21-25 August 2017
University of Washington, Seattle
US/Pacific timezone

Experience with SPLUNK for archiving and visualization of operational data in ATLAS TDAQ system

22 Aug 2017, 16:00
The Commons (Alder Hall)

The Commons

Alder Hall

Poster Track 1: Computing Technology for Physics Research Poster Session


Andrei Kazarov (Petersburg Nuclear Physics Institut (RU))


The ATLAS Trigger and Data Acquisition (TDAQ) is a large, distributed
system composed of several thousands interconnected computers and tens
of thousands software processes (applications). Applications produce a
large amount of operational messages (at the order of O(10^4) messages
per second), which need to be reliably stored and delivered to TDAQ
operators in a realtime manner, and also be available for post-mortem
analysis by experts.

We have selected SPLUNK, a commercial solution by Splunk Inc, as a
all-in-one solution for storing different types of operational data in
an indexed database, and a web-based framework for searching and
presenting the indexed data and for rapid development of user-oriented
dashboards accessible in a web browser.

The paper describes capabilities of Splunk framework, use cases,
applications and web dashboards developed for facilitating the
browsing and searching of TDAQ operational data by TDAQ operators and

Primary author

Kevin Thomas Bauer (University of California Irvine (US))

Presentation materials

Peer reviewing