{
  "docId": "019dd923-5eff-723e-9be5-920f70c17c85",
  "docSlug": "c5cd5f7c0292fe57",
  "documentTitle": "2023 conf SEC1096C",
  "authorId": "Splunk",
  "authorName": "Splunk",
  "documentKindSlug": "consulting-deck",
  "documentKindLabel": "Consulting deck",
  "sourceTypeSlug": "strategy_consulting",
  "sourceTypeLabel": "Strategy consulting",
  "presentationDate": null,
  "orientation": "landscape",
  "aspectRatio": 1.778,
  "pageNumber": 13,
  "pageCount": 52,
  "prevPage": 12,
  "nextPage": 14,
  "slideType": "kpi_dashboard",
  "function": "diagnose",
  "density": "balanced",
  "nDataPoints": 15,
  "notes": "The slide is a screenshot of a Splunk dashboard interface.",
  "elementsJson": [
    "bar_chart_horizontal",
    "data_table",
    "bar_chart_vertical"
  ],
  "metadataConfidence": 1,
  "imagePath": null,
  "slideHref": "/slides/019dd923-5eff-723e-9be5-920f70c17c85/13",
  "deckHref": "/decks/019dd923-5eff-723e-9be5-920f70c17c85",
  "deckJsonHref": "/decks/019dd923-5eff-723e-9be5-920f70c17c85.json",
  "deckAnchorHref": "/decks/019dd923-5eff-723e-9be5-920f70c17c85#slide-13",
  "components": [
    {
      "bbox": {
        "h": 0.12,
        "w": 0.88,
        "x": 0.06,
        "y": 0.24
      },
      "kind": "chart",
      "text": "Search Status",
      "attrs": null,
      "subkind": "bar-horizontal",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "a3db3814-f765-4e38-9a5d-1330470905d6",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.22,
        "w": 0.88,
        "x": 0.06,
        "y": 0.66
      },
      "kind": "chart",
      "text": "Search Schedule Clustering - >5 Searches Scheduled at Same Time",
      "attrs": null,
      "subkind": "bar-vertical",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "a5485c6c-1ecb-4fa9-94fe-b7bce4c6571e",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": null,
      "kind": "metric",
      "text": "Search Status: 1925",
      "attrs": null,
      "subkind": "primary",
      "toolName": "Quantification",
      "toolSlug": "quantification",
      "confidence": null,
      "componentId": "019dd952-832b-73b4-83a4-09469db73eb9",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.25,
        "w": 0.88,
        "x": 0.06,
        "y": 0.38
      },
      "kind": "table",
      "text": "Long Running Searches",
      "attrs": null,
      "subkind": "data",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "2373c2a9-da37-4dd1-a856-2e1f50879a72",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.03,
        "w": 0.15,
        "x": 0.06,
        "y": 0.15
      },
      "kind": "title",
      "text": "RBA Health_Check",
      "attrs": null,
      "subkind": "headline",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "da8e32a7-a4f2-4c47-add5-6ce887dd447c",
      "frameworkName": null,
      "frameworkSlug": null
    }
  ],
  "metrics": [],
  "tools": [],
  "frameworks": [],
  "arcBeats": [
    {
      "to": 14,
      "from": 7,
      "beatId": "665ec750-d8bc-4530-bfb1-382979bbf648",
      "arcName": "The Consultant's Gambit",
      "arcSlug": "consultants-gambit",
      "beatName": "Problem & Complication",
      "beatSlug": "consultants-gambit-problem-complication",
      "evidence": "The deck presents a health check and diagnosis of the current Splunk environment.",
      "position": 1,
      "confidence": 0.8,
      "parentBeatName": "Complication",
      "parentBeatSlug": "complication"
    }
  ],
  "loops": [
    {
      "to": 14,
      "from": 12,
      "name": "Zoom In",
      "slug": "06-zoom-in",
      "bestFor": "Technical deep-dives, case studies, detailed analysis",
      "matchId": "d80423c1-c9e2-4909-b04f-417280fee98a",
      "evidence": "The deck zooms in on specific issues with the current environment, such as skipped/deferred searches and long running searches.",
      "position": 0,
      "objective": "What are the specific issues with the current Splunk environment?",
      "structure": "The Big Picture -> Key Area of Focus -> Specific Detail -> Implication",
      "confidence": 0.7,
      "description": "Start broad, then progressively focus on specific details that prove your point"
    }
  ],
  "imagePathAlt": null,
  "thumbSrc": null,
  "thumbSrcAlt": null,
  "locked": true
}