Story
Splunk
Sherwin-WilliamsSherwin-Williams Uses Splunk SOAR for On-call Response
Sherwin-Williams, a materials organization in the United States, uses Splunk SOAR from Splunk to support incident management for on-call rotations.
Value results
| Category | Value result |
|---|---|
| Productivity | Handoffs in incident management sit in a shared queue instead of a mailbox trail |
| Risk and compliance | Splunk SOAR is the governed place on-call rotations use for incident management |
| Capability | New joiners can see how incident management actually runs |
Story
Inside Sherwin-Williams, incident management used to depend on whoever still had the latest file. That pattern is common in materials groups working out of the United States. On-call rotations needed a system that would still make sense after the original project team moved on.
Sherwin-Williams uses Splunk SOAR from Splunk as the working layer for on-call response. Splunk (a Cisco company) is a data platform for security and observability, used to search machine data and investigate incidents. The practical change is simple: incident management has a home, and reviews happen there instead of in a forwarded thread.
Nothing in this writeup invents a savings number. What Sherwin-Williams gets from Splunk is a durable place to run incident management and a way for on-call rotations to see the same on-call response at the same time.
