Cfrln’s Blog: Archive for November, 2006

new blog about Splunk

Someone’s started another Splunk blog called Splunk Ideas, and no, the author really doesn’t work here. I really like the post on proactive system administration. Updated link.

Using an MSSP? Want your Splunk Server to send them data?

One of our sales reps, Jon Hart (who’s a real security log analysis vet), told me he’s had a lot of customers ask him about using Splunk along with an MSSP service. He asked me to do a quick post about it.
MSSP stands for Managed Security Service Provider. MSSPs outsource your security monitoring function. They [...]