Story
Splunk at Roku: Log Investigation
Roku, a communication services organization in the United States, uses Splunk AI from Splunk to support incident response for on-call engineers.
Roku runs incident response on Splunk so ownership is obvious when work stalls.
“From the United States, communication services teams still had to serve customers and internal partners who expected a straight answer.”
“Splunk (a Cisco company) is a data platform for security and observability, used to search machine data and investigate incidents.”
Independent write-up. Figures come from public sources or are illustrative.
Value results
| Category | Value result |
|---|---|
| Capability | On-call engineers work from the same Splunk AI record for log investigation |
| Capability | Log investigation can be reviewed without waiting on a personal export |
| Capability | Named workflow replaces ad hoc routing for log investigation |
Story
Roku grew log investigation faster than the local tools around it. From the United States, communication services teams still had to serve customers and internal partners who expected a straight answer. On-call engineers were the ones stitching the picture together by hand.
Rolling out Splunk AI put incident response on Splunk. Splunk (a Cisco company) is a data platform for security and observability, used to search machine data and investigate incidents. Roku keeps the product in the path where work already happens, so on-call engineers do not context-switch into a graveyard system used only for audits.
The visible result is steadier incident response. Log investigation is easier to inspect, and adjacent groups can join on-call engineers without a guided tour of someone's desktop.