Gabriel VasseurSep 201 min readUse Ingest Actions to shrink your ingest and make the most of your license!On the 18th of September 2024 I gave a talk on this topic at the London Splunk User Group meetup. Ingest Actions are a simple feature of...
Gabriel VasseurOct 19, 20211 min readMaintaining your correlation searches with ES ChoreographerI did a talk at Splunk .conf21 about how to maintain correlation searches: pdf / mp4 . If you’re looking for the source code for the...
Gabriel VasseurOct 30, 20181 min readChange Tracking in SplunkAre you tracking changes in your Splunk deployment? Most people don't, unless they can justify having a custom (heavy!) process using...
Gabriel VasseurOct 30, 20171 min readRunning Splunk Enterprise Security at Capacity with Data Model AccelerationData models and especially their acceleration are often misunderstood by Splunk users. Yet they are absolutely critical, especially for...
Gabriel VasseurOct 30, 20161 min readRegular ExpressionsRegular expressions are extremely useful. They are everywhere, including in Splunk. And they are useful to everyone, not just data...