The ABC’s of Splunk Part Four: Deployment Server

Thank you for joining us for part four of our ABC’s of Splunk series. If you haven’t read our first three blogs, get caught up here! Part 1, Part 2, Part 3. When I started working with Splunk, our installations were mostly small with less than 10 servers and the rest of the devices mainly involved switches, routers, […]

The ABC’s of Splunk Part Three: Storage, Indexes, and Buckets

In our previous two blogs, we discussed whether to build a clustered or single Splunk environment and how to properly secure a Splunk installation using a Splunk user. Read our first blog here Read our second blog here For this blog, we will discuss the art of Managing Storage with indexes.conf In my experience, it’s […]

The ABC’s of Splunk Part Two: How to Install Splunk on Linux

 In the last blog, we discussed how to choose between a single or clustered environment. Read our first blog here! Regardless of which one you choose, you must install Splunk using a user other than root to prevent the Splunk platform from being used in a security breach. The following instructions have to be done […]

The ABC’s of Splunk Part One: What deployment to Choose

When I first started working with Splunk, I really didn’t understand the nuanced differences between a Clustered environment and a standalone other than the fact that one is much more complex and powerful than the other. In this blog, I’m going to share my experience of the factors that need to be considered and what […]

Splunk 2020 Predictions

Around the turn of each new year, we start to see predictions issued from media experts, analysts and key players in various industries. I love this stuff, particularly predictions around technology, which is driving so much change in our work and personal lives. I know there’s sometimes a temptation to see these predictions as Christmas […]