Mark Runals' Blog
Some sort of Data/SIEM/InfoSec blog.
Wednesday, October 14, 2020
User Aware Splunk Dashboards
›
One of the more interesting aspects of Splunk is giving users direct access to raw data. This is great on so many levels from a troubleshoot...
Tuesday, May 26, 2020
Drilling into the OTHER category in Splunk
›
So what has broken my 3 year blog posting hiatus you might ask? Some nerd-like delight in working through a Splunk dashboard capability I di...
Saturday, January 14, 2017
Adjusting Splunk forwarder phonehome / throughput
›
I was in the process of writing up a few things for a new EDU that is going to be spinning up a larger scale Splunk environment and figured ...
Sunday, November 20, 2016
Find saved searches in Splunk that are failing
›
I hope to circle back to this eventually. Until then --- enjoy: index=_internal log_level=ERROR SavedSplunker | stats count as Count by ho...
Saturday, April 9, 2016
Splunk admin tasks after you start getting data in...
›
I had the rather unique privilege to post a 3 part blog series on Splunk's official site recently. The focus was on some administration ...
‹
›
Home
View web version