Enterprise Observability Platform

Overview

Integrated 60 enterprise applications into Splunk IT Service Intelligence at Ally Financial, fundamentally transforming how IT Operations monitored, predicted, and responded to system health issues.

Challenge

IT Operations lacked unified visibility into system health across the bank's critical application portfolio. Incident management was reactive — teams learned about outages from end users rather than monitoring systems. There was no centralized way to correlate issues across applications or predict failures before they impacted customers.

Approach

Mapped 60 key enterprise applications into Splunk ITSI with defined KPI thresholds and alerting rules. Managed change processes for supporting Oracle Database upgrades in a multi-node cluster environment. Built dashboards and reporting to measure project success.

• Identified and onboarded 60 critical applications into Splunk ITSI
• Defined KPIs and thresholds for proactive alerting on system health
• Oversaw change management for Oracle Database cluster upgrades
• Built PowerBI dashboards to track success metrics and reconcile data across repositories
• Analyzed ServiceNow data to illustrate project impact

Key Results

• Transformed IT Ops from reactive firefighting to proactive monitoring
• Enabled predictive alerting to prevent customer-facing outages
• Data-driven project success reporting with measurable KPIs
• High redundancy maintained through Oracle cluster upgrade management

Technical Details

The Splunk ITSI integration required mapping application dependencies, defining service-level KPIs, and configuring correlation searches for cross-application issue detection. PowerBI was used with Merge Query to reconcile data across multiple repositories.