Gabriel VasseurSep 201 minUse Ingest Actions to shrink your ingest and make the most of your license!On the 18th of September 2024 I gave a talk on this topic at the London Splunk User Group meetup. Ingest Actions are a simple feature of...
Gabriel VasseurOct 19, 20211 minMaintaining your correlation searches with ES ChoreographerI did a talk at Splunk .conf21 about how to maintain correlation searches: pdf/mp4. If you’re looking for the source code for the things...
Gabriel VasseurOct 31, 20181 minChange Tracking in SplunkAre you tracking changes in your Splunk deployment? Most people don't, unless they can justify having a custom (heavy!) process using...
Gabriel VasseurOct 31, 20171 minRunning Splunk Enterprise Security at Capacity with Data Model AccelerationData models and especially their acceleration are often misunderstood by Splunk users. Yet they are absolutely critical, especially for...
Gabriel VasseurOct 31, 20161 minRegular ExpressionsRegular expressions are extremely useful. They are everywhere, including in Splunk. And they are useful to everyone, not just data...