GitHub

A script to assist in iteratively loading data into Splunk while making modifications to config files such as inputs.conf, props.conf and transforms.conf

Delete the specified INDEX and recreate it Reload the input, fields, transforms, and props configs oneshot load all of the files in specified directory using the defined sourcetype and INDEX Count the ...
GitHub

Splunk-Components-Quick-Reference.md

Access the Splunk website to obtain the latest Splunk Enterprise installation package: Download Splunk Enterprise RPM for Linux-x86_64 Create an account and/or login using your Splunk user ID & ...
Security Boulevard

Your Splunk Guide for Smooth Sailing with CEF Field Extractions

One of the more common log formats you’ll run into when importing data into Splunk is the ArcSight Common Event Format (CEF). A unique feature of CEF is its ability to support custom extensions, which ...
SiliconANGLE

Splunk catches data in-flight | #splunkconf

“Driving a new generation of data and delivering value out of it,” is how Chairman and CEO Godfrey Sullivan describes Splunk, Inc.’s mission. Welcoming attendees to Splunk.conf 2015, the “Superbowl ...
CSOonline

Where CISOs need to see Splunk go next

Splunk’s latest .Conf focused on machine data, federation, resiliency, and easing the cybersecurity burden. That’s a good start for the cyber giant, but from security leaders’ perspective, work ...