Hyperledger Foundation Security, 1 Dec 2021

Previous Meeting

Next Meeting

⏯

youtube image

►

From YouTube: Hyperledger In-depth: An hour with Splunk: Hyperledger Fabric Security Monitoring

Description

Security monitoring of Hyperledger Fabric networks requires ingesting and aggregating ledger, log, and metric data from many sources. It can be a challenge to correlate this data with system and network data to alert on indicators of suspicious behavior. Splunk, a Hyperledger member company, will discuss how to collect and act on this data to minimize downtime and reduce the meantime to detect and respond to incidents. Learn about the current Hyperledger Fabric threat landscape and see a real-world example of how to detect a Denial of Service attack.

----
Hyperledger – Open Source Blockchain Technologies

Hyperledger is an open source community focused on developing a suite of stable frameworks, tools and libraries for enterprise-grade blockchain deployments.
It serves as a neutral home for various distributed ledger frameworks including Hyperledger Besu, Fabric, Sawtooth, Indy, as well as tools like Hyperledger Avalon, Cactus and libraries like Hyperledger Aries, Ursa. Learn more about Hyperledger projects: https://www.hyperledger.org/use

Case Studies: https://www.hyperledger.org/learn/case-studies
Training & Certification: https://www.hyperledger.org/learn/training
Tutorials: https://www.hyperledger.org/use/tutorials
Webinars: https://www.hyperledger.org/learn/webinars
Events: https://www.hyperledger.org/events
Vendor Directory: https://www.hyperledger.org/use/vendor-directory

Subscribe to the Hyperledger Newsletter: https://www.hyperledger.org/newsletter

Follow-us on Twitter @Hyperledger

Learn about Hyperledger Membership: https://www.hyperledger.org/about/join

#Hyperledger #Blockchain

A

All right, wonderful, uh please note everyone that we are recording the session and we're also live streaming so say hello to the live stream as we go there and igor will put that onto the chat and feel free to share it on social.

A

If you want others to join us today as well, uh so welcome everyone good morning, good afternoon and good evening, depending on where you are zooming in from today for our final 2021 hyperledger in-depth hour with members uh webinar um and today I am happy to have chris chris cordy, who is a software engineer at splunk? Join us splunk is a monitoring and analyzing machine generated data company and chris will provide you an overview of splunk as well as his role there and then uh go into the discussion for today.

A

So before we get started a couple of things uh housekeeping that I'd like to do. First, um any of you who have not been to any of our hyper ledger: community, webinars or meetings all are welcome in our community and we are committed to creating a safe and welcoming community for all.

A

So please adhere to the standards of the hyperledger code of content, which is on our website, and if you have any questions, please let me know ultimately be good to one another and let's be productive and constructive with one another, a couple other housekeeping rules, just like any other hyperledger community meeting.

A

All our meetings are under our antitrust policy, and that means that, if participation by industry competitors, we want to make sure that all activities are conducted under that policy. Please review the policy if you have any questions on our website and during this webinar. If you have any questions, please direct message me and I'll be happy to assist you as a reminder.

A

Once again, the webinar is being recorded and they'll be available after the fact, and you can watch any of our webinars in our hyperledger webinar library, as well as on the youtube channel, where we have hundreds. Sometimes it seems a week, presentations from our special interest groups, our working groups and our meetup community, which continues to grow. The slides will be available for download after the presentation. You'll get an email from zoom directly with some links to that as well.

A

So um our goal is to have these as interactive as possible. So I'd like to take you through three ways that you can communicate with us during the session number. One is if you're familiar with the raise hand feature in zoom, you can go ahead and raise your hand when it when we open up for questions and answers, and we will go ahead and unmute you and you can ask your question via uh voice.

A

um You can also use the ask questions feature in webinar in the zoom webinar, so click on the q a and ask your question there um and chris and I will get to those when we open up for the q, a uh as as appropriate um and last but not least, uh feel free to talk and comment uh during the session in the chat once once again, please be respectful of others, um and um we would be happy to address any of those. And you know if you want to voice chat.

A

We can as well so once again this webinar is for you. We want to make sure that you get the best out of it, so without any further ado, um I'd like to pass this over to chris cordy who's, as I said before, software engineer at splunk and one of our hyperledger fabric experts in the field so chris over to you I'll, go ahead and stop sharing and you can share your slides. Please.

A

Wonderful yep, we could see them.

B

Awesome so thank you for the introduction. I'm gonna, I'm chris cordy and I'm gonna talk about how you can secure your hyperledger fabric deployments using spawn gap for fabric um which helps you monitor all the security and infrastructure events happening on your hyperledger network, okay, so yep. This is me. um I look a little bit different right now. I guess um so.

B

I'm a software engineer on splunk's blockchain team um and there I work on a few of our integrations that enable you to pull data from different blockchains like ethereum or hyperledger fabric, so in particular, work on smart connect for ethereum and small connector fabric, and I also am very involved in adding the features for detecting different security events happening on those networks um prior to working at splunk. I worked at san, diego national labs, where I was a cyber security researcher, so I've been interested in service, career research and blockchains for a long time.

B

So why is splunk watching, um for those who aren't familiar? Splunk is a tool that allows you to turn data into doing. There's tons of machine generated data created by organizations all different endpoints network devices, and it's hard to make sense of all this data.

B

So splunk allows you to take all that data and correlate based on time between all these different sources to be able to make intelligent decisions for your business, so um in particular, um for blockchain blockchains generate tons of data. Blockchains are also often complex and organizations are using. Blockchains often have a lot of other uh a lot of other infrastructure that they want to monitor as well and they're, really interested in monitoring the interactions between their traditional enterprise infrastructure and blockchain infrastructure.

B

So splunk can help you get visibility between all the different components. In your blockchain deployments.

B

We support many different blockchain technologies, and so you can take any sort of data source and throw into swag and be able to make intelligent decisions.

B

Cool, so just as an overview we'll be talking about today, hyperledger fabric, um I'm sure everyone here is somewhat familiar with uh it's designed to enable secure collaboration between multiple organizations with limited trust between them.

B

So notably hyperledger fabric has a slightly different security model than public blockchains like public permissionless blockchains like bitcoin or other cryptocurrencies hyperledger fabric, it's permissioned, so all the parties should be known and they can be access controlled.

B

So these security improvements uh can make it in some ways, make it easier to deploy secure, to make secure deployments and to trust that your network will be operating correctly and reducing your risk of attack. um But you still need to make sure you're carefully configuring your network and monitoring it to make sure that no attacks are happening.

B

So we're going to review some different types of threats, then some different types of threats that hyperledger fabric networks face and discuss how to mitigate them.

B

Okay, so first, it's always good to think about what assets you're trying to protect.

B

Obviously, data would be very important to protect the intellectual property or other sensitive data um hardware and software or applications which you know. It's very similar to data make sure that your software is running correctly and isn't being manipulated.

B

So, as mentioned earlier, hyperledger fabric is a permission blockchain, so its threats can differ from popular permissionless chains.

B

Still, some attacks are common to all distributed systems like metal, service or consensus manipulation, other attacks, target specific components in a high related fabric network, such as a membership service provider.

B

So for the first threat, um we'll look at denial, service, denial, service attacks, disrupt a network's availability and any distributed system is vulnerable to some extent. At least many different attacks can also cause denial service, and it can be difficult to proactively prevent for mitigation. It's good to be collecting performance, metric metrics such as transaction throughput and latency, to help detect if an attack is happening early on.

B

Consensus manipulation is another risk on a hyperledger fabric network, um so hyperledger fabric doesn't quite have the risk of 51 attacks um in the same way that bitcoin might um because it's permissionless still. There are attacks on network consensus that you can do including denial service and transaction reordering attacks.

B

So we want to make sure that the consensus component seems to be acting correctly in our hyperledger fabric deployment and a way that we can try to make sure that's happening. Is we can log some threat indicators like leadership, elections and transaction latencies, to speed up detection of any malicious behavior?

B

Basically, we want to make sure that the consensus elections and decisions aren't being hampered in some way by one of the parties.

B

Another threat is msp compromise, so in hyperledger fabric, there's a membership service provider or the msp, and the msp is able to modify access control to the network and if it's malicious, it can deny service to parties and perform civil attacks, which is not good, so the msp.

B

So the atmosphere can be compromised by rogue insider or through private key theft, which are generally going to be pretty difficult to detect until after exploitation happens. So to mitigate this threat. You're going to want to follow key management, access, control, best practices, don't share, keys, um make sure all accesses are logged and then also you're. Gonna want to log an alert on your msp actions, such as certificate creation and relocation.

B

And then another threat is smart contract exploitation or chain code exploitation. So the risk in hyperledger fabric for smart contract exploits is that business logic can be compromised, and so it can network performance again.

B

We're not worried necessarily about uh lots of money, or it's not gonna, be very obvious that lots of money was stolen, like it might be in cryptocurrencies, but we still wanna make sure our business logic is running correctly and that our services aren't gonna be down.

B

So in order, in addition to just smart contracts, are often written by people and people like to make mistakes when they program, uh including me.

B

So in addition to some of the ordinary logic blogs you might have, you can also have errors resulting from trying to handle concurrency or non-determinism, which can be difficult so mitigations for this include, like all other programs, smart contracts should be designed with security in mind and at the at the onset, smart contract analysis tools like the hyperledger lab chain code analyzer can help can help scan for vulnerabilities before you deploy your smart contract. So you can proactively know that you're not putting out a vulnerable contract.

B

It's also recommended to request an external security audit and then, finally, like all the other threats, monitoring is key here. You should monitor performance and usage of your smart contract to detect any anomalous behavior.

B

So to distill this a little bit here are some of the key data sources for all the threats we just talked about so for denial service. We have transaction throughput, latency blacklinc, and the number of senders, open connections.

B

I'm not going to read this whole table, but uh take a moment to look at it.

B

Notably. We see that there are different data sources that we need to grab and to be able to correlate this name. So we have block headers blocks, you know metrics and logs and any results from a vulnerability scanner scanner.

B

Additionally, there are other threats that I didn't talk about, that we potentially want to be monitoring for um on the left. We see a list of even more threats and we see all the different data sources that we might want to collect from um knew from the categories before we see we're going to want to bring in some threat intelligence information uh peer peer and network information.

B

um Maybe we want to call some apis on the node and collect some client or front-end information, so there's lots of data coming from off-chain and on chain and from lots of different places and this data can.

B

These are many different types of data. They look different, so it can be difficult to try to make a correlation, especially if you don't know what the data would look like ahead of time.

B

So that's why we have this data everything platform where you can take all of your logs metrics traces and lighter data and throw it into splunk and be able to make informed decisions uh for your I.t security and observability of your of your networks.

B

So how do we do this? So, in particular for hyperledger fabric? We have the splunk app for hybrid electric power.

B

It lets you get visibility into what's happening on your network, so you can monitor troubleshoot, investigate and take action on your hyperledger fabric, components across organizations in different cloud environments and crucial. This crucially allows you to reduce your immune system recovery, because now you have all this data in one place and then now, if you're, trying to get the production faster.

B

Well, it's a lot easier to see, what's going on, understand, what's happening with your development changes and then monitor whenever you make changes what the effects are, so this app can be found on swagrace and it is the app is also on github and you can look at it. uh The link is accessible through the smart face page.

B

Cool so now, how do we get started with this function fabric? We can easily ingest all these different data types by using the following tools. So we have the connector splunk connect for hyperledger fabric to grab, ledger and metric data from the deployment.

B

um As an example, we can use a select, docker, login driver or spot connect for kubernetes to send container logs to splunk and then finally, the splunk app for hyperledger fabric is what allows you to visualize this data in splunk and it has example, dashboards for infrastructure, transaction analysis and security.

B

So if you go to this github page, then you can see some example networks that you can run in docker compose to get started.

B

Cool, so if we were to have a very simple bare bones network, we we might have a somewhat similar configuration to this. um We have an organization that has two peers.

B

A

B

um And then we have a collector here that grabs metrics from fabric and the containers.

B

We can use font connect for kubernetes to grab container logs and we can use fabric logger this one connector to grab fabric events and block data, and we can throw that all into splunk.

B

So if we were to do that and then take a look at what the security monitoring dashboard looks like we see, we see the following: metrics we see transaction latency, uh throughput, remember unique senders and then a few graphs of transaction count, number of grpc connections and number of tls connections with orders.

B

We can also see some config updates consensus, leader changes and whether any blocks have been orphaned, which meaning here is there any block number that was.

B

Is there any block that had a different hash for the same number on the same channel, which would be very bad.

B

So we can see that we have denial service indicators and our consensus, manipulation indicators here.

B

So, let's see an example of what this data would look like if the denial of service attack were to happen.

B

So say we have a scenario where an authorized user has their keys compromised. The user begins spamming the network with transactions.

B

What would we expect to see? So? We should probably pay attention to the transaction, latency, throughput and number of open connections, so in order to get a baseline, it's like a normal case where a single client is sending 10 transactions per second.

B

So this is our baseline measurement and, in the normal case, single client sending 10 transactions per. Second, we see the following graphs. You see, transaction latency is fairly small under 200 milliseconds. um We have the throughput. We were hoping for 10 transactions per second, we see a nice constant slope here and for a transaction count over time and we see that net grpc connections open by node is staying fairly. Small, with no grpc connections exceeding eight.

B

So now, let's look at an adversary scenario.

B

If we have another client who tries to open up a thousand connections at once, and it's performing one query per minute and then we would expect to see a transaction latency starts to increase per second decrease and the number of open connections increases.

B

Basically, we have a client that is trying to stop as many connections as possible and not closing them, which is going to be exhausting number of open connections available, as well as exhausting cpu cycles, on whichever pier is connecting to.

B

So we see this with some adversary. That's what the results of that would look like. We see in transaction latency that the latency is starting to increase from around 180 milliseconds earlier see. Transactions per second starts to decline. um You see a bend in the transaction count over time graph, and you see that uh the number open connections starts to balloon.

B

So at this point it's difficult to determine: do people really like to use our service? um Do we just misconfigure something, or is someone actively trying to attack our network.

B

So we can drill down on the errors to try to figure out to get a better idea of what's going on, and if we do that, we can see that these error messages are caused by tls handshakes and io. Timeouts.

B

And because we saw a large number open connections, we can ask splunk to uh tell us what does the distribution of these grpc messages message subjects?

B

What does that look like, and in this very simple case we can search all the grpc messages, peer subjects and group them by subject and count, and when we do this, we see that one subject is responsible for the vast majority of these counts.

B

So because of that, we might be inclined to think that this certificate is compromised or that something is misconfigured and should be investigated. Further.

B

So now let me see if I can show what this looks like on a dashboard.

B

Cool so now I want to show this on an actual dashboard, so this is what it looks like when you first start the app um you have all these different dashboards to choose from and as a warning. This is a splunk instance where the denial of service attack is currently happening, so we might see some weird results here.

B

So if you clicked on the network, architecture and channels, tab.

B

B

So it's going a little bit slower than uh it would otherwise.

B

Sorry about this, let me uh let me close the cuties.

A

Okay, the demo guides always get us. Yes,.

B

I know all right.

B

Okay, so that's fine! For now um there are other screenshots that show this, um but we can see the number of hosts containers appears on the network. This gets a very holistic view of what the channel of what the network looks like.

B

Okay, so actually this is that dashboard right now. Sorry about that, so you can see the number of, however, hosts docker containers franchise appears couchdb instances running. It gives you a very holistic idea of what this network looks like.

B

And then we can go to the infrastructure, health and monitoring tab.

B

Here we go here, we can get some system metrics and some fabric metrics.

B

So if we see these errors, we can drill down on them and start showing earlier, and we can see what some of these error messages look like, and we see lots of. I o timeouts and connections reset up here and we see transactions per second is not close to 10 and transaction. Latency is also significantly about 200 milliseconds, okay,.

B

And then, if we were trying to drill down a little bit more, um if this were a security issue, um what do some of these security threat indicators? Look like. We go to now service indicators, and we see that the situation is just getting worse. um Transaction latency is increasing, even more transactions per second is now under one.

B

Yeah very uh uh we're seeing a significant bend in this level. These transactions count over time. uh Net grpc connections is in the thousands, um but we don't see any consensus, manipulation indicators firing right now, just the denial service ones, okay. So, finally, if we wanted to see what are the sources of all these transactions, we have.

B

The sources here and we can see that this user is responsible for most of these transactions and I'm sure, if I drill down a little bit more recently, we would see that this is actually more than 90 of the transactions.

B

So we would probably want to look into uh this certificate, uh this user and see if that has been compromised or if this is expected, behavior from here. Okay, so I think.

B

I think that is all I wanted to show on these dashboards right now, but people can feel free to ask for their questions um and then for the last couple of slides here.

B

So yeah we showed how you can drill down on some of these errors, how you can get a holistic view of the infrastructure and then also the security dashboard, to see these particular indicators which ones are firing.

B

But then what can you do from there further? So once you identify, you should do a little bit of triaging to identify a little bit more narrowly where the.

A

B

Might be um you can integrate this information with other tools like splunk's, apm or on-call, to get your real-time observability metrics and then quickly dispatch alerts to staff whenever there is a service outage that they need to look at splunk enterprise security allows you to enrich and prioritize the different notables or security events that we're seeing based on risk.

B

So those I o timeouts that we saw.

B

Can be given a wait and whenever those happen or if some threshold of them happen, that can be seen as more risky and we can act on that and then finally, splunk soar lets you automate parts of the incident response process.

B

If you notice some a certificate or some user seems to be compromised, then you can start taking automated actions to remediate that such as uh changing firewall rules to prevent access and for an example of who is using spawncap for hyperledger fabric. We have this smp smp has a case study with us and it's published on the hyperledger website and they're, using that to make sure that their data is not.

B

They want to use hyperledger fabric to make sure that their data is not being tampered with and then splunk helps them get visibility as they're trying to build on top of that and to have the confidence that's working correctly.

B

Okay and that's all I had for slides, um you can go to splunk dlt.com. If you want to learn more about all the different splunk apps, we have and integrations we have, and at this point, if anyone has any questions, please feel free to ask.

A

Okay, everyone and just as a reminder- and I just put into the chat as well, there's three different ways that you can answer- ask your questions of chris.

A

You can raise your hand if you want to do a voice, call we'd, love to hear from you and it's always great to or even make a comment if you just have a comment or you're working on a project that you want to share some information with that, you think is relevant to today's discussion. Please go ahead and raise your hand and we'll unmute you.

A

You can also ask any questions that you might have via the q, a so just click on the q, a in the toolbar and go ahead and ask your question and last but not least, feel free to use the chat as well. If you want to make comments or ask any questions as well, so open it opening it up for any questions or comments that the audience might have today,.

B

Thank you. Everyone for bearing with my demo also.

A

No, it was great that was great um chris. I have a question uh for you. You know specifically about um the the use cases, the use case that you mentioned the case study that you mentioned um and, and maybe I don't know melanie you're you're on the line as well, and maybe you can address this um to talk a little bit about you know where um s p, global as um as their you know, their network. um Some of the benefits that they've seen in using um splunk.

B

Sure yeah um so yeah, potentially uh you can answer us expand on this. A little bit more but uh essentially uh data tampering was, is a very large threat that organizations face, um and so that's a motivation for lots of organizations to want to use blockchains to help secure their data, especially when they're working with other organizations that they might not trust too much.

B

um So they have so as a team, like other organizations, that's interested in using blockchain for this data integrity problem, and essentially it can be difficult, because these are newer technologies to really understand.

B

What's going on, the tools aren't quite as mature as they are for regular software development stacks, and so it's very helpful for them to be able to easily have visibility into what's going on and with their data to be able to see the logs and metrics for both the fabric network and the rest of their network and correlate between them and then also to actually see the chain code.

B

Events happening was also helpful, so basically, uh visibility and being able to understand what's actually going on with your network, but yeah melanie uh from l, feel free to.

A

Chris, you did an amazing job. I think the only thing that I would add is um probably the nature of the use case with snp, which was multi-cloud and um respond just being the a partner of s p. For for uh many decades now um and uh bigger than this particular use case.

A

uh Most most of the infrastructure is automated uh with splunk at s p, um the the upper larger use case that is being explored uh alongside with splunk and snp, is interesting because of uh the complexity of the infrastructure and how splunk easily provides a robust solution for everything, monitoring and observability in that complex stack.

A

Okay, great and I posted the case study as well in the chat if anybody wants to go grab that um during uh the session today excellent, um I see a question chris on the q, a uh from senes around. Did you make any changes to the hyperledger fabric infrastructure, or did you design the dashboards on the data.

B

um So this is pretty similar to the test network uh example in the hyperledger fabric, docs um slightly modified.

B

So for the the chain code, I'm running, um there's an event that puts a message out for added uh x to this account um so that in the dashboard we could see.

B

um Basically in the dashboard, we could see those train code event messages. So that's one change and.

B

Not really too much more. um A lot of this is just using or being able to grab the logs so either through swan, kubernetes or some other connector, and then hitting one of the peers.

B

Endpoint, uh basically yeah, hitting the api on one of the peers and then fabric logger can grab chain code blocks, uh headers and events from there, but not too much uh so the dashboards were mostly designed on the data generated from the example test network um and then the in the github page. You can see in the example um if you run that uh that data being generated put into dashboards.

B

So the answer is yes to both, but their dashboards are pretty extensible for if you end up changing your network further.

A

Okay, great, thank you so now, as if you have any other questions, you can just add additional comments onto the chat as well. um Of course, I do have a question um specifically like, as, as you think about you know, critical kpis that uh people are looking for, then they should be monitoring like what what are the top things that you're seeing um your customers and the consortiums that they're putting together wanting to to monitor specifically so.

B

Transactions for a second is probably always gonna, be the key one. It's very much.

B

It gives you a good idea that something might be wrong, but obviously it doesn't quite tell you much about what might be wrong. um So it's still um good to know.

B

Any hardware measurements um so like ram or cpu utilization are also easy to collect. um That can be very informative if nodes are starting to have trouble or going down as well as connectivity, you want to make sure that your network there's no segment that parts your network that would make it perform suboptimally.

B

Those are the big ones uh and then also you certainly always wonder. No, if uh any of these services are spitting out errors um and those should probably propagate to errors, uh you shouldn't say yeah. If one of your services is repeatedly erroring, you have. I o timeouts you're going to want to know that also so being able to grab errors out of logs is also very important.

A

Okay um and- and I do have another question um around you know, obviously all these networks are consortiums right, multiple companies. You know it seems, like you know, in order for it to um to get you know full.

A

You know full support of the network um that every participant would need to be on the app together or or is that not the case.

B

So um you get a lot more benefit. If, if that is the case, um you do get more visibility, but even without that, you have a lot of visibility into all the parts of network that you're able to see as as a single participant and then also again, yeah with correlating between all of your organizations.

B

Existing infrastructure but yeah, certainly the benefit- can be greatly increased if you can combine information from the different organizations.

A

And have you seen that in production sort of you know different companies working together? um You know sharing basically sharing the the analytics and on the network.

B

So I've seen companies working on that yeah, okay,.

A

Great um any other questions. um I do have one additional question, but I just want to before. I ask that one. If anybody has any questions once again, just put into the chat or raise your hand and just make sure nobody has their hand raised to ask questions.

A

So I will go ahead and ask mine, so obviously today's presentation was focused on hyperledger fabric as one of the supported dlt platforms. Can you talk us a little bit about what others splunk support of other blockchains, either within the hyperledger foundation or outside of the hyperledger foundation as well sure.

B

So um but then so we have support for baesu as well, um so yeah uh fabric, hybrid, electric fabric and basu uh support for ethereum.

B

um So if you have any ethereum and corda- and you can see those on this white dlt page, uh you can look at all of our existing uh integrations but yeah. Definitely those are the big ones.

A

So in the hyperledger community, primarily hyperledger fabric and hyperledger bay su as well for those of you on the phone who don't um aren't familiar with hyperledger bezu, it is an ethereum client. It's been in the hyperledger foundation since 2019 um and provides um the ability uh uh it's a apache license. Java-Based ethereum client provides the opportunity for people to do both permissioned and public networks as well. So I encourage you to take a look at that.

A

um Any other questions doesn't seem so so so uh chris, if, if you were doing a side-by-side with potentially other um other providers in the marketplace, what would you say- or you know some- some of the um the top things that splunk offers that maybe others in the market might not have yeah.

B

B

Touch on a few of the reasons already, um but a major one is plenty of organizations are already using splunk for other parts of their infrastructure monitoring or for their security monitoring.

B

um So you can get a lot of added value if you're going to be using hyperledger fabric or you're thinking about how using hyperledger fabric now that you can easily integrate that with your existing infrastructure and security monitoring tools, um and then also you have the other integrations with like on call or store that I mentioned earlier. Also.

A

Great, thank you. I don't see any other questions. um I noticed somebody put a link to unblock uh splunk dlt. Can you um tell us a little bit about what happens when we go to that link.

B

Sure um so that's a public dashboard that all you can go to and which shows what the view looks like for some of our different apps and the different use cases you might use them for. There's, monitoring and observability infrastructure security and then ledger analytics all right and yeah. It's pretty cool.

A

Hey do you want to do you want to show us that? Since uh sure, because if people are on the video- and they don't see the link, they can't see it that'd be great.

B

So when you go down it's so block.2lt.com see, um it shows the different use cases and it shows what a view of a dashboard would look like grabbing data from so in this example, yeah we're grabbing data from different organizations, monitoring the healthcare consortium, and this one we're trying to uh I'm not too familiar with this and we're trying to detect any fraud happening on the network here and then you can drill down and do even more uh rich, lighter analytics. Also so, for example, is in ethereum quarta fabric.

A

Yeah great okay, so um chris, I think, since we don't have any more questions, um I'll go ahead and wrap this up. If anybody has questions for you specifically chris, how do they go about getting in touch with you.

B

Yeah, it's probably uh easiest to get in touch with me over linkedin.

A

So people can find you on linkedin and obviously, if people have questions uh specific to um to the splunk offerings, they can contact splunk directly. um Chris, I want to thank you for today's session and for the demo um and once again this session was recorded, so we will provide the presentation via our weber, our webinar library um and everyone can download the deck as well. um So we really thank you for your time.

A

um As um chris mentioned, we do did recently publish a case study um that splunk was kind to work with us on with s p global, so highly recommend uh downloading that and you can just go to hyperledger.org, learn case studies, so pull learn from the the top navigation bar and then go to case studies, and you can download that full case study um that is available there. So um once again, thank you to the splunk team for working with the hyperledger foundation team and the s p global to get that story out.

A

It's been great to see. um So once again, um I want to just let everybody know. This is the last of the last of this year's hyperledger in-depth member webinars, but we are starting to schedule. Webinars for uh 2022 and believably we're already almost there and the first ones that we're going to be doing are actually some project workshops. These are going to be a four-hour workshop series for hyperledger, aries and hyperledger indy.

A

So for those of you who are interested in learning more and getting hands-on with both of those projects, hyperledger indie is our dlt framework that is focused on digital identity and self-sovereign identity and hyper ledger. Aries is a library also focused on ssi and digital identity work? So please visit our wiki at the top of the wiki page. You can actually go and register for those events.

A

Registration is filling up pretty quickly, there's limited seats, so if you're interested, please make sure to sign up now um so once again, we'll see everybody in 2022..

A

um Just as a reminder, we have some great content from our global forum this year and you can go ahead and go to our youtube library and watch many great sessions um that were conducted in june uh with our community.

A

um We are an open community, as I mentioned, so please do get involved for those of you who are new york to our community go ahead and take a screenshot, a screen of that qrc code and you'll have a lot of resources there on how to get involved. And last but not least, thank you for watching today. We have a lot of great videos available in our youtube library, so please do subscribe to that library to get all the up-to-date community and member webinars that we have available.

A

So chris once again, thank you for joining us today and for conducting this webinar. Thank you all to the attendees, and we will see you in 2022. happy holidays to all and see you soon.

B

Thank you. Thank you.

A