Onboarding flow for the first security data source connection

Design the onboarding flow to support the first security data source connection - creating a streamlined and scalable design that can be generalized to all other data sources.

2024

Technical Workflow

Overview

  • Timeline: 11/2023-05/2024

  • Role: Design lead

  • Team: 2 designers, 4 engineers, 2 product managers, 2 security specialist

  • Company: Splunk

Contributions

  • Led the design effort from MVP to iterations, fostering successful rollouts

  • Mentored a junior designer on user research and design collaborations.

Business initiatives

Expand the data connection to security data source, helping organizations unlock their security insights with advanced analytics.

User problem

The existing onboarding flow is fragmented and takes a long time to complete, remaining as the biggest friction to user adoption.

Users need a smoother onboarding experience that empowers self-service and supports faster time-to value

Users need a smoother onboarding experience that empowers self-service and supports faster time-to value

Streamlined experience

A wizard design with modern look and feel - reducing cognitive load and providing a scalable design that can be generalized to other data sources.

Guided experience

A hand-holding process with different levels & types of instructions - balancing the content on the UI vs. keeping the documentation site as the single source of truth.

Built-in automation

Provide bulk creation and auto-population to expedite onboarding and ensure quality analytics results.

However, data connection is more than just onboarding...

However, data connection is more than just onboarding...

Final design

The end to end data connection experience.

Kick off onboarding

A starter page to learn about the value of data connection before onboarding.

Connect to data source

A guided flow to help users connect to the external data step-by-step, with clear explanations on what they need to do and why.

Configure data access

Enable both the search and analytics features by setting up two types of index with visual aids and built-in automation.

Complete onboarding

A comprehensive review for scrutiny and a feedback page to suggest next steps.

Validate

Test the data connection and configuration by directly opening search with pre-defined query.

Monitor

Seamlessly connect with the monitoring dashboard by directly checking the license usage for each provider.

Impact

40% time saved

40% time saved

reducing the steps from 15 to 9

5 more use cases

5 more use cases

with advanced analytics

+45% usability

+45% usability

measured by the EASE metrics

1st data lake integration

1st data lake integration

improving Splunk's scan-based data search

15 active customers

15 active customers

highlighted at the Splunk's annual conference

$17.6B market opp.

$17.6B market opp.

potential data lake market opportunity