Mark Runals' Blog

I was in the process of writing up a few things for a new EDU that is going to be spinning up a larger scale Splunk environment and figured ...

I hope to circle back to this eventually. Until then --- enjoy: index=_internal log_level=ERROR SavedSplunker | stats count as Count by ho...

I had the rather unique privilege to post a 3 part blog series on Splunk's official site recently. The focus was on some administration ...

For those that don't know, for some time Splunk has been moving toward a Common Information Model (CIM). They are using this both a data...

In looking at the Windows firewall logs coming out of the Security event viewer (mainly 5156) I realized the space in "program files...