Gabriel Vasseur
Untable, xyseries, transpose clarified!
These 3 table-manipulating commands are occasionally very useful but they are also quite confusing. For years, I've relied on the...
top of page
Geeking out on Splunk and IT Security
Search
Gabriel Vasseur
Sep 201 min read
Use Ingest Actions to shrink your ingest and make the most of your license!
On the 18th of September 2024 I gave a talk on this topic at the London Splunk User Group meetup. Ingest Actions are a simple feature of...
14 views0 comments
Gabriel Vasseur
Jul 3, 20231 min read
"And the nominees are..." - Wish me luck!
I have been nominated for a 2023 Splunkie Award and I am delighted to be a finalist for the Inventor Award! https://conf.splunk.com/the-s...
3 views0 comments
Gabriel Vasseur
May 22, 20234 min read
RBA: a better way to dedup risk events
In this post we’re discussing an advanced way to dedup risk events in your risk alerts (RIRs) and at the same time have the RIR results...
89 views0 comments
Gabriel Vasseur
May 16, 20231 min read
Site Map
Use this page as a quick way to find which areas of this website have value for you. My apps ES Choreographer : manage ES correlation...
20 views0 comments
Gabriel Vasseur
May 16, 202310 min read
Conf Manager
This is the documentation for the Conf Manager app on splunkbase. This app allows you to search your knowledge objects and track their...
69 views0 comments
Gabriel Vasseur
Apr 30, 20225 min read
Linux tips
This for the most part isn't splunk-specific, but if you do any amount of administration on the linux command line, you might find it...
2 views0 comments
Gabriel Vasseur
Apr 26, 20221 min read
Splunk workload optimisation
Assess your search workload with this simple dashboard. Here's a very quick dashboard to identify what uses your splunk platform...
3 views0 comments
Gabriel Vasseur
Feb 28, 202210 min read
ES-Choreographer
This is the documentation for the ES-Choreographer app on splunkbase. This app offers various frameworks to help manage and improve...
60 views0 comments
Gabriel Vasseur
Jan 10, 20228 min read
GV-Utils
This is the documentation for the GV-Utils app on splunkbase. This app offers various utilities to solve a number of problems in Splunk:...
22 views0 comments
Gabriel Vasseur
Oct 19, 20219 min read
Dashboarding Best Practices, Tips & Tricks
Splunk’s “simple XML” dashboards are reasonably simple and straightforward to create, yet they are incredibly versatile and powerful. You...
42 views0 comments
Gabriel Vasseur
Oct 19, 20211 min read
Maintaining your correlation searches with ES Choreographer
I did a talk at Splunk .conf21 about how to maintain correlation searches: pdf / mp4 . If you’re looking for the source code for the...
3 views0 comments
Gabriel Vasseur
Oct 19, 202111 min read
Audit your correlation searches against your own Best Practices automatically
I did a talk at Splunk .conf21 about how to maintain correlation searches: pdf / mp4 . One of the topics is Correlation Searches Best...
27 views0 comments
Gabriel Vasseur
Oct 19, 20211 min read
Test your correlation searches end-to-end with Morning Checks
I did a talk at Splunk .conf21 about how to maintain correlation searches: pdf / mp4 . One of the topics is morning checks. Basically you...
6 views0 comments
Gabriel Vasseur
Oct 19, 20212 min read
Add an in-splunk after-the-fact Peer Review system for your correlations
I did a talk at Splunk .conf21 about how to maintain correlation searches: pdf / mp4 . One of the topics is having a simple peer review...
2 views0 comments
Gabriel Vasseur
Oct 19, 20211 min read
Add a simple TODO management system for your correlations
I did a talk at Splunk .conf21 about how to maintain correlation searches: pdf / mp4 . One of the topics is having a simple task...
2 views0 comments
Gabriel Vasseur
Oct 18, 20213 min read
Easy yet powerful submit buttons in your simple XML dashboards
There are a number of issues with Splunk’s simple XML forms submit button: you can't have more than one you can't move it you can't hide...
30 views0 comments
Gabriel Vasseur
Oct 30, 20181 min read
Change Tracking in Splunk
Are you tracking changes in your Splunk deployment? Most people don't, unless they can justify having a custom (heavy!) process using...
18 views0 comments
Gabriel Vasseur
Oct 30, 20171 min read
Running Splunk Enterprise Security at Capacity with Data Model Acceleration
Data models and especially their acceleration are often misunderstood by Splunk users. Yet they are absolutely critical, especially for...
2 views0 comments
Gabriel Vasseur
Oct 30, 20161 min read
Regular Expressions
Regular expressions are extremely useful. They are everywhere, including in Splunk. And they are useful to everyone, not just data...
3 views0 comments
bottom of page