2
votes
3answers
266 views

Any QUICK hints for starting off with Splunk

Just downloaded a trial of Splunk, and am thinking of using it to monitor a Windows server base, with the associated apps, e.g.: o Windows event logs / WMI queries (for Windows O/S, SQL Server, ...
0
votes
1answer
980 views

Setting up Splunk/IronPort WSA

I recently stumbled across Splunk 4 (by way of an advert on this very site...) and found that it had an "App" that's designed to work with Cisco IronPort WebSecurity and E-Mail Appliances! That's ...
0
votes
2answers
2k views

Splunk: How Do I Extract Fields from W3C Extended Format

I'm trying to configure Splunk to properly parse the fields of the W3C log format. Now, I'm running into configuration confusion: where and how do I specify how to split up the log format? My ...
12
votes
6answers
4k views

Is anybody using Splunk in a large-scale production environment?

I've been watching the videos at splunk.com and really it's hard to believe that one can get all those features for free, there's still that "where's the catch?" in the back of my head. So it'd be ...