There are countless blogs, articles, and Splunk ‘answers’ regarding the optimization of Splunk queries (and here’s another one). In this article, we are going to share a few tips to improve the performance of your Splunk queries……Learn MoreSPL Optimization
Did you know that Splunk has the capability to ingest non-log based data through multiple onboarding methods? In this blog, we will touch on API based data ingestion, as it is traditionally the most common method utilized.…Learn MoreSplunk API Data Ingestion
What is Summary Indexing? Summary indexes, as the name implies, allows for the storage of summarized data over time. This allows us to take these bite-size calculations of our data, and store those results in separate indexers.…Learn MoreWhat is Summary Indexing???
Many Splunk customers start with a single disk for storing Indexes and then want to make changes. In this guide we will discuss the steps to move hot/warm buckets onto faster disks and move cooler buckets to cheaper storage.…Learn MoreYour Guide to Disk Migration
Splunk WLM (Workload Management) provides the ability to allocate compute and memory resource to search, indexing, and other processes such as scripted inputs. This allows you to allocate the right resources to your Splunk server depending on its role.…Learn MoreWLM: The Great, The Good and The Gotchas
Speed and Accuracy are key to Enterprise Security. In this video, you’ll see how Splunk’s Assets and Identities capabilities help make your security investigations faster and better.…Learn MoreSplunk Assets and Identities
Do you have a custom data source you’d like to import into Splunk? Welcome to the world of sourcetypes.
In this blog, we help you navigate the process of creating sourcetypes, from assessment to configuration.…Learn MoreWhat Makes a Sourcetype?