We had a recent request to create a Splunk alert that runs hourly with a time range of midnight UTC of current date to current time. This sounds like an easy request, but when you look into it it’s a bit more complicated than it seems.
https://discoveredintelligence.com/wp-content/uploads/2024/11/savedsearch-2.png509854Darren Fullerhttps://discoveredintelligence.com/wp-content/uploads/2013/12/DI-Logo1-300x137.pngDarren Fuller2024-11-15 13:38:362024-11-18 14:59:42Running a Splunk Search in a Different Time Zone
Have you ever wished you had a fresh ephemeral Splunk instance that you could quickly spin up, run some tests and then kill it, with maximum speed and minimum cloud costs?
Enter Hashi Terraform to the rescue. The industry-leading infrastructure-as-code tool makes the standup, setup and teardown of cloud compute nodes simple, speedy and repeatable so that an environment can be built, a complete set of tests can be run, results received and the test nodes destroyed in minutes rather than hours.
In this whitepaper, I show how I set up my computer and built the Search Head and Deployment server, as well as how I set up the many Splunk Universal Forwarders to satisfy the test plan.
Download Whitepaper
Get access to this exciting whitepaper now, by completing the form below.
https://discoveredintelligence.com/wp-content/uploads/2024/08/di_terraform_gcp_splunk_whitepaper.jpg6821000Darren Fullerhttps://discoveredintelligence.com/wp-content/uploads/2013/12/DI-Logo1-300x137.pngDarren Fuller2024-09-09 15:35:512024-10-04 13:49:48Setting Up a Splunk Testing Environment Using Terraform & GCP
The Splunk Machine Learning Toolkit is packed with machine learning algorithms, new visualizations, web assistant and much more. This blog sheds light on some features and commands in Splunk Machine Learning Toolkit (MLTK) or Core Splunk Enterprise that are lesser known and will assist you in various steps of your model creation or development. With each new release of the Splunk or Splunk MLTK a catalog of new commands are available. I attempt to highlight commands that have helped in some data science or analytical use-cases in this blog.
https://discoveredintelligence.com/wp-content/uploads/2020/10/image-10.png2561892Discovered Intelligencehttps://discoveredintelligence.com/wp-content/uploads/2013/12/DI-Logo1-300x137.pngDiscovered Intelligence2020-11-12 20:24:382022-10-31 14:41:21Interesting Splunk MLTK Features for Machine Learning (ML) Development
We are pleased to announce the release of our latest Splunk certified app, Config Quest for Splunk.
Config Quest is an awesome lightweight utility from Discovered Intelligence for searching and reviewing Splunk configurations on any Splunk server directly from your search head! Use Config Quest to search for any stanza or configuration parameter, in any selected app, across any Splunk server in your environment.
We are pleased to announce the release of our new app, Homepage for Splunk. This Splunk certified app presents your logged in users with a ‘virtual cockpit’ that provides a single-pane-of-glass view into their specific use of Splunk. Read more
https://discoveredintelligence.com/wp-content/uploads/2013/12/DI-Logo1-300x137.png00Discovered Intelligencehttps://discoveredintelligence.com/wp-content/uploads/2013/12/DI-Logo1-300x137.pngDiscovered Intelligence2017-07-11 17:21:202022-10-31 15:58:50Homepage for Splunk – Our New App!
Discovered Intelligence has developed a simple Splunk command for identifying Heartbleed vulnerabilities!
This CIM-Compliant Technology Add-on (TA-Heartbleed) contains a new heartbleedtest Splunk command that can be used to check your internal infrastructure and external websites for the recently announced Heartbleed vulnerability. Read more
https://discoveredintelligence.com/wp-content/uploads/2013/12/DI-Logo1-300x137.png00Discovered Intelligencehttps://discoveredintelligence.com/wp-content/uploads/2013/12/DI-Logo1-300x137.pngDiscovered Intelligence2014-04-11 18:04:122022-10-31 16:56:52Heartbleed Command for Splunk