Solve for 80% - find logs needing work in Splunk

There are a couple of sayings, maxims if you will, that I try to keep in the back of my mind as I do things

• Most times coincidence is God acting anonymously
• Activity != Accomplishment
• Effectiveness and efficiency are two different concepts
• Solve for 80%

What's in a name?.....Strategy

Follow me for a moment on a random thought. If vision begets strategy and strategy begets roadmaps and on down we go; wouldn’t common language and labels be a byproduct of that activity? If that is true, would it be somewhat safe to say if you don’t have common language and labels for groups or efforts it indicates a breakdown further up the chain?

The trick is identifying where the chain is broken....and fixing it.

Where do you fit on the chart?

It’s been too long since I have written. The problem, as it were, is I have had some ideas to write about but they are either incomplete or they are still percolating in mah head. I guess that isn’t too far from being the same thing. At any rate, the other day….actually the other week now that I think about it…I was working on some visualization and metric stuffs and had the thought to create the following tongue in cheek quadrant chart.

Low hanging fruit vs sour grapes

While on a drive today I got to thinking about low hanging fruit and came up with a Runalism. Will have to vet this over time.

Generally speaking, the difference between low hanging fruit and sour grapes is perspective.

What influences your day to day decision making?

Does your strategic vision drive your tactical focus or do your tactical decisions turn into your strategic vision?

Will you have the same answer when you look back in six months?

How to boil the ocean

I did a very (non)scientific experiment this morning with the idea of trying to see the best way to boil the ocean….well ocean by proxy anyway. I took a liter of water and slowly added it a bit at a time to a pan and timed how long it would take to come to a decent boil; was a little over 6 minutes. Cooled the pan down, filled it with another litter of water, set the heat at the same place, and timed it. This time it took just over 8 minutes to get to about the same state.

What’s the point other than having too much time on my hands? Am guessing you might have heard the cliché “don’t try to boil the ocean.” Relative to SIEM stuffs I take a few things away from my little experiment that are all interrelated: