Try Splunk Enterprise Security for Free
It’s no secret that the security landscape is continuously evolving and growing in complexity. Today’s attackers are highly skilled and employ a wide range of advanced techniques to evade legacy...
View ArticleCheers to .conf2015 with Three Clicks and a Beer
Tuesday was the kickoff of .conf2015: The 6th Annual Splunk Worldwide Users’ Conference in Las Vegas and it was incredible. After months of preparation, we were ready to hit the stage for the keynote...
View ArticleWe proudly announce: the 2015-2016 SplunkTrust Membership!
Whew! Now that we’re back from .conf and the dust from Megacup’s hooves has settled, I’m proud and pleased to announce the inaugural membership of the SplunkTrust! We created the SplunkTrust Community...
View ArticleSplunking NRL 2015. The winner will be…
Source: nrl.com.au The 2015 National Rugby League (NRL) season comes to a breathtaking end this weekend with Brisbane Broncos playing the North Queensland Cowboys in Sydney this Sunday. While I was...
View ArticleSplunking Box Data – Content Events
In my last post about Splunking Box data, we focused on user authentications including percentage of failed logins, where logins are coming from, user accounts associated with failed logins, etc. In...
View ArticleRandom Words on Entropy and DNS
During my last blog post, I mentioned that I would delve more into how to detect subdomains with relatively high entropy. But first I think it is important to discuss WHAT is entropy; WHY do I care if...
View ArticleUse Custom Polygons in Choropleth Maps
In late September, 4,000 attendees gathered in Las Vegas for .conf, our annual user conference. Among a host of other features, we introduced Choropleth Maps, a new visualization type in Splunk 6.3....
View ArticleHunk, HDFS, and Indexes
I’ve been asked a number of times why Hunk does not create a physical index like Splunk. First, let me point out that your Hunk instance can search both physical and virtual indexes, allowing you to...
View ArticleSmart AnSwerS #39
Hey there community and welcome to the 39th installment of Smart AnSwerS. Playing catch up with work after .conf2015 last week in Las Vegas has been hard, but well worth it. It was great getting to...
View ArticleSplunk at the Wall for DEF CON 23
Every year since 1992, security geeks and nefarious hacker types have descended upon Las Vegas for DEF CON, a hacking conference that started with hackers and crackers phreaking AT&T payphones....
View ArticleScheduled Export of Indexed Data
I’m really enjoying playing with all the new Developer hooks in Splunk 6.3 such as the HTTP Event Collector and the Modular Alerts framework. My mind is veritably fizzing with ideas for new and...
View ArticleSplunk App for AWS: Making the invisible, visible
I imagine most of you have seen the 2013 Marvel movie, Thor. If not, I highly recommend it, where the Asgardian god of thunder saves the Earth using an enchanted, magical hammer. The movie has a very...
View ArticleHTTP Event Collector, your DIRECT event pipe to Splunk 6.3
At .conf2015, we introduced HTTP Event Collector, a new exciting capability for developers to send events from applications, DevOps tools, and IoT into Splunk. In this post I’ll explain what it is and...
View ArticleSplunk admin & some basics around working with REST APIs
I saw an interesting thread today on an internal list that I would like to share with the world. After all, while each of us is a precious snowflake, our problems and challenges are not always...
View ArticleSplunk Delivers Real-Time Operational Intelligence to Newly Announced AWS IoT...
The big news of the day is that AWS is officially in the Internet of Things business. This is an announcement that is bound to make a major impact on the IoT, and is exciting news for those who are...
View ArticleRecap: Splunk at IT-SA in Nürnberg
Keynote Edward Snowden, Nuernberg Messe; it-sa 2015; Moderation: Soeren von Varchmin;Hi all, This week the Central Team in EMEA has been very busy at the annual IT-SA conference in lovely Nürnberg....
View ArticleGetting Smarter with Splunk; Lessons Learned in Higher Education
Splunk has a lot of smart people working to bring you the best product experience and return on investment that we can. I am always humbled, however, when customers come back to Splunk with ideas that...
View ArticleAchieving scale with the Kafka Modular Input
A hot topic in my inbox over the recent months has been how to achieve scalability with the Kafka Modular Input , primarily in terms of message throughput. I get a lot of emails from users and our own...
View ArticleBringing “Sexy Back” to IT Ops. An EMEA view on .conf2015
As I write this, I’m on a train into London and back in a cold, foggy, slightly chilly UK following September’s .conf2015 in Las Vegas. It was a pretty bumper week with around 4000 people in the MGM...
View ArticleSplunk at Dynatrace PERFORM
This week, Splunk will be participating at Dynatrace PERFORM – the annual users event for Dynatrace APM users. Not only is Dynatrace the largest APM vendor by market share, we know that many people are...
View Article