Articles

Gabriel Vasseur

May 22, 20234 min

RBA: a better way to dedup risk events

In this post we’re discussing an advanced way to dedup risk events in your risk alerts (RIRs) and at the same time have the RIR results...

Gabriel Vasseur

Apr 30, 20225 min

Linux tips

This for the most part isn't splunk-specific, but if you do any amount of administration on the linux command line, you might find it...

Gabriel Vasseur

Apr 26, 20221 min

Splunk workload optimisation

Assess your search workload with this simple dashboard. Here's a very quick dashboard to identify what uses your splunk platform...

Gabriel Vasseur

Oct 19, 20219 min

Dashboarding Best Practices, Tips & Tricks

Splunk’s “simple XML” dashboards are reasonably simple and straightforward to create, yet they are incredibly versatile and powerful. You...

Gabriel Vasseur

Oct 19, 202111 min

Audit your correlation searches against your own Best Practices automatically

I did a talk at Splunk .conf21 about how to maintain correlation searches: pdf/mp4. One of the topics is Correlation Searches Best...

Gabriel Vasseur

Oct 19, 20211 min

Test your correlation searches end-to-end with Morning Checks

I did a talk at Splunk .conf21 about how to maintain correlation searches: pdf/mp4. One of the topics is morning checks. Basically you...

Gabriel Vasseur

Oct 19, 20212 min

Add an in-splunk after-the-fact Peer Review system for your correlations

I did a talk at Splunk .conf21 about how to maintain correlation searches: pdf/mp4. One of the topics is having a simple peer review...

Gabriel Vasseur

Oct 19, 20211 min

Add a simple TODO management system for your correlations

I did a talk at Splunk .conf21 about how to maintain correlation searches: pdf/mp4. One of the topics is having a simple task management...

Gabriel Vasseur

Oct 18, 20213 min

Easy yet powerful submit buttons in your simple XML dashboards

There are a number of issues with Splunk’s simple XML forms submit button: you can't have more than one you can't move it you can't hide...