top of page
Geeking out on Splunk and IT Security
Search


ES-Choreographer
This is the documentation for the ES-Choreographer app on splunkbase. This app offers various frameworks to help manage and improve...

Gabriel Vasseur
Feb 28, 202210 min read


GV-Utils
This is the documentation for the GV-Utils app on splunkbase. This app offers various utilities to solve a number of problems in Splunk:...

Gabriel Vasseur
Jan 10, 20228 min read


Dashboarding Best Practices, Tips & Tricks
Splunk’s “simple XML” dashboards are reasonably simple and straightforward to create, yet they are incredibly versatile and powerful. You...

Gabriel Vasseur
Oct 19, 20219 min read


Maintaining your correlation searches with ES Choreographer
I did a talk at Splunk .conf21 about how to maintain correlation searches: pdf / mp4 . If you’re looking for the source code for the...

Gabriel Vasseur
Oct 19, 20211 min read


Audit your correlation searches against your own Best Practices automatically
I did a talk at Splunk .conf21 about how to maintain correlation searches: pdf / mp4 . One of the topics is Correlation Searches Best...

Gabriel Vasseur
Oct 19, 202111 min read


Test your correlation searches end-to-end with Morning Checks
I did a talk at Splunk .conf21 about how to maintain correlation searches: pdf / mp4 . One of the topics is morning checks. Basically you...

Gabriel Vasseur
Oct 19, 20211 min read


Add an in-splunk after-the-fact Peer Review system for your correlations
I did a talk at Splunk .conf21 about how to maintain correlation searches: pdf / mp4 . One of the topics is having a simple peer review...

Gabriel Vasseur
Oct 19, 20212 min read


Add a simple TODO management system for your correlations
I did a talk at Splunk .conf21 about how to maintain correlation searches: pdf / mp4 . One of the topics is having a simple task...

Gabriel Vasseur
Oct 19, 20211 min read


Easy yet powerful submit buttons in your simple XML dashboards
There are a number of issues with Splunk’s simple XML forms submit button: you can't have more than one you can't move it you can't hide...

Gabriel Vasseur
Oct 18, 20213 min read


Change Tracking in Splunk
Are you tracking changes in your Splunk deployment? Most people don't, unless they can justify having a custom (heavy!) process using...

Gabriel Vasseur
Oct 30, 20181 min read


Running Splunk Enterprise Security at Capacity with Data Model Acceleration
Data models and especially their acceleration are often misunderstood by Splunk users. Yet they are absolutely critical, especially for...

Gabriel Vasseur
Oct 30, 20171 min read


Regular Expressions
Regular expressions are extremely useful. They are everywhere, including in Splunk. And they are useful to everyone, not just data...

Gabriel Vasseur
Oct 30, 20161 min read
bottom of page