Splunk Steam for Real-Time Latte Analytics

As my fellow coffee lovers may know, Monday 1st October was International Coffee Day - and what better way to honour it than with a blog post on Splunking my coffee machine? You see, I drink a lot coffee, so thought that a little self control wouldn’t hurt! Can you count how many cups you drink a day? Even the ones you mindlessly grab from the coffee machine because you’re so deep into your work - or is that just me?

Good For Monitoring Java Beans

Sure - I don’t have a super expensive, latest model coffee machine, with retina display, running on Linux connected via WiFi. I have an “analog” coffee machine. No ethernet cable or wireless, so thankfully I don’t need to patch and update firmware (sorry, I’m a security geek after all!). However, it still makes awesome coffee, and the best thing about it is the built-in mill, ensuring a fresh cup every time!

Good For Monitoring Java Beans - Adapter!

I invested 37 Euro and bought an Equip Wireless Plug from Edimax, which features an energy meter and connects to my WiFi.

The decision for this particular adapter was due to someone’s review mentioning that it is possible to access and control the device via rest. Someone also posted handy script samples on github of how to do so.

I installed this into my Splunk instance at home using the Rest API Modular Input app and configured a new input, immediately pulling in events every five seconds, as instructed:

I think the same scenario of analog devices is often present in the Industry 4.0 arena - there are old machines that work, but you still need to get some “insight” out of them.

E-vente Analytics

Ok, the data is not strictly from my coffee machine, but from the power plug connected to it. Here’s the energy consumption parameter:

As you can see, I have extracted two value’s; Ampere and Watt. I retrieve those values now every five seconds - day and night!

MTTR - Mean Time To Ristretto

Next, I created a timechart and calculated the used Ampere, as there is a higher consumption if the machine is on and running. So you can see already a clear trend; five cups of coffee from the morning of May 2nd to lunch is a typical home office day. You can also see that on the next day I was apparently more alert, and reduced my coffee consumption.

My weekend coffee habits look a little healthier. However, many argue that coffee is healthy - so I’ll let you be the judge! Notice that the Ampere here is up from 200 to 400? This is because alongside my daily espresso habits, my wife always has a cappuccino - but she gets her weekday fix in the office rather than at home.

From Zero To Nero Downtime

Now the fun really starts when we use Splunk to answer key questions, and find interesting correlations. Here are some examples of what we could ask:

Got any more ideas (or coffee-related puns?), let me know! Enjoy your coffee today - cheers and happy Splunking!

Matthias

Related Articles

Sharing a Vision for Data-Driven Government - a New Splunk Whitepaper
Industries
1 Minute Read

Sharing a Vision for Data-Driven Government - a New Splunk Whitepaper

The amount of data that UK government will generate will increase significantly over the next few years, but it will present it with an opportunity to understand its citizens better and improve service and policy delivery. To do this the UK Government should consider taking a data-driven approach, by using data in new ways and overcoming some of the inherent blockers to using data more effectively.
Bridging the Cyber Confidence Gap: Digital Resilience in the Public Sector
Industries
2 Minute Read

Bridging the Cyber Confidence Gap: Digital Resilience in the Public Sector

Mick Baccio shares the findings of Splunk's report – conducted in collaboration with Foundry – on bridging the resilience gap across public and private sectors.
Expert Guidance for Fraud Detection and Prevention
Industries
2 Minute Read

Expert Guidance for Fraud Detection and Prevention

Splunker Beverly Smart explains why your organization must be prepared to defend against fraud across your technical infrastructure.