It rolled out a combination of Cloud, Enterprise Security and the Splunk app for Stream, which captures real-time streaming wire data from a datacentre or cloud infrastructure and reduced the amount of load of Royal Caribbean Cruise Line's servers.
Performance and bandwidth
The information security team needed to ensure its new data mining and didn't impact the network for ship technologies, ranging from operational to entertainment purposes as well as customer wifi. Ensuring availability was a tricky task while operating on the seas.
But Ramirez says the network performance has yet to take a hit, despite the "tons" of DNS data it is 'splunking'.
Now the system since rolling out in Spring, Royal Caribbean Cruise Lines plans to spend next year advancing the platform. Real-time searching also gives the team data to hunt down activity through other types of logs too, which it will continue to use to ensure it is protected where possible.
Sign up for CIO Asia eNewsletters.