TechValidate Research on Splunk

Splunk Case Study

Ruvos, LLC Improved its MTTA by More Than 80 Percent Using Splunk On-Call


This case study of Ruvos, LLC is based on an April 2022 survey of Splunk customers by TechValidate, a 3rd-party research service.

“Splunk On-Call is an easy and convenient way to design and mange our on-call program. The escalations function ensures that we can automate the process of alerting other team members, or management depending on the severity. The solution just works well. " — Graham McLeod, Chief Information Officer, Ruvos, LLC


Two years ago, Ruvos tarted using Splunk On-Call to address challenges with:

  • Preventing / avoiding unplanned downtime
  • Improving Alert Noise
  • Routing alerts / incidents to the appropriate personnel in a timely manner
  • Automating scheduling, escalations and notifications

Use Case

The DevOps Engineering / Application Development, Site Reliability Engineering (SRE), IT Operations, and Security teams are currently using Splunk On-Call for rapid incident response and to simplify on-call scheduling.


Key value drivers and benefits Ruvos is measuring with Splunk On-Call include alert/event reduction percent and mean time to acknowledge (MTTA).
Ruvos found the following Splunk On-Call features most valuable:

  • Extremely Valuable: Scheduling and Escalation Policies
  • Very Valuable: Alert Routing and Annotations, Noise Suppression, Timeline
  • Valuable: Integrations, Stakeholder Updates, Incident Dashboard, Mobile Interface, Alert Rules Engine, Reports

Following are the percent ranges for each measured value category that Splunk On-Call provides for Ruvos currently:

  • Alert Noise Reduction Improvement: 60-79%
  • Mean Time to Acknowledge (MTTA) Improvement: 80% or greater
  • Mean Time to Repair (MTTR) Improvement: 21-39%
  • Root Cause Analysis (RCA) Improvement: 0-20%
  • Recurring Incidents Improvement: 60-79%
  • IT Cost Reduction Improvement: 21-39%
  • Application Delivery Release Timeline Improvement: 0-20%

About This Data

This data was sourced directly from verified users of Splunk by TechValidate.

TechValidate verifies the identity and organizational affiliation of all participants that contribute to published research data. When research participants so desire, we also guarantee their anonymity so that they may share information honestly and freely.

More Research on Splunk