Having lived through the software-as-building-architecture argument every few years i am accustomed to thinking of (refuting) how software and software development is (not) like the traditional field of building design and development. The analogy driven mind needs something to reference and i guess us noobs in software are desperate to find something historical to feel validated.
Every discipline needs a role model and building design seems to be our adopted hero.

This post proposes an analogy that is far less intellectual than a typical comparison between Christoper Alexander and the design of an EventLoop Abstract Factory class.
My analogy here is based more on THIS weekend with MY wife.

Our house is full of stuff.
This stuff; chairs, tables, artwork, rugs,… we have acquired for good reason - and we could use it. The problem is that despite all good intention these hand-me-downs, gifts, rash purchases, sometimes just don’t work.

Yes we need a coffee table in the front room - but not THAT one.
Maybe the design is wrong.
Maybe the size is wrong.
Maybe the idea of a coffee table that is also is a fireplace seemed like a good idea at the time but WTF.

Wanted to drop this someplace for feedback.
Splunk is often hooked up to syslog(ng) or tcp ports.
Customers then shoot data as fast as they can at splunk.

You can have splunk buffer inputs or have the sender buffer but in many cases this is less than optimal - Its usually not a good idea to rely on sender side buffering.

As an interesting alternative you can use a splunk bundle to catch data off the network port and spew it to a file(s) and have splunk tail those files at its leisure. If splunk can keep up it will be seconds before you can search it. If you get a huge burst, no problem the bundle will just go to disk and splunk we be right behind. Furthermore, if someone wanted to restart splunk ( or splunk were to crash - yes it happens ) then again, just going to disk.

Come friday at 5PM - the table came out and it was time for Beer Pong.
Myself, i had not heard of Beer Pong until Nick Mealy (in picture below on right) explained.
He has an annual pilgrimage for a week to play and pointed out that there are acutal leagues.

Splunk is all about the proper Beer Pong - with paddles - not Beruit sytle.
I’m not really up on the details but its goes something like - you place cups of beer ( see our double tap keg in background of picture on far left ) on the table and your opponents try to hit the ball into the cup forcing you to drink. I think these are the rules along the lines played at splunk.

Unfortunately, i only had iphone to take picture. Next time i’ll get a movie.

** Friday Beer Pong @ Splunk **

None of this could happen without our Beer Man from Mikes Liquors. Must be SF’s best - we call in with an order and hours later our Man ( see blow ) shows up in his Beer Guy jacket to rack the booze.