Powering MWC Barcelona - Constructing a Unified SOC and NOC with Splunk in Report Time

[ad_1] Cell World Congress (MWC) Barcelona is among the most demanding environments for community and safety operations. With hundreds of attendees, unmanaged gadgets, and purposes interacting in actual time, operational visibility and menace detection should operate flawlessly.

For the 2nd 12 months, the Cisco staff leveraged Splunk, as well as to its different safety merchandise, to ship a unified Safety Operations Heart (SOC) and Community Operations Heart (NOC) expertise. Collectively, we used Splunk because the central information platform and integrating telemetry throughout a broad set of Cisco applied sciences.

What made this deployment notably notable was not simply the breadth of integrations, however the velocity and adaptability with which we operationalized the setting.

Folks getting the Cisco sales space in preparation for Cell World Congress 2026

The Structure: A Unified Operations Platform

On the core of the deployment was Splunk Cloud, appearing as the one pane of glass for each SOC and NOC workflows.

We ingested information from a number of Cisco platforms, together with:

The SOC and NOC space at Cell World Congress 2026

This structure allowed us to converge historically siloed operational domains right into a single analytics layer, enabling sooner correlation between community occasions and safety incidents.

Clockwise from the higher left quadrant: Firepower in Safety Cloud Management, Splunk Cloud dashboard for MWC, Splunk Enterprise Safety Mission Management and Cisco XDR.

Constructing NOC Dashboards in an Afternoon

One of the vital impactful outcomes was how shortly we have been in a position to ship operational visibility following varied requests from different groups current on the occasion.

Utilizing Splunk’s information platform and visualization capabilities, we have been in a position to construct a totally useful NOC dashboard in only a few hours. The dashboard supplied:

Actual-time community utilization and availability

Consumer connectivity metrics throughout wi-fi and wired environments

Software utilization indicators

As a result of all telemetry was collected inside Splunk, creating significant dashboards required minimal transformation work. This highlights a key benefit of utilizing a unified information platform: as soon as ingestion is solved, insights can observe shortly.

One of many dashboards constructed utilizing Splunk to trace Cisco Areas customers throughout the venue.

Bridging SOC and NOC: From Visibility to Context

Historically, SOC and NOC groups function in parallel, usually utilizing separate instruments and datasets. At MWC, we deliberately broke down that barrier.

By leveraging Splunk because the widespread platform:

NOC occasions (e.g., latency spikes, utilization developments) could possibly be correlated with

SOC alerts (e.g., anomalous visitors patterns, menace detections)

This convergence enabled sooner root trigger evaluation and lowered imply time to decision (MTTR), notably in situations the place efficiency points or visitors anomalies had potential safety implications.

A First: Deploying the Cisco 6160 Firewall in a Public Occasion

A standout side of this deployment was using the Cisco Safe Firewall 6160—marking its first deployment in a public occasion setting.

Bringing this information into Splunk required a little bit of engineering:

Information Pipeline Design

Due to the dimensions and efficiency traits of the firewall, we carried out a structured ingestion pipeline:

RSYSLOG Server

Acted because the preliminary log aggregator supply for the firewall

Dealt with high-throughput syslog ingestion from the 6160

Offered buffering and normalization capabilities

Saved information on the file system, offering one other layer of redundancy

Splunk Heavy Forwarder (HF)

Consumed logs from information produced by RSYSLOG

Utilized parsing, filtering, and metadata enrichment

Forwarded processed information securely to Splunk Cloud utilizing the S2S protocol

Splunk Cloud

Centralized indexing and analytics

Enabled each SOC and NOC use circumstances

The next diagram illustrates the ingestion pipeline used to reliably transport high-volume firewall telemetry into Splunk Cloud:

Determine: Firewall telemetry ingestion pipeline used at MWC 2026, displaying the movement from Cisco FTD 6160 by RSYSLOG and Splunk Heavy Forwarder into Splunk Cloud for centralized SOC and NOC analytics

Why This Method Labored

Scalability & Resiliency: RSYSLOG absorbed burst visitors with out dropping occasions and created an area copy of log information

Flexibility: The Heavy Forwarder allowed us to regulate parsing/filtering earlier than ingestion, ought to we have to

Cloud Integration: Clear separation between on-prem information assortment and cloud analytics

This pipeline ensured dependable ingestion of high-volume firewall telemetry whereas sustaining efficiency and information integrity.

Classes Discovered

A couple of key takeaways from the deployment:

Unification accelerates operations Bringing SOC and NOC information right into a single platform improves operations and makes new insights attainable

Information onboarding is the toughest—and most vital—step As soon as information is flowing and normalized, constructing dashboards and detections turns into considerably simpler.

Edge engineering nonetheless issues in cloud-first architectures Parts like RSYSLOG and Heavy Forwarders stay important for dealing with real-world information ingestion challenges.

Pace is achievable with the best abstractions Constructing a production-grade NOC dashboard in hours—not days—is lifelike when the platform is designed for it.

Take a look at the classes realized from the Occasion SOCs we deploy around the globe, with the white paper and newest blogs.

We’d love to listen to what you suppose! Ask a query and keep linked with Cisco Safety on social media.

Cisco Safety Social Media

LinkedInFacebookInstagram

[ad_2] Source link

Powering MWC Barcelona – Constructing a Unified SOC and NOC with Splunk in Report Time

‘Your photographs will likely be deleted’: Apple customers warned over ‘nasty’ iCloud storage rip-off | Scams

‘A home of playing cards’: how did Wi-fi competition get it so incorrect on Kanye West? | Kanye West

Tories would reinstate two-child profit cap to fund defence, says Badenoch | Conservatives

greater

Related Posts

‘Your photographs will likely be deleted’: Apple customers warned over ‘nasty’ iCloud storage rip-off | Scams

‘A home of playing cards’: how did Wi-fi competition get it so incorrect on Kanye West? | Kanye West

Tories would reinstate two-child profit cap to fund defence, says Badenoch | Conservatives

‘Informal with out being sloppy’: why flannel shirts are making a comeback | Style

‘It has your identify on it, however I don’t assume it’s you’: how AI is impersonating musicians on Spotify | AI (synthetic intelligence)

Employees at LA stadium threaten World Cup strike amid anger over ICE | US information

Crypto ATM Large Discloses $3.7 Million Bitcoin Theft Following Cyberattack – Crypto Information Bitcoin Information

Up First briefing: U.S.-Iran ceasefire; Teen beginning charges; Invoice Gates : NPR

Recommended Stories

OpenAI pulls out of landmark £31bn UK funding package deal | OpenAI

Cannes Pageant guarantees escapism in Hollywood-lite version

Ghana’s Crypto Push Begins As 11 Firms Enter SEC Sandbox

Popular Stories

Why did school graduates activate capitalism?

Purchase bread within the night, hit the gross sales on a Tuesday: retail staff’ prime tricks to lower your buying invoice | Life and magnificence

France’s public prosecutor drops medication probe into far-left MEP

Trump Rips Proper-Leaning Figures Opposing Iran Battle

Almodóvar, Travolta and Bardem lead 2026 Cannes lineup – arts24

Categories

Site Map

Recent Posts

Welcome Back!

Create New Account!

Retrieve your password

Add New Playlist

Are you sure want to unlock this post?

Are you sure want to cancel subscription?