/CODESTORYSupport this podcast at — https://redcircle.com/code-story/donationsAdvertising Inquiries: https://redcircle.com/brandsPrivacy & Opt-Out: https://redcircle.com/privacy

Peggy Shell is the founder & CEO of Creative Alignments, a recruiting company that partners with quickly growing companies in consumer products and technology that are using their business as a force for good by creating people-focused cultures, commitment to DEI, or impact-focused products or services. Over the past decade, Creative Alignments' unique Time-Based Recruiting model has helped companies like SolidFire, VictorOps, HaloTop and RXBAR grow to successful exits valued at more than $2B. -- If you haven't yet had the chance, make sure to register for our 2024 Real Leaders Impact Awards. Our Impact Award winners gain access to a values aligned community, credibility through Real Leaders, and access to our network of Impact capital sources. Apply now to claim your discounted application ⁠https://eunbi5zgbx7.typeform.com/to/XNdfGsS2#app_first_name=xxxxx&company_name=xxxxx&work_email=xxxxx&campaign_name=xxxxx&channel=LN&owner=Z⁠ Also, check out Outsource Access for all of your Virtual Staffing Needs. At an affordable rate you can outsource the work you need to get done at an extremely affordable rate. You can find more info about them here using this link. https://outsourceaccess.com/

Chris Riley (@hoardinginfo, DevOps Advocate, @Splunk) talks about the state of DevOps, the evolution of Incident Response with Machine Learning, Service vs. Site Reliability, and using Incident Response to increase quality of developmentSHOW: 439SHOW SPONSOR LINKS:Datadog Homepage - Modern Monitoring and AnalyticsTry Datadog yourself by starting a free, 14-day trial today. Listeners of this podcast will also receive a free Datadog T-shirtMongoDB Homepage - The most popular database for modern applicationsMongoDB Atlas - MongoDB-as-a-Service on AWS, Azure and GCPCLOUD NEWS OF THE WEEK - http://bit.ly/cloudcast-cnotwSHOW NOTES:VictorOps (now Splunk) BlogChris Riley at DevOps.comDevelopers Eating the World PodcastTopic 1 - Welcome to the show. Tell everyone a little about yourself, you’ve been active in the DevOps space for quite some time. Topic 2 - About a year ago we had your peer and good friend of the show, Josh Atwell, on to talk about the State of DevOps in 2019. What are your thoughts on changes over the last 12 months and where we headed in 2020?Topic 3 - One item in particular that has drawn my attention is your discussions on Incident Response and Machine Learning. Can you tell everyone a little bit about that and why you believe it will be valuable going forward?Topic 4 - This in a way feels almost like a transition into the next evolution of our model. First we had separate dev and ops and no one talked, then we put them together, then we had every device and app start spitting out logs and alerts and next thing you knew, we were drowning in data… The complexity of the systems has grown exponentially. Fair?Topic 5 - You recently did a post over on the Victor Ops blog about SRE and the meaning of the “S” in that blog. You propose more and more it should stand for Service Reliability Engineer vs. the more traditional Site Reliability Engineer, especially as we move into a subscription based model world. Can you explain to everyone your thoughts there?Topic 6 - When I think Incident Response, I think production environments. As part of VictorOps I’m sure you see a lot of use cases and have solved some pretty unique customer problems. How can this be applied outside of production, say for application testing or quality before hitting production? Is that a valid approach?FEEDBACK?Email: show at thecloudcast dot netTwitter: @thecloudcastnet

Site Reliability Engineering: Easy to say, harder to do. It can be especially difficult to make sure that all of tenants of SRE are applied to the services you support in a way that is easy for your engineers to adopt. In this session, we will take a look at how you can use Splunk's ITSI, VictorOps and Phantom platforms to make robust solutions that can help your teams consistently solve complex problems and mature their services. Speaker(s) Chris Crocco, Senior Sales Engineer, Splunk Slides PDF link - https://conf.splunk.com/files/2019/slides/IT1046.pdf?podcast=1577146239 Product: Splunk Enterprise, Splunk IT Service Intelligence, Phantom, VictorOps Track: IT Operations Level: Advanced

Splunk/VictorOps allows your data to talk to people, and your people to talk to data, all while improving MTTR/MTTI. You’re already using Splunk today to get cool dashboards, ask questions of your data with search, and trigger important alerts based on data that’s of interest to you. But, just because alerts are important doesn’t mean they are for everyone. And for those who should respond to the alert, it’s important to get the alert into their hands immediately. Transitioning to a modern NOC, or “New Operations Center,” Splunk and VictorOps enable teams to collaboratively solve issues by providing on-call users with actionable alerts that allow for smarter investigation, faster mobilization, and lower mean time to resolution. In this session we’ll take a look under the hood at different Splunk and VictorOps integrations. Speaker(s) Kirk Kirk, ITOA Architect , Splunk Dylan Klausing, Sales Engineer Manager, Splunk Slides PDF link - https://conf.splunk.com/files/2019/slides/IT1697.pdf?podcast=1577146224 Product: Splunk Enterprise, Splunk IT Service Intelligence, VictorOps Track: IT Operations Level: Good for all skill levels

DevOps adoption requires high performing teams. One of the biggest challenges organizations have when adopting a DevOps framework is how to get early wins, get value early in the process, and overcome plateaus in adoption. These improvements are typically achieved through the use of automation, improved responsiveness, better situational awareness, and increased sharing between teams. As you will see in this session, Splunk easily sits in the middle of all of this. Speaker(s) Josh Atwell, Sr Technology Advocate, Splunk Slides PDF link - https://conf.splunk.com/files/2019/slides/IT1717.pdf?podcast=1577146230 Product: Splunk Enterprise, Splunk IT Service Intelligence, VictorOps Track: IT Operations Level: Good for all skill levels

Splunk .conf is our favorite event every year and we wanted to extend the excitement while getting even more Splunky. So we grabbed an RV, set up some sensors, built an edge computing environment, and packed up the Big Data Beard recording equipment for a road-trip across the country for the week leading up to .conf, traveling from New York City to Las Vegas. We stopped along the way to hear awesome stories from fellow Splunk users, sharing them online via live chats and podcasts. With the power of Splunk, we captured data, discovered trends, predicted failures, and discovered more exciting ways to use Splunk to drive value from machine-generated data across the country. Hear the full story of how three engineers had the most interesting trip to .conf2019 of all! Speaker(s) Brett Roberts, Senior Systems Engineer, Dell Kyle Prins, Senior Systems Engineer , Dell Slides PDF link - https://conf.splunk.com/files/2019/slides/IoT2066.pdf?podcast=1577146230 Product: Splunk Enterprise, Splunk for Industrial IoT, VictorOps Track: Internet of Things Level: Good for all skill levels

As more technology organizations pursue agility and move towards continuous delivery, a stable and reliable IT infrastructure is the foundation that enables the transformation. However, the increasing complexity of the underlying infrastructure also brings a lot of challenges. Splunk has built a variety of solutions on top of our platform to deal with this complexity and deliver analytics and troubleshooting data to our engineering teams and decision makers. We will share a bit about our continuous integration process for triaging automated tests using Splunk, how we build IT infrastructure monitoring/analytics system based on Splunk ITSI, and how we take corresponding actions via VictorOps. Speaker(s) Scott Lu, Senior Engineering Manager, Splunk Alfie You, Principal Software Engineer, Splunk Slides PDF link - https://conf.splunk.com/files/2019/slides/IT1962.pdf?podcast=1577146230 Product: Splunk Enterprise, Splunk IT Service Intelligence, VictorOps Track: IT Operations Level: Intermediate

In the new Splunk Cloud Platform, we’re reimagining the way we enable monitoring and alerting. Configure triggers to identify changes and anomalies in your data as they occur and determine the right action(s) that should be taken as a result – email, Slack, VictorOps, etc. Leverage machine learning to bring your attention to the right insights and roll that back into your core monitoring strategy.  Come to this session to learn more about both the long-term vision and what’s immediately available. Speaker(s) Miranda Luna, Product Management, Splunk Declan Shanaghy, Architect Developer Platform, Splunk Slides PDF link - https://conf.splunk.com/files/2019/slides/DEV2518.pdf?podcast=1577146193 Product: Track: Developer Level:

Everything breaks at 3:00 a.m. No one wants a team of engineers managing incidents on little to no sleep. Think about how tired you were the morning after the last all-nighter you pulled. Coffee can only do so much. If you work in any type of technical operations role you know how easy it is for on-call to take over your life. When managing an on-call team, you must think about the human side of on-call to avoid employee burnout and alert fatigue. In this session we will outline a four-step process to streamline incident management, review how to manage alerts through VictorOps, and give your team their lives back! Speaker(s) Bethany Abbott, TechOps Manager, NS1 Slides PDF link - https://conf.splunk.com/files/2019/slides/IT1968.pdf?podcast=1577146223 Product: VictorOps Track: IT Operations Level: Good for all skill levels

In Irdeto’s 24/7 Service Operations Center, our goal is to enable proactive enable proactive event management based on performance. We manage a vast infrastructure and operations stack and it’s important we have the right tools to make better decisions. We fought the war on “white noise”. Playbooks were established and actionable alerts created. On-Call schedules gave us access to domain expertise. Reporting capabilities helped drive continuous improvement. To better understand how we did this you’ll see an in-depth demo on Integration, the Rules Engine and gain insight into our evolution using ITSI with VictorOps. Speaker(s) Steve Harte, Incident Manager, Irdeto Daryel Murnin, Sr. Manager Cloud Service Operations, Irdeto Slides PDF link - https://conf.splunk.com/files/2019/slides/IT3123.pdf?podcast=1577146223 Product: Track: IT Operations Level:

DevOps adoption requires high performing teams. One of the biggest challenges organizations have when adopting a DevOps framework is how to get early wins, get value early in the process, and overcome plateaus in adoption. These improvements are typically achieved through the use of automation, improved responsiveness, better situational awareness, and increased sharing between teams. As you will see in this session, Splunk easily sits in the middle of all of this. Speaker(s) Josh Atwell, Sr Technology Advocate, Splunk Slides PDF link - https://conf.splunk.com/files/2019/slides/IT1717.pdf?podcast=1577146225 Product: Splunk Enterprise, Splunk IT Service Intelligence, VictorOps Track: IT Operations Level: Good for all skill levels

Splunk/VictorOps allows your data to talk to people, and your people to talk to data, all while improving MTTR/MTTI. You’re already using Splunk today to get cool dashboards, ask questions of your data with search, and trigger important alerts based on data that’s of interest to you. But, just because alerts are important doesn’t mean they are for everyone. And for those who should respond to the alert, it’s important to get the alert into their hands immediately. Transitioning to a modern NOC, or “New Operations Center,” Splunk and VictorOps enable teams to collaboratively solve issues by providing on-call users with actionable alerts that allow for smarter investigation, faster mobilization, and lower mean time to resolution. In this session we’ll take a look under the hood at different Splunk and VictorOps integrations. Speaker(s) Kirk Kirk, ITOA Architect , Splunk Dylan Klausing, Sales Engineer Manager, Splunk Slides PDF link - https://conf.splunk.com/files/2019/slides/IT1697.pdf?podcast=1577146242 Product: Splunk Enterprise, Splunk IT Service Intelligence, VictorOps Track: IT Operations Level: Good for all skill levels

Splunk/VictorOps allows your data to talk to people, and your people to talk to data, all while improving MTTR/MTTI. You’re already using Splunk today to get cool dashboards, ask questions of your data with search, and trigger important alerts based on data that’s of interest to you. But, just because alerts are important doesn’t mean they are for everyone. And for those who should respond to the alert, it’s important to get the alert into their hands immediately. Transitioning to a modern NOC, or “New Operations Center,” Splunk and VictorOps enable teams to collaboratively solve issues by providing on-call users with actionable alerts that allow for smarter investigation, faster mobilization, and lower mean time to resolution. In this session we’ll take a look under the hood at different Splunk and VictorOps integrations. Speaker(s) Kirk Kirk, ITOA Architect , Splunk Dylan Klausing, Sales Engineer Manager, Splunk Slides PDF link - https://conf.splunk.com/files/2019/slides/IT1697.pdf?podcast=1577146229 Product: Splunk Enterprise, Splunk IT Service Intelligence, VictorOps Track: IT Operations Level: Good for all skill levels

Splunk is increasingly at the forefront of new approaches to IT Operations, especially in disruptive ‘cloud-native’ businesses. This session will help you understand how ‘New Ops’ techniques like Observability, Site Reliability Engineering, SLOs/SLIs, Error Budgets, ChatOps, and Blameless Post-Mortems can help your IT Ops team; and how you can adopt ‘New Ops’ technologies like Containers, Microservice Architectures, Machine Learning, Orchestration, Predictive Analytics, and AI for IT Ops. Speaker(s) Andi Mann, Chief Technology Advocate, Splunk Endre Peterfi, Staff Sales Engineer, Splunk Slides PDF link - https://conf.splunk.com/files/2019/slides/IT1448.pdf?podcast=1577146225 Product: Splunk IT Service Intelligence, Splunk Machine Learning Toolkit, VictorOps Track: IT Operations Level: Intermediate

Splunk .conf is our favorite event every year and we wanted to extend the excitement while getting even more Splunky. So we grabbed an RV, set up some sensors, built an edge computing environment, and packed up the Big Data Beard recording equipment for a road-trip across the country for the week leading up to .conf, traveling from New York City to Las Vegas. We stopped along the way to hear awesome stories from fellow Splunk users, sharing them online via live chats and podcasts. With the power of Splunk, we captured data, discovered trends, predicted failures, and discovered more exciting ways to use Splunk to drive value from machine-generated data across the country. Hear the full story of how three engineers had the most interesting trip to .conf2019 of all! Speaker(s) Brett Roberts, Senior Systems Engineer, Dell Kyle Prins, Senior Systems Engineer , Dell Slides PDF link - https://conf.splunk.com/files/2019/slides/IoT2066.pdf?podcast=1577146225 Product: Splunk Enterprise, Splunk for Industrial IoT, VictorOps Track: Internet of Things Level: Good for all skill levels

In the new Splunk Cloud Platform, we’re reimagining the way we enable monitoring and alerting. Configure triggers to identify changes and anomalies in your data as they occur and determine the right action(s) that should be taken as a result – email, Slack, VictorOps, etc. Leverage machine learning to bring your attention to the right insights and roll that back into your core monitoring strategy.  Come to this session to learn more about both the long-term vision and what’s immediately available. Speaker(s) Miranda Luna, Product Management, Splunk Declan Shanaghy, Architect Developer Platform, Splunk Slides PDF link - https://conf.splunk.com/files/2019/slides/DEV2518.pdf?podcast=1577146225 Product: Track: Developer Level:

As more technology organizations pursue agility and move towards continuous delivery, a stable and reliable IT infrastructure is the foundation that enables the transformation. However, the increasing complexity of the underlying infrastructure also brings a lot of challenges. Splunk has built a variety of solutions on top of our platform to deal with this complexity and deliver analytics and troubleshooting data to our engineering teams and decision makers. We will share a bit about our continuous integration process for triaging automated tests using Splunk, how we build IT infrastructure monitoring/analytics system based on Splunk ITSI, and how we take corresponding actions via VictorOps. Speaker(s) Scott Lu, Senior Engineering Manager, Splunk Alfie You, Principal Software Engineer, Splunk Slides PDF link - https://conf.splunk.com/files/2019/slides/IT1962.pdf?podcast=1577146226 Product: Splunk Enterprise, Splunk IT Service Intelligence, VictorOps Track: IT Operations Level: Intermediate

Splunk is increasingly at the forefront of new approaches to IT Operations, especially in disruptive ‘cloud-native’ businesses. This session will help you understand how ‘New Ops’ techniques like Observability, Site Reliability Engineering, SLOs/SLIs, Error Budgets, ChatOps, and Blameless Post-Mortems can help your IT Ops team; and how you can adopt ‘New Ops’ technologies like Containers, Microservice Architectures, Machine Learning, Orchestration, Predictive Analytics, and AI for IT Ops. Speaker(s) Andi Mann, Chief Technology Advocate, Splunk Endre Peterfi, Staff Sales Engineer, Splunk Slides PDF link - https://conf.splunk.com/files/2019/slides/IT1448.pdf?podcast=1577146258 Product: Splunk IT Service Intelligence, Splunk Machine Learning Toolkit, VictorOps Track: IT Operations Level: Intermediate

Site Reliability Engineering: Easy to say, harder to do. It can be especially difficult to make sure that all of tenants of SRE are applied to the services you support in a way that is easy for your engineers to adopt. In this session, we will take a look at how you can use Splunk's ITSI, VictorOps and Phantom platforms to make robust solutions that can help your teams consistently solve complex problems and mature their services. Speaker(s) Chris Crocco, Senior Sales Engineer, Splunk Slides PDF link - https://conf.splunk.com/files/2019/slides/IT1046.pdf?podcast=1577146230 Product: Splunk Enterprise, Splunk IT Service Intelligence, Phantom, VictorOps Track: IT Operations Level: Advanced

Site Reliability Engineering: Easy to say, harder to do. It can be especially difficult to make sure that all of tenants of SRE are applied to the services you support in a way that is easy for your engineers to adopt. In this session, we will take a look at how you can use Splunk's ITSI, VictorOps and Phantom platforms to make robust solutions that can help your teams consistently solve complex problems and mature their services. Speaker(s) Chris Crocco, Senior Sales Engineer, Splunk Slides PDF link - https://conf.splunk.com/files/2019/slides/IT1046.pdf?podcast=1577146225 Product: Splunk Enterprise, Splunk IT Service Intelligence, Phantom, VictorOps Track: IT Operations Level: Advanced

As more technology organizations pursue agility and move towards continuous delivery, a stable and reliable IT infrastructure is the foundation that enables the transformation. However, the increasing complexity of the underlying infrastructure also brings a lot of challenges. Splunk has built a variety of solutions on top of our platform to deal with this complexity and deliver analytics and troubleshooting data to our engineering teams and decision makers. We will share a bit about our continuous integration process for triaging automated tests using Splunk, how we build IT infrastructure monitoring/analytics system based on Splunk ITSI, and how we take corresponding actions via VictorOps. Speaker(s) Scott Lu, Senior Engineering Manager, Splunk Alfie You, Principal Software Engineer, Splunk Slides PDF link - https://conf.splunk.com/files/2019/slides/IT1962.pdf?podcast=1577146263 Product: Splunk Enterprise, Splunk IT Service Intelligence, VictorOps Track: IT Operations Level: Intermediate

DevOps adoption requires high performing teams. One of the biggest challenges organizations have when adopting a DevOps framework is how to get early wins, get value early in the process, and overcome plateaus in adoption. These improvements are typically achieved through the use of automation, improved responsiveness, better situational awareness, and increased sharing between teams. As you will see in this session, Splunk easily sits in the middle of all of this. Speaker(s) Josh Atwell, Sr Technology Advocate, Splunk Slides PDF link - https://conf.splunk.com/files/2019/slides/IT1717.pdf?podcast=1577146211 Product: Splunk Enterprise, Splunk IT Service Intelligence, VictorOps Track: IT Operations Level: Good for all skill levels

Splunk .conf is our favorite event every year and we wanted to extend the excitement while getting even more Splunky. So we grabbed an RV, set up some sensors, built an edge computing environment, and packed up the Big Data Beard recording equipment for a road-trip across the country for the week leading up to .conf, traveling from New York City to Las Vegas. We stopped along the way to hear awesome stories from fellow Splunk users, sharing them online via live chats and podcasts. With the power of Splunk, we captured data, discovered trends, predicted failures, and discovered more exciting ways to use Splunk to drive value from machine-generated data across the country. Hear the full story of how three engineers had the most interesting trip to .conf2019 of all! Speaker(s) Brett Roberts, Senior Systems Engineer, Dell Kyle Prins, Senior Systems Engineer , Dell Slides PDF link - https://conf.splunk.com/files/2019/slides/IoT2066.pdf?podcast=1577146263 Product: Splunk Enterprise, Splunk for Industrial IoT, VictorOps Track: Internet of Things Level: Good for all skill levels

DevOps adoption requires high performing teams. One of the biggest challenges organizations have when adopting a DevOps framework is how to get early wins, get value early in the process, and overcome plateaus in adoption. These improvements are typically achieved through the use of automation, improved responsiveness, better situational awareness, and increased sharing between teams. As you will see in this session, Splunk easily sits in the middle of all of this. Speaker(s) Josh Atwell, Sr Technology Advocate, Splunk Slides PDF link - https://conf.splunk.com/files/2019/slides/IT1717.pdf?podcast=1577146243 Product: Splunk Enterprise, Splunk IT Service Intelligence, VictorOps Track: IT Operations Level: Good for all skill levels

Site Reliability Engineering: Easy to say, harder to do. It can be especially difficult to make sure that all of tenants of SRE are applied to the services you support in a way that is easy for your engineers to adopt. In this session, we will take a look at how you can use Splunk's ITSI, VictorOps and Phantom platforms to make robust solutions that can help your teams consistently solve complex problems and mature their services. Speaker(s) Chris Crocco, Senior Sales Engineer, Splunk Slides PDF link - https://conf.splunk.com/files/2019/slides/IT1046.pdf?podcast=1577146243 Product: Splunk Enterprise, Splunk IT Service Intelligence, Phantom, VictorOps Track: IT Operations Level: Advanced

As more technology organizations pursue agility and move towards continuous delivery, a stable and reliable IT infrastructure is the foundation that enables the transformation. However, the increasing complexity of the underlying infrastructure also brings a lot of challenges. Splunk has built a variety of solutions on top of our platform to deal with this complexity and deliver analytics and troubleshooting data to our engineering teams and decision makers. We will share a bit about our continuous integration process for triaging automated tests using Splunk, how we build IT infrastructure monitoring/analytics system based on Splunk ITSI, and how we take corresponding actions via VictorOps. Speaker(s) Scott Lu, Senior Engineering Manager, Splunk Alfie You, Principal Software Engineer, Splunk Slides PDF link - https://conf.splunk.com/files/2019/slides/IT1962.pdf?podcast=1577146244 Product: Splunk Enterprise, Splunk IT Service Intelligence, VictorOps Track: IT Operations Level: Intermediate

Everything breaks at 3:00 a.m. No one wants a team of engineers managing incidents on little to no sleep. Think about how tired you were the morning after the last all-nighter you pulled. Coffee can only do so much. If you work in any type of technical operations role you know how easy it is for on-call to take over your life. When managing an on-call team, you must think about the human side of on-call to avoid employee burnout and alert fatigue. In this session we will outline a four-step process to streamline incident management, review how to manage alerts through VictorOps, and give your team their lives back! Speaker(s) Bethany Abbott, TechOps Manager, NS1 Slides PDF link - https://conf.splunk.com/files/2019/slides/IT1968.pdf?podcast=1577146210 Product: VictorOps Track: IT Operations Level: Good for all skill levels

In Irdeto’s 24/7 Service Operations Center, our goal is to enable proactive enable proactive event management based on performance. We manage a vast infrastructure and operations stack and it’s important we have the right tools to make better decisions. We fought the war on “white noise”. Playbooks were established and actionable alerts created. On-Call schedules gave us access to domain expertise. Reporting capabilities helped drive continuous improvement. To better understand how we did this you’ll see an in-depth demo on Integration, the Rules Engine and gain insight into our evolution using ITSI with VictorOps. Speaker(s) Steve Harte, Incident Manager, Irdeto Daryel Murnin, Sr. Manager Cloud Service Operations, Irdeto Slides PDF link - https://conf.splunk.com/files/2019/slides/IT3123.pdf?podcast=1577146210 Product: Track: IT Operations Level:

Splunk/VictorOps allows your data to talk to people, and your people to talk to data, all while improving MTTR/MTTI. You’re already using Splunk today to get cool dashboards, ask questions of your data with search, and trigger important alerts based on data that’s of interest to you. But, just because alerts are important doesn’t mean they are for everyone. And for those who should respond to the alert, it’s important to get the alert into their hands immediately. Transitioning to a modern NOC, or “New Operations Center,” Splunk and VictorOps enable teams to collaboratively solve issues by providing on-call users with actionable alerts that allow for smarter investigation, faster mobilization, and lower mean time to resolution. In this session we’ll take a look under the hood at different Splunk and VictorOps integrations. Speaker(s) Kirk Kirk, ITOA Architect , Splunk Dylan Klausing, Sales Engineer Manager, Splunk Slides PDF link - https://conf.splunk.com/files/2019/slides/IT1697.pdf?podcast=1577146210 Product: Splunk Enterprise, Splunk IT Service Intelligence, VictorOps Track: IT Operations Level: Good for all skill levels

Site Reliability Engineering: Easy to say, harder to do. It can be especially difficult to make sure that all of tenants of SRE are applied to the services you support in a way that is easy for your engineers to adopt. In this session, we will take a look at how you can use Splunk's ITSI, VictorOps and Phantom platforms to make robust solutions that can help your teams consistently solve complex problems and mature their services. Speaker(s) Chris Crocco, Senior Sales Engineer, Splunk Slides PDF link - https://conf.splunk.com/files/2019/slides/IT1046.pdf?podcast=1577146211 Product: Splunk Enterprise, Splunk IT Service Intelligence, Phantom, VictorOps Track: IT Operations Level: Advanced

Splunk is increasingly at the forefront of new approaches to IT Operations, especially in disruptive ‘cloud-native’ businesses. This session will help you understand how ‘New Ops’ techniques like Observability, Site Reliability Engineering, SLOs/SLIs, Error Budgets, ChatOps, and Blameless Post-Mortems can help your IT Ops team; and how you can adopt ‘New Ops’ technologies like Containers, Microservice Architectures, Machine Learning, Orchestration, Predictive Analytics, and AI for IT Ops. Speaker(s) Andi Mann, Chief Technology Advocate, Splunk Endre Peterfi, Staff Sales Engineer, Splunk Slides PDF link - https://conf.splunk.com/files/2019/slides/IT1448.pdf?podcast=1577146211 Product: Splunk IT Service Intelligence, Splunk Machine Learning Toolkit, VictorOps Track: IT Operations Level: Intermediate

As more technology organizations pursue agility and move towards continuous delivery, a stable and reliable IT infrastructure is the foundation that enables the transformation. However, the increasing complexity of the underlying infrastructure also brings a lot of challenges. Splunk has built a variety of solutions on top of our platform to deal with this complexity and deliver analytics and troubleshooting data to our engineering teams and decision makers. We will share a bit about our continuous integration process for triaging automated tests using Splunk, how we build IT infrastructure monitoring/analytics system based on Splunk ITSI, and how we take corresponding actions via VictorOps. Speaker(s) Scott Lu, Senior Engineering Manager, Splunk Alfie You, Principal Software Engineer, Splunk Slides PDF link - https://conf.splunk.com/files/2019/slides/IT1962.pdf?podcast=1577146212 Product: Splunk Enterprise, Splunk IT Service Intelligence, VictorOps Track: IT Operations Level: Intermediate

Splunk .conf is our favorite event every year and we wanted to extend the excitement while getting even more Splunky. So we grabbed an RV, set up some sensors, built an edge computing environment, and packed up the Big Data Beard recording equipment for a road-trip across the country for the week leading up to .conf, traveling from New York City to Las Vegas. We stopped along the way to hear awesome stories from fellow Splunk users, sharing them online via live chats and podcasts. With the power of Splunk, we captured data, discovered trends, predicted failures, and discovered more exciting ways to use Splunk to drive value from machine-generated data across the country. Hear the full story of how three engineers had the most interesting trip to .conf2019 of all! Speaker(s) Brett Roberts, Senior Systems Engineer, Dell Kyle Prins, Senior Systems Engineer , Dell Slides PDF link - https://conf.splunk.com/files/2019/slides/IoT2066.pdf?podcast=1577146207 Product: Splunk Enterprise, Splunk for Industrial IoT, VictorOps Track: Internet of Things Level: Good for all skill levels

Everything breaks at 3:00 a.m. No one wants a team of engineers managing incidents on little to no sleep. Think about how tired you were the morning after the last all-nighter you pulled. Coffee can only do so much. If you work in any type of technical operations role you know how easy it is for on-call to take over your life. When managing an on-call team, you must think about the human side of on-call to avoid employee burnout and alert fatigue. In this session we will outline a four-step process to streamline incident management, review how to manage alerts through VictorOps, and give your team their lives back! Speaker(s) Bethany Abbott, TechOps Manager, NS1 Slides PDF link - https://conf.splunk.com/files/2019/slides/IT1968.pdf?podcast=1577146261 Product: VictorOps Track: IT Operations Level: Good for all skill levels

Splunk/VictorOps allows your data to talk to people, and your people to talk to data, all while improving MTTR/MTTI. You’re already using Splunk today to get cool dashboards, ask questions of your data with search, and trigger important alerts based on data that’s of interest to you. But, just because alerts are important doesn’t mean they are for everyone. And for those who should respond to the alert, it’s important to get the alert into their hands immediately. Transitioning to a modern NOC, or “New Operations Center,” Splunk and VictorOps enable teams to collaboratively solve issues by providing on-call users with actionable alerts that allow for smarter investigation, faster mobilization, and lower mean time to resolution. In this session we’ll take a look under the hood at different Splunk and VictorOps integrations. Speaker(s) Kirk Kirk, ITOA Architect , Splunk Dylan Klausing, Sales Engineer Manager, Splunk Slides PDF link - https://conf.splunk.com/files/2019/slides/IT1697.pdf?podcast=1577146262 Product: Splunk Enterprise, Splunk IT Service Intelligence, VictorOps Track: IT Operations Level: Good for all skill levels

Site Reliability Engineering: Easy to say, harder to do. It can be especially difficult to make sure that all of tenants of SRE are applied to the services you support in a way that is easy for your engineers to adopt. In this session, we will take a look at how you can use Splunk's ITSI, VictorOps and Phantom platforms to make robust solutions that can help your teams consistently solve complex problems and mature their services. Speaker(s) Chris Crocco, Senior Sales Engineer, Splunk Slides PDF link - https://conf.splunk.com/files/2019/slides/IT1046.pdf?podcast=1577146263 Product: Splunk Enterprise, Splunk IT Service Intelligence, Phantom, VictorOps Track: IT Operations Level: Advanced

DevOps adoption requires high performing teams. One of the biggest challenges organizations have when adopting a DevOps framework is how to get early wins, get value early in the process, and overcome plateaus in adoption. These improvements are typically achieved through the use of automation, improved responsiveness, better situational awareness, and increased sharing between teams. As you will see in this session, Splunk easily sits in the middle of all of this. Speaker(s) Josh Atwell, Sr Technology Advocate, Splunk Slides PDF link - https://conf.splunk.com/files/2019/slides/IT1717.pdf?podcast=1577146263 Product: Splunk Enterprise, Splunk IT Service Intelligence, VictorOps Track: IT Operations Level: Good for all skill levels

Splunk is increasingly at the forefront of new approaches to IT Operations, especially in disruptive ‘cloud-native’ businesses. This session will help you understand how ‘New Ops’ techniques like Observability, Site Reliability Engineering, SLOs/SLIs, Error Budgets, ChatOps, and Blameless Post-Mortems can help your IT Ops team; and how you can adopt ‘New Ops’ technologies like Containers, Microservice Architectures, Machine Learning, Orchestration, Predictive Analytics, and AI for IT Ops. Speaker(s) Andi Mann, Chief Technology Advocate, Splunk Endre Peterfi, Staff Sales Engineer, Splunk Slides PDF link - https://conf.splunk.com/files/2019/slides/IT1448.pdf?podcast=1577146263 Product: Splunk IT Service Intelligence, Splunk Machine Learning Toolkit, VictorOps Track: IT Operations Level: Intermediate

Splunk is increasingly at the forefront of new approaches to IT Operations, especially in disruptive ‘cloud-native’ businesses. This session will help you understand how ‘New Ops’ techniques like Observability, Site Reliability Engineering, SLOs/SLIs, Error Budgets, ChatOps, and Blameless Post-Mortems can help your IT Ops team; and how you can adopt ‘New Ops’ technologies like Containers, Microservice Architectures, Machine Learning, Orchestration, Predictive Analytics, and AI for IT Ops. Speaker(s) Andi Mann, Chief Technology Advocate, Splunk Endre Peterfi, Staff Sales Engineer, Splunk Slides PDF link - https://conf.splunk.com/files/2019/slides/IT1448.pdf?podcast=1577146244 Product: Splunk IT Service Intelligence, Splunk Machine Learning Toolkit, VictorOps Track: IT Operations Level: Intermediate

This week my homie supreme, Jason Hand joins me on On-Call Nightmares. We talk monitoring, SRE and getting in the van. Jason has spent the last 5 years connecting with technologists around the world on ideas related to balancing system and service reliability with the speed and agility required in today's digital world. Previously at VictorOps, Jason authored four books on the subjects of Site Reliability Engineering, Post-Incident Reviews, and ChatOps and was named "DevOps Evangelist of the Year" in 2016 by DevOps.com. Co-organizer and emcee of the annual DevOpsDays Rockies conference, the Frontrange Site Reliability Meetup, Denver DevOps Meetup, and DevOps Road Trip, Jason enjoys connecting story tellers and actionable ideas with those who are hungry to learn. Co-host of the podcast "Community Pulse", Jason helps to bring together ideas and expertise as it relates to building community within tech (I.e. advocacy, evangelism). In his spare time, you'll find Jason soaking up the beautiful Colorado outdoors on a trail, lake, river, or mountain by day and enjoying craft IPA's and bluegrass music by night. Transcript: https://aka.ms/AA5q317 https://twitter.com/jasonhand

Recorded at the Splunk’s Sales Kick-off in Las Vegas, Cory Minton and Brett Roberts sit down with Big Data Beard podcast Alumnus, Bill Emmett and first time guest Dylan Klausing to dive into one of Splunk recent acquisitions, VictorOps.  Last year, Splunk acquired VictorOps, an incident management platform that is purpose built to help teams “Make On-Call Suck Less”. Bill and Dylan provide an insight into how VictorOps is a powerful extension to the powerful and popular Splunk platform.  While Splunk has been historically great in surfacing alerts, VictorOps takes it a step further and provides a better ability to get that alert in the hands of someone who can drive it to the solution.  Cory and Brett dive into the software and explore what’s next with the platform and its integration with Splunk. Looking to attend O’Reilly’s AI Conference in NYC on April 15th-18th?  Click here and use promo code PCBEARD to save 15% off!

Show: 378Description: Aaron and Brian review the biggest news, trends and topics of 2018.Show Sponsor Links:Datadog Homepage - Modern Monitoring and AnalyticsTry Datadog yourself by starting a free, 14-day trial today. Listeners of this podcast will also receive a free Datadog T-shirtCloudcast Housekeeping:Thank you to our sponsors, both A Cloud Guru and DataDog64% of Krispy Kreme Funding - http://bit.ly/Cloudcast-Donuts201951 Shows, Avg Listens (show): 18-20k (+19%), Avg Rank iTunes Technology: 63Over $50B in M&A and VC Funding for guests (all-time)Acquired: Red Hat, Rightscale, CoreOS, GitHub, Evident.io, Loggly, CloudHealth, VictorOps, BonsaiIPO: PivotalFunding: SWIM.AI, Stryth Leviathan, Atomist, Kasten, Lightstep, Rubrik, Hashicorp, A Cloud GuruShow Notes:Previous Year Cloudcast Predictions: 2017, 2016, 2015, 2014,Top Tech Trends (expected) in 2019 (via CBInsights)Commercial Open Source Software Companies ($100B)Cloudability - State of the Cloud (2018)Big Trends:Gartner IaaS MQ is down to 6 companies (AWS, Azure, GCP, Alibaba, IBM, Oracle)AWS growing +40% ($25B revenues) and Azure revenues ~ $28-30B (but not explicitly broken out) - AWS claimed at re:Invent to have 51% market-share.Big acquisitions around Open Source (Red Hat, GitHub, Hortonworks)A new push by Open Source companies (Redis, Confluent) to change their licensing model to help protect them from public cloud providers taking their software and not giving back - http://dtrace.org/blogs/bmc/2018/12/14/open-source-confronts-its-midlife-crisis/Big funding and investments around HCI and Backup HCIKubernetes continues to dominate containers and cloud-native (see: @PodCTL podcast)New CEO at Google Cloud (Thomas Kurian)Blockchain seems to need a new PR agencyInterest rates are rising (2 more raises are projected in 2019), which changes all the VC modelsTech Stocks (2018):S and P 500: (-12.2%), DJIA: (-12%), NASDAQ: (-8%)AAPL: (-12%), AMZN: (+14%), CSCO: (+5%), FB: (-29%), GOOG: (-7.5%), IBM: (-30%)MSFT: (+11%), NFLX: (+25%), NTAP: (-1%), NTNX: (+1%), ORCL: (-11%), RHT: +43% (acquired by IBM)PVTL (0%), SAP: (-8.5%), SFDC: (+18%), VMW: (+13%)How are SaaS priced after 2018 correction? - https://tomtunguz.com/just-where-are-saas-companies-priced-after-the-2018-correction/

Aaron and Brian talk about the first half of 2018: Acquisitions and IPOs, Rating and ranking the Public Cloud, a look at aspects of Private Cloud, Containers and Kubernetes, HCI and GDPR, as well as their perspectives on AI and IoT. Show Links: [PODCAST] @PodCTL - Containers | Kubernetes | OpenShift - RSS Feed, iTunes, Google Play, Stitcher, TuneIn and all your favorite podcast players [A CLOUD GURU] Get The Cloudcast Alexa Skill [A CLOUD GURU] A Cloud Guru Membership - Start your free trial. Unlimited access to the best cloud training and new series to keep you up-to-date on all things AWS. [A CLOUD GURU] FREE access to AWS Certification Exam Prep Guide - At A Cloud Guru, the #1 question received from students is "I want to pass the AWS cert exam, so where do I start?" This course is your answer. [FREE] eBook from O'Reilly Show Notes: Topic 1 - It’s been a busy year for Cloudcast alumni in 2018 Microsoft acquires GitHub - 7.5B
 BonsaiAI acquired by Microsoft
 Pivotal IPO - $555M
 Evident.io acquired by Palo Alto - $300M
 CoreOS acquired by Red Hat - $250M
 Splunk acquires VictorOps - $120M
 Elastic (formerly ElasticSearch) - announced IPO plans
 Loggly acquired by Solarwinds Topic 2 - How would you handicap the public cloud market (leaders, laggards, emerging trends)? Gartner only has 6 companies in their IaaS Magic quadrant
 AWS keeps growing (apparently 30-35% of public cloud spending)
 Microsoft keeps acquiring
 Google is still TBD, but we’re going to GoogleNEXT in July
 Alibaba is growing and starting to hear about more US companies using AliCloud
 IBM and Oracle still seem like large Enterprise vendors Topic 3 - Brian’s involved with containers, Aaron’s involved with Storage and HCI and some cloud integration, what’s interesting in those areas? What are the biggest trends you’re seeing in the private cloud / data center market? Topic 4 - We’ve been trying to incorporate more AI and IoT into the shows this year. What have you learned so far, what has surprised you, where do you still have questions? Feedback? Email: show at thecloudcast dot net Twitter: @thecloudcastnet and @ServerlessCast

This week, Michael and Paul interview Sandy Dunn, CISO for Blue Cross of Idaho! In Tracking Security innovation, Splunk acquired VictorOps for $120M, Claroty raised $60 in Series B, Two techniques for helping employees change ingrained habits, and more on this episode of Business Security Weekly! Full Show Notes: https://wiki.securityweekly.com/BSWEpisode89   Visit https://www.securityweekly.com/bsw for all the latest episodes!   →Visit our website: https://www.securityweekly.com →Follow us on Twitter: https://www.twitter.com/securityweekly →Like us on Facebook: https://www.facebook.com/secweekly

This week, Michael and Paul interview Sandy Dunn, CISO for Blue Cross of Idaho! In Tracking Security innovation, Splunk acquired VictorOps for $120M, Claroty raised $60 in Series B, Two techniques for helping employees change ingrained habits, and more on this episode of Business Security Weekly! Full Show Notes: https://wiki.securityweekly.com/BSWEpisode89   Visit https://www.securityweekly.com/bsw for all the latest episodes!   →Visit our website: https://www.securityweekly.com →Follow us on Twitter: https://www.twitter.com/securityweekly →Like us on Facebook: https://www.facebook.com/secweekly

In Tracking Security Innovation, Splunk acquired VictorOps for $120M, Claroty raised $60 in Series B, "MIT's Mind-Blowing Solutions to the 9 Hardest Startup Problems", "Two Techniques for Helping Employees Change Ingrained Habits", and more! Full Show Notes: https://wiki.securityweekly.com/BSWEpisode89 Visit http://securityweekly.com/category/ssw for all the latest episodes!

In Tracking Security Innovation, Splunk acquired VictorOps for $120M, Claroty raised $60 in Series B, "MIT's Mind-Blowing Solutions to the 9 Hardest Startup Problems", "Two Techniques for Helping Employees Change Ingrained Habits", and more! Full Show Notes: https://wiki.securityweekly.com/BSWEpisode89 Visit http://securityweekly.com/category/ssw for all the latest episodes!

In this episode: Benjamin Edelen, CISO of the city of Boulder, is our feature interview this week. News from: Denver International Airport, VictorOps, Splunk, Apex Awards, Coalfire, LogRhythm, Red Canary, Regis, Colorado Christian University and a lot more! I got 99 problems but a ain't one We've got news! Denver's got an airport (and it's big). Denver's got a tech scene (and it's big). VictorOps sold to Splunk. CISO of the year nominations are open. Optiv hires a couple of C-levels. Coalfire, LogRhythm, and Red Canary have some news. And two local schools add security degrees. Support us on Patreon! Fun swag available - all proceeds will directly support the Colorado = Security infrastructure. Come join us on the new Colorado = Security Slack channel to meet old and new friends. Sign up for our mailing list on the main site to receive weekly updates - https://www.colorado-security.com/. If you have any questions or comments, or any organizations or events we should highlight, contact Alex and Robb at info@colorado-security.com Local security news: Join the Colorado = Security Slack channel The top U.S. airports compared to their international rankings Is Denver a New Kind of Tech Town? Positively. Boulder's VictorOps selling to San Francisco firm for $120 million CISO of the Year Nominations Open Optiv Security Names COO, CFO Coalfire - How I Found CVE-2018-8819: Out-of-Band (OOB) XXE in WebCTRL LogRhythm blog - Time to Reset Your Router? Understanding and Removing VPNFilter Malware Introducing the Next Chapter of Atomic Red Team Tests Regis adds cybersecurity undergraduate degree Colorado Christian University created a new Masters in Cyber Security Job Openings: Ping Identity - Site Reliability Engineer - Security Operations EDUCAUSE - Director of Cybersecurity Program KPMG - Manager, IT Security Risk Assessment Carbon Black - Threat Researcher - Reverse Engineer Tri-State Generation and Transmission Association  - Network Security Specialist Staples - Microsoft Cloud Security Consultant Guild Education - Security Engineer Aetna - Information Security - 3rd Party Risk Assessment Swimlane - Enterprise Sales Engineer - Security Operations Upcoming Events: This Week and Next: ISSA COS - June Meetings - 6/19-20 CSA - June Chapter Meeting - 6/19 ISSA Denver - June Happy Hour - 6/20 AI for GDPR Compliance: In Conversation with Darktrace - 6/21 ISSA COS - Mini Seminar - 6/23 NCC - Beyond Bitcoin: Cryptocurrency & Blockchain for Beginners - 6/26 SecureSet - Career Convos: Hilary Constable of Constable HR; Make your resume SHINE - 6/26 ISSA Denver - June Healthcare Special interest Group - 6/27 SecureSet - Expert Series: Bryan Becker - 6/28 SecureSet - Capture the Flag - 6/29 Other Notable Upcoming Events Colorado Springs - Cyber Security Training & Technology Forum (CSTTF) - 8/22 View our events page for a full list of upcoming events * Thanks to CJ Adams for our intro and exit! If you need any voiceover work, you can contact him here at carrrladams@gmail.com. Check out his other voice work here. * Intro and exit song: "The Language of Blame" by The Agrarians is licensed under CC BY 2.0

In the Enterprise News, Riverbed announced the latest release of Riverbed SteelCentral, Tufin advances automation capabilities with Tufin Orchestration Suite R18-1, ServiceNow announces new conversational bot, Splunk agrees to acquire VictorOps, and more on this episode of Enterprise Security Weekly! Full Show Notes: https://wiki.securityweekly.com/ES_Episode95 Visit http://securityweekly.com/esw for all the latest episodes!

In the Enterprise News, Riverbed announced the latest release of Riverbed SteelCentral, Tufin advances automation capabilities with Tufin Orchestration Suite R18-1, ServiceNow announces new conversational bot, Splunk agrees to acquire VictorOps, and more on this episode of Enterprise Security Weekly! Full Show Notes: https://wiki.securityweekly.com/ES_Episode95 Visit http://securityweekly.com/esw for all the latest episodes!

Alan Armstrong is founder and CEO of Eigenworks, a boutique strategy and research firm that services B2B software companies ranging from series-B startups through large public companies. Eigenworks currently employs 10 people and has demonstrated 35% CAGR for the past 5 years. Eigenworks clients include industry giants such as Oracle and Cisco, mid-size companies such as Blackbaud and ReturnPath, and rocket-ship startups including Gainsight and VictorOps. Alan is a regular contributor of articles and expertise to industry publications including Pragmatic Marketing, Gainsight's Pulse series, and the popular blog OnProductManagement, of which Alan is a co-founder. Alan speaks regularly at industry events, including Pulse (San Francisco 2015, 2016, 2017), TSIA (Las Vegas 2016), Strategy & Competitive Intelligence Professionals (Atlanta 2017), and Product Marketing Community (Toronto & San Francisco 2016, Boston 2017). Prior to founding Eigenworks, Alan held senior director and vice president roles in three startups and participated in three successful exits including Fortiva (to Proofpoint, 2008), Wily Technology ($400M to CA in 2006), and Canada's largest self-funded exit of Sitraka to Quest Software, where Alan was Director of New Products and Innovation. Alan's experience includes Vice President-level positions covering Product Management, Business Development, and Sales.

In which we interview a unicorn, FreeNAS 11.0 is out, show you how to run Nextcloud in a FreeBSD jail, and talk about the connection between oil changes and software patches. This episode was brought to you by Headlines FreeNAS 11.0 is Now Here (http://www.freenas.org/blog/freenas-11-0/) The FreeNAS blog informs us: After several FreeNAS Release Candidates, FreeNAS 11.0 was released today. This version brings new virtualization and object storage features to the World's Most Popular Open Source Storage Operating System. FreeNAS 11.0 adds bhyve virtual machines to its popular SAN/NAS, jails, and plugins, letting you use host web-scale VMs on your FreeNAS box. It also gives users S3-compatible object storage services, which turns your FreeNAS box into an S3-compatible server, letting you avoid reliance on the cloud. FreeNAS 11.0 also introduces the beta version of a new administration GUI. The new GUI is based on the popular Angular framework and the FreeNAS team expects the GUI to be themeable and feature complete by 11.1. The new GUI follows the same flow as the existing GUI, but looks better. For now, the FreeNAS team has released it in beta form to get input from the FreeNAS community. The new GUI, as well as the classic GUI, are selectable from the login screen. Also new in FreeNAS 11 is an Alert Service page which configures the system to send critical alerts from FreeNAS to other applications and services such as Slack, PagerDuty, AWS, Hipchat, InfluxDB, Mattermost, OpsGenie, and VictorOps. FreeNAS 11.0 has an improved Services menu that adds the ability to manage which services and applications are started at boot. The FreeNAS community is large and vibrant. We invite you to join us on the FreeNAS forum (https://forums.freenas.org/index.php) and the #freenas IRC channel on Freenode. To download FreeNAS and sign-up for the FreeNAS Newsletter, visit freenas.org/download (http://www.freenas.org/download/). Building an IPsec Gateway With OpenBSD (https://www.exoscale.ch/syslog/2017/06/26/building-an-ipsec-gateway-with-openbsd/) Pierre-Yves Ritschard wrote the following blog article: With private networks just released on Exoscale, there are now more options to implement secure access to Exoscale cloud infrastructure. While we still recommend the bastion approach, as detailed in this article (https://www.exoscale.ch/syslog/2016/01/15/secure-your-cloud-computing-architecture-with-a-bastion/), there are applications or systems which do not lend themselves well to working this way. In these cases, the next best thing is building IPsec gateways. IPsec is a protocol which works directly at layer 3. It uses its configuration to determine which network flows should be sent encrypted on the wire. Once IPsec is correctly configured, selected network flows are transparently encrypted and applications do not need to modify anything to benefit from secured traffic. In addition to encryption, IPSec also authenticates the end points, so you can be sure you are exchanging packets with a trusted host For the purposes of this article we will work under the following assumptions: We want a host to network setup, providing access to cloud-hosted infrastructure from a desktop environment. Only stock tooling should be used on desktop environment, no additional VPN client should be needed. In this case, to ensure no additional software is needed on the client, we will configure an L2TP/IPsec gateway. This article will use OpenBSD as the operating system to implement the gateway. While this choice may sound surprising, OpenBSD excels at building gateways of all sorts thanks to its simple configuration formats and inclusion of all necessary software and documentation to do so in the base system. The tutorial assumes you have setup a local network between the hosts in the cloud, and walks through the configuration of an OpenBSD host as a IPsec gateway On the OpenBSD host, all necessary software is already installed. We will configure the system, as well as pf, npppd, and ipsec + Configure L2TP + Configure IPsec + Configure NAT + Enabled services: ipsec isakmpd npppd The tutorial then walks through configuring a OS X client, but other desktops will be very similar *** Running Nextcloud in a jail on FreeBSD (https://ramsdenj.com/2017/06/05/nextcloud-in-a-jail-on-freebsd.html) I recently setup Nextcloud 12 inside a FreeBSD jail in order to allow me access to files i might need while at University. I figured this would be a optimal solution for files that I might need access to unexpectedly, on computers where I am not in complete control. My Nextcloud instance is externally accessible, and yet if someone were to get inside my Jail, I could rest easy knowing they still didn't have access to the rest of my host server. I chronicled the setup process including jail setup using iocage, https with Lets Encrypt, and full setup of the web stack. Nextcloud has a variety of features such as calendar synchronization, email, collaborative editing, and even video conferencing. I haven't had time to play with all these different offerings and have only utilized the file synchronization, but even if file sync is not needed, Nextcloud has many offerings that make it worth setting up. MariaDB, PHP 7.0, and Apache 2.4 To manage my jails I'm using iocage. In terms of jail managers it's a fairly new player in the game of jail management and is being very actively developed. It just had a full rewrite in Python, and while the code in the background might be different, the actual user interface has stayed the same. Iocage makes use of ZFS clones in order to create “base jails”, which allow for sharing of one set of system packages between multiple jails, reducing the amount of resources necessary. Alternatively, jails can be completely independent from each other; however, using a base jail makes it easier to update multiple jails as well. + pkg install iocage + sysrc iocageenable=YES + iocage fetch -r 11.0-RELEASE + iocage create tag="stratus" jailzfs=on vnet=off boot=on ip4_addr="sge0|172.20.0.100/32" -r 11.0-RELEASE + iocage start stratus + iocage console stratus I have chosen to provide storage to the Nextcloud Jail by mounting a dataset over NFS on my host box. This means my server can focus on serving Nextcloud and my storage box can focus on housing the data. The Nextcloud Jail is not even aware of this since the NFS Mount is simply mounted by the host server into the jail. The other benefit of this is the Nextcloud jail doesn't need to be able to see my storage server, nor the ability to mount the NFS share itself. Using a separate server for storage isn't necessary and if the storage for my Nextcloud server was being stored on the same server I would have created a ZFS dataset on the host and mounted it into the jail. Next I set up a dataset for the database and delegated it into the jail. Using a separate dataset allows me to specify certain properties that are better for a database, it also makes migration easier in case I ever need to move or backup the database. With most of the requirements in place it was time to start setting up Nextcloud. The requirements for Nextcloud include your basic web stack of a web server, database, and PHP. Also covers the setup of acme.sh for LetsEncrypt. This is now available as a package, and doesn't need to be manually fetched Install a few more packages, and do a bit of configuration, and you have a NextCloud server *** Historical: My first OpenBSD Hackathon (http://bad.network/historical-my-first-openbsd-hackathon.html) This is a blog post by our friend, and OpenBSD developer: Peter Hessler This is a story about encouragement. Every time I use the word "I", you should think "I as in me, not I as in the author". In 2003, I was invited to my first OpenBSD Hackathon. Way before I was into networking, I was porting software to my favourite OS. Specifically, I was porting games. On the first night most of the hackathon attendees end up at the bar for food and beer, and I'm sitting next to Theo de Raadt, the founder of OpenBSD. At some point during the evening, he's telling me about all of these "crazy" ideas he has about randomizing libraries, and protections that can be done in ld.so. (ld.so is the part of the OS that loads the libraries your program needs. It's, uh, kinda important.) Theo is encouraging me to help implement some of these ideas! At some point I tell Theo "I'm just a porter, I don't know C." Theo responds with "It isn't hard, I'll have Dale (Rahn) show you how ld.so works, and you can do it." I was hoping that all of this would be forgotten by the next day, but sure enough Dale comes by. "Hey, are you Peter? Theo wanted me to show you how ld.so works" Dale spends an hour or two showing me how it works, the code structure, and how to recover in case of failure. At first I had lots of failures. Then more failures. And even more failures. Once, I broke my machine so badly I had to reinstall it. I learned a lot about how an OS works during this. But, I eventually started doing changes without it breaking. And some even did what I wanted! By the end of the hackathon I had came up with a useful patch, that was committed as part of a larger change. I was a nobody. With some encouragement, enough liquid courage to override my imposter syndrome, and a few hours of mentoring, I'm now doing big projects. The next time you're sitting at a table with someone new to your field, ask yourself: how can you encourage them? You just might make the world better. Thank you Dale. And thank you Theo. Everyone has to start somewhere. One of the things that sets the BSDs apart from certain other open source operating systems, is the welcoming community, and the tradition of mentorship. Sure, someone else in the OpenBSD project could have done the bits that Peter did, likely a lot more quickly, but then OpenBSD wouldn't have gained a new committer. So, if you are interested in working on one of the BSDs, reach out, and we'll try to help you find a mentor. What part of the system do you want to work on? *** Interview - Dan McDonald - allcoms@gmail.com (mailto:allcoms@gmail.com) (danboid) News Roundup FreeBSD 11.1-RC1 Available (https://lists.freebsd.org/pipermail/freebsd-stable/2017-July/087340.html) 11.1-RC1 Installation images are available for: amd64, i386 powerpc, powerpc64 sparc64 armv6 BANANAPI, BEAGLEBONE, CUBIEBOARD, CUBIEBOARD2, CUBOX-HUMMINGBOARD, GUMSTIX, RPI-B, RPI2, PANDABOARD, WANDBOARD aarch64 (aka arm64), including the RPI3, Pine64, OverDrive 1000, and Cavium Server A summary of changes since BETA3 includes: Several build toolchain related fixes. A use-after-free in RPC client code has been corrected. The ntpd(8) leap-seconds file has been updated. Various VM subsystem fixes. The '_' character is now allowed in newfs(8) labels. A potential sleep while holding a mutex has been corrected in the sa(4) driver. A memory leak in an ioctl handler has been fixed in the ses(4) driver. Virtual Machine Disk Images are available for the amd64 and i386 architectures. Amazon EC2 AMI Images of FreeBSD/amd64 EC2 AMIs are available The freebsd-update(8) utility supports binary upgrades of amd64 and i386 systems running earlier FreeBSD releases. Systems running earlier FreeBSD releases can upgrade as follows: freebsd-update upgrade -r 11.1-RC1 During this process, freebsd-update(8) may ask the user to help by merging some configuration files or by confirming that the automatically performed merging was done correctly. freebsd-update install The system must be rebooted with the newly installed kernel before continuing. shutdown -r now After rebooting, freebsd-update needs to be run again to install the new userland components: freebsd-update install It is recommended to rebuild and install all applications if possible, especially if upgrading from an earlier FreeBSD release, for example, FreeBSD 10.x. Alternatively, the user can install misc/compat10x and other compatibility libraries, afterwards the system must be rebooted into the new userland: shutdown -r now Finally, after rebooting, freebsd-update needs to be run again to remove stale files: freebsd-update install Oil changes, safety recalls, and software patches (http://www.daemonology.net/blog/2017-06-14-oil-changes-safety-recalls-software-patches.html) Every few months I get an email from my local mechanic reminding me that it's time to get my car's oil changed. I generally ignore these emails; it costs time and money to get this done (I'm sure I could do it myself, but the time it would cost is worth more than the money it would save) and I drive little enough — about 2000 km/year — that I'm not too worried about the consequences of going for a bit longer than nominally advised between oil changes. I do get oil changes done... but typically once every 8-12 months, rather than the recommended 4-6 months. From what I've seen, I don't think I'm alone in taking a somewhat lackadaisical approach to routine oil changes. On the other hand, there's another type of notification which elicits more prompt attention: Safety recalls. There are two good reasons for this: First, whether for vehicles, food, or other products, the risk of ignoring a safety recall is not merely that the product will break, but rather that the product will be actively unsafe; and second, when there's a safety recall you don't have to pay for the replacement or fix — the cost is covered by the manufacturer. I started thinking about this distinction — and more specifically the difference in user behaviour — in the aftermath of the "WannaCry" malware. While WannaCry attracted widespread attention for its "ransomware" nature, the more concerning aspect of this incident is how it propagated: By exploiting a vulnerability in SMB for which Microsoft issued patches two months earlier. As someone who works in computer security, I find this horrifying — and I was particularly concerned when I heard that the NHS was postponing surgeries because they couldn't access patient records. Think about it: If the NHS couldn't access patient records due to WannaCry, it suggests WannaCry infiltrated systems used to access patient records — meaning that someone else exploiting the same vulnerabilities could have accessed those records. The SMB subsystem in Windows was not merely broken; until patches were applied, it was actively unsafe. I imagine that most people in my industry would agree that security patches should be treated in the same vein as safety recalls — unless you're certain that you're not affected, take care of them as a matter of urgency — but it seems that far more users instead treat security patches more like oil changes: something to be taken care of when convenient... or not at all, if not convenient. It's easy to say that such users are wrong; but as an industry it's time that we think about why they are wrong rather than merely blaming them for their problems. There are a few factors which I think are major contributors to this problem. First, the number of updates: When critical patches occur frequently enough to become routine, alarm fatigue sets in and people cease to give the attention updates deserve, even if on a conscious level they still recognize the importance of applying updates. Colin also talks about his time as the FreeBSD Security Officer, and the problems in ensuring the patches are correct and do not break the system when installed He also points out the problem of systems like Windows Update, the combines optional updates, and things like its license checking tool, in the same interface that delivers important updates. Or my recent machines, that gets constant popups about how some security updates will not be delivered because my processor is too new. My bank sends me special offers in the mail but phones if my credit card usage trips fraud alarms; this is the sort of distinction in intrusiveness we should see for different types of software updates Finally, I think there is a problem with the mental model most people have of computer security. Movies portray attackers as geniuses who can break into any system in minutes; journalists routinely warn people that "nobody is safe"; and insurance companies offer insurance against "cyberattacks" in much the same way as they offer insurance against tornados. Faced with this wall of misinformation, it's not surprising that people get confused between 400 pound hackers sitting on beds and actual advanced persistent threats. Yes, if the NSA wants to break into your computer, they can probably do it — but most attackers are not the NSA, just like most burglars are not Ethan Hunt. You lock your front door, not because you think it will protect you from the most determined thieves, but because it's an easy step which dramatically reduces your risk from opportunistic attack; but users don't see applying security updates as the equivalent of locking their front door when they leave home. SKIP grep, use AWK (http://blog.jpalardy.com/posts/skip-grep-use-awk/) This is a tip from Jonathan Palardy in a series of blog posts about awk. It is especially helpful for people who write a lot of shell scripts or are using a lot of pipes with awk and grep. Over the years, I've seen many people use this pattern (filter-map): $ [data is generated] | grep something | awk '{print $2}' but it can be shortened to: $ [data is generated] | awk '/something/ {print $2}' AWK can take a regular expression (the part between the slashes) and matches that to the input. Anything that matches is being passed to the print $2 action (to print the second column). Why would I do this? I can think of 4 reasons: *it's shorter to type *it spawns one less process *awk uses modern (read “Perl”) regular expressions, by default – like grep -E *it's ready to “augment” with more awk How about matching the inverse (search for patterns that do NOT match)? But “grep -v” is OK… Many people have pointed out that “grep -v” can be done more concisely with: $ [data is generated] | awk '! /something/' See if you have such combinations of grep piped to awk and fix those in your shell scripts. It saves you one process and makes your scripts much more readable. Also, check out the other intro links on the blog if you are new to awk. *** vim Adventures (https://vim-adventures.com) This website, created by Doron Linder, will playfully teach you how to use vim. Hit any key to get started and follow the instructions on the playing field by moving the cursor around. There is also a menu in the bottom left corner to save your game. Try it out, increase your vim-fu, and learn how to use a powerful text editor more efficiently. *** Beastie Bits Slides from PkgSrcCon (http://pkgsrc.org/pkgsrcCon/2017/talks.html) OpenBSD's doas adds systemd compat shim (http://marc.info/?l=openbsd-tech&m=149902196520920&w=2) Deadlock Empire -- “Each challenge below is a computer program of two or more threads. You take the role of the Scheduler - and a cunning one! Your objective is to exploit flaws in the programs to make them crash or otherwise malfunction.” (https://deadlockempire.github.io/) EuroBSDcon 2017 Travel Grant Application Now Open (https://www.freebsdfoundation.org/blog/eurobsdcon-2017-travel-grant-application-now-open/) Registration for vBSDCon is open (http://www.vbsdcon.com/) - Registration is only $100 if you register before July 31. Discount hotel rooms arranged at the Hyatt for only $100/night while supplies last. BSD Taiwan call for papers opens, closes July 31st (https://bsdtw.org/)Windows Application Versand *** Feedback/Questions Joseph - Server Monitoring (http://dpaste.com/2AM6C2H#wrap) Paulo - Updating Jails (http://dpaste.com/1Z4FBE2#wrap) Kevin - openvpn server (http://dpaste.com/2MNM9GJ#wrap) Todd - several questions (http://dpaste.com/17BVBJ3#wrap) ***

In this podcast Shane Hastie, InfoQ Lead Editor for Culture & Methods, spoke to Jason Hand of VictorOps about the DevOps culture, what ChatOps is and powerful post-mortems. Why listen to this podcast: - The misaligned incentives between development and operations in many organisations - The need to instil a sense of ownership across the whole delivery organisation where everyone takes responsibility for solving problems, rather than saying “that’s not my job” - There is no roadmap to change the culture of a company, because every company is different - In complex systems you can’t avoid failure, so make sure you can learn from it and respond rapidly More on this: Quick scan our curated show notes on InfoQ http://bit.ly/2qKmrPe You can also subscribe to the InfoQ newsletter to receive weekly updates on the hottest topics from professional software development. bit.ly/24x3IVq Subscribe: www.youtube.com/infoq Like InfoQ on Facebook: bit.ly/2jmlyG8 Follow on Twitter: twitter.com/InfoQ Follow on LinkedIn: www.linkedin.com/company/infoq Want to see extented shownotes? Check the landing page on InfoQ: http://bit.ly/2qKmrPe

Overview:   Jason Hand and I discuss the importance of moving away from a blame-oriented culture and towards a learning culture. Jason talks about the importance of understanding how cognitive biases influence decision-making and the need to understand this when conducting post mortems. Jason talks about balancing efficiency and thoroughness, and the importance of using blame-free post mortems as a means for learning. While Jason comes from a tech world, this talk has application to a variety of sectors, including high-risk industrial work. Jason Hand’s Biography: DevOps Evangelist at VictorOps, organizer of DevOpsDays - Rockies, author of the books O’Reilly’s “ChatOps: Managing Operations from Group Chat" as well as "ChatOps for Dummies”. Jason is a co-host of “Community Pulse” (a podcast on building community in tech), and organizer of a number of DevOps related events in the Denver/Boulder area. A frequent speaker at DevOps events around the country, Jason enjoys talking to audiences large and small on a variety of technical and non-technical subjects such as Modern Incident Management, Learning From Failure, Cognitive Bias, ChatOps, and building communities. Show Notes: Information Technology is no longer just a cost center and needs to be seen as a way for companies to innovate and become market leaders. Trying to innovate and experiencing failure can be an important way to learn. Post-Mortems are an important tool for learning and organizations should be transparent about learning and sharing that information about safety with others in the industry. Root cause analysis may uncover something that broke, and that can be fixed, but it may result in a lack of innovation in complex systems unless the organization tries to avoid a check the box mentality for a quick-fix and actually learn and improve the system. After negative events occur, when investigators use the word “why” that can sometimes imply “who” and it is important to avoid blame during post-mortem events, yet organizations often seek blame and accountability from a single individual. Accountability means to “give an account of what took place” or describe what too place. Accountability is not the same as responsibility. DevOps works to create high-functioning teams rather than silo’d teams. When silo’ing goes away organizations can become more innovative and other industries may learn a great deal from how DevOps is working to overcome silo’ing and a lack of cooperation towards system goals. Theory of Constraints may be used to help understand system goals and reduce silos in organizations. Sign up for our Newsletter here, or go to: www.v-speedsafety.com/email-subscription Resources: Books: The Phoenix Project by Gene Kim, George Spafford, and Kevin Behr, Thinking Fast and Slow by Daniel Kahneman, Black Box Thinking by Matthew Syed and The Cynefin Mini-Book-Info-Q by Greg Brougham Contact: Web: www.victorops.com www.jasonhand.com www.techbeacon.com Twitter: @jasonhand Keywords: Disruptive leadership podcast, safety podcast, leadership podcast, safety innovation podcast, high-reliability organizations podcast, human performance, human performance podcast, Crew Resource Management, Crew Resource Management Podcast, HRO podcast, DevOps, blame free post-mortems

How do you build a blameless post-mortem culture? And should you? Richard chats with Jason Hand from VictorOps about the blameless culture, which is a methodology embraced by the safest and most reliable organizations - think aircraft safety. Having everyone involved in an incident able to discuss everything they did and saw helps to get a clear picture of the truth. Without that information, it's very hard to make real improvements in our organizations. Jason talks about ChatOps as a strategy to get there, using tools like Slack to let people see the conversations going on and capture the critical information during an incident to address problems.

Marketing departments are often told, 'Don't use the term DevOps incorrectly!'' But exactly HOW should our marketing peers use that term? How can we effectively talk about DevOps in the marketing space? Shannon Smith from 10th Magnitude and Jason Hand from VictorOps joined us to discuss this heated topic.

Marketing departments are often told, 'Don't use the term DevOps incorrectly!'' But exactly HOW should our marketing peers use that term? How can we effectively talk about DevOps in the marketing space? Shannon Smith from 10th Magnitude and Jason Hand from VictorOps joined us to discuss this heated topic.

Angela Dugan of Polaris Solutions and Todd Vernon, CEO & co-founder of VictorOps, join the ADO crew to chat about the challenges of collaborating in a cross-functional team. How can tools help facilitate communication among developers, testers, and operations? What are some of the best practices to keep in mind? And, of course, there just might be some "horror stories" of communication gone horribly wrong.

Angela Dugan of Polaris Solutions and Todd Vernon, CEO & co-founder of VictorOps, join the ADO crew to chat about the challenges of collaborating in a cross-functional team. How can tools help facilitate communication among developers, testers, and operations? What are some of the best practices to keep in mind? And, of course, there just might be some "horror stories" of communication gone horribly wrong.