TechValidate Research on Splunk

Splunk Case Study

Capital Power Corporation Uses Splunk On-Call to Preserve Its Knowledge Base


This case study of Capital Power Corporation is based on an April 2022 survey of Splunk customers by TechValidate, a 3rd-party research service.

“Originally, we chose Splunk On-Call to improve post each mortem and preserve the knowledge base. It’s been valuable to be able to measure alert frequency through on-call reports.” — Richard Lim, Capital Power Engineer


Splunk On-Call’s capabilities to improve post each mortem and preserve the knowledge base of security activities and initiatives led Capital Power to evaluate and ultimately select Splunk.

Use Case

Capital Power’s Devops Engineering/Application Development, Site Reliability Engineering and IT Operations teams have used Splunk On-Call for 1-2 years for:

  • Rapid incident response
  • Incident analysis and reporting
  • Simplifying on-call scheduling
    The team has integrated its use of Splunk On-Call with solutions from Service Now and Elastic.


The value drivers and benefits Capital Power is measuring with Splunk On-Call include:

  • Alert/Event Reduction %
  • Mean Time to Acknowledge (MTTA)
  • Mean Time to Resolve (MTTR)

Capital Power finds the following Splunk On-Call features very valuable to the organization:

  • Scheduling
  • Alert Routing and Annotations
  • Integrations
  • Noise Suppression
  • Stakeholder Updates
  • Incident Dashboard
  • War Room UI
  • Mobile Interface
  • Alert Rules Engine
  • Escalation Policies
  • Reports
  • Machine Learning Driven “Similar Events”
  • ChatOps Integration
  • Timeline

Following are the percent ranges for each measured value category that Splunk On-Call provides for the organization currently:

  • Alert Noise Reduction Improvement: 60-79%
  • Mean Time to Acknowledge (MTTA) Improvement: 60-79%
  • Mean Time to Repair (MTTR) Improvement: 60-79%
  • Root Cause Analysis (RCA) Improvement: 60-79%
  • Recurring Incidents Improvement: 60-79%
  • IT Cost Reduction Improvement: 40-59%
  • Application Delivery Release Timeline Improvement: 40-59%

About This Data

This data was sourced directly from verified users of Splunk by TechValidate.

TechValidate verifies the identity and organizational affiliation of all participants that contribute to published research data. When research participants so desire, we also guarantee their anonymity so that they may share information honestly and freely.

More Research on Splunk