Smart AnSwerS #8

Hello Splunk community and welcome to the 8th installment of Smart AnSwerS!

Have you ever had to babysit a dog for a friend and have to completely change your routine to make sure they don’t unleash all heck in your house? Well that’s what my week’s been like with totally different commute times, sleep and work schedules. Somehow, I’ve managed to make it work and still find time to hunt for some gems like these. – Check out this week’s featured Splunk Answers posts:

How to configure Chrome as a search engine for Splunk searches?

Not only are there smart AnSwerS, but there are smart questions too! oxnard posted a very interesting topic on how to configure their …

» Continue reading

Smart AnSwerS #7

Hello Splunk community and welcome to the 7th installment of Smart AnSwerS!

This past Monday, Martin Luther King Jr Day, was a holiday for the Splunk offices in the US, but I decided to come in anyway to get some work done since Splunk Answers never seems to take a day off :P All the lights were off and alas, neither I nor the security guard knew how to turn the lights on. I worked in the dark for a good 2 hours, but just when I was about to give up and save my eyesight, another splunker came by, showed me the light (switches) and saved the day! *confetti drop* Check out this week’s featured Answers posts:

Does Splunk remember

» Continue reading

Smart AnSwerS #6

Hello Splunkarinos and welcome to the 6th installment of Smart AnSwerS!

We just had our company Break Your New Year’s Resolution party this past weekend to start the New Year…ironically :P Good eats, good drinks, good music and fun people? That sounds about right to me! We’re back to business (and fun) as usual here at Splunk HQ as I’m sure you all are too – Check out this week’s featured Splunk Answers posts:

How to change the width of two dashboard panels in the first row from 50% 50% to 75% 25% in Simple XML for Splunk 6.2?

kkuderko was having an issue changing the size of panels on their dashboard, as do many users, which is why customizing Splunk …

» Continue reading

Smart AnSwerS #5

Hey there Splunk community, welcome to the 5th installment of Smart AnSwerS and the first of 2015!

Just when I thought the first work week of the year was going to slowly ease me back in, Splunk Answers and, well, you all have been busier than ever and have gotten me to hit the ground running. What does that mean? Why, more material for me to work with for this blog series of course ;) – Check out this week’s featured posts:

Why is syslog right into Splunk so bad/wrong?

I already had this post lined up to be featured and coincidentally, this topic actually came up at last night’s SF Bay Area Splunk User Group Meeting in the discussion …

» Continue reading

Smart AnSwerS #4

Hey there folks and welcome to the 4th installment of Smart AnSwerS!

Did any of you gain a pound or five over the holidays? I certainly did, but that’s ok! Good times and good eats with family and friends = me being insulated and cozy in bed as I peruse through posts to dig you all up some useful and interesting material – Check out this week’s featured Splunk Answers posts:

How to create a search to predict license violations?

Ever wonder what your indexed volume might be at the end of the day based on trending indexed data per hour as the day progresses? Well, you came to the right place! JdeFalconr had the need for this exact use …

» Continue reading

Smart AnSwerS #3

Hello Splunketeers and welcome to the 3rd installment of Smart AnSwerS!

We’ve been in quite a drought here in California and we’ve all been waiting and hoping for some rain to come on by…aaaand we got it, flooding our HQ basement floor! Good thing that hasn’t dampened our spirits or stopped us from the daily grind ;) – Check out this week’s featured Splunk Answers posts:

Why searching for a string with comparison operator “!=” returns the same source file name as “=”?

Have you ever asked yourself this question? jBoynton and I certainly have (no shame). This topic has come up several times and has left many to scratch their heads..and further scratching. The Search Processing Language struggle is …

» Continue reading

Christmas 2020. Will big data and IOT change things for Father Christmas? Part II

ChristmasTreeBinary3

 

 

 

In part 1 we discussed how Father Christmas is planning to use sensor data for the Internet of Toys.

 

In part 2 we’re going to discuss how he is going to use very large data sets to build out his Christmas 2020 technology strategy.

 

 

 

 

 

Big Data & Analytics

There’s a lot of information that goes into making Christmas a success. This data includes:

  • Social media sentiment about good or naughty children
  • Christmas present lists from children (both digitized scanned letters and increasingly electronic present lists)
  • Data from toys and manufacturing equipment to spot patterns in quality control
  • 500 years of Christmas Eve delivery data to help optimize sleigh route planning
  • Reindeer biometric information to ensure optimum
» Continue reading

Christmas 2020. Will big data and IOT change things for Father Christmas? Part I

Data TreeAfter last year’s case study on Santa Claus International, I recently had the opportunity to spend some more time with Father Christmas discussing his long term plans and business strategy for the next 5-10 years called “2020 Vision – Noel Limits”. We covered how the “advent” (geddit?) of technology over the last couple of years has changed the way Father Christmas has to prepare and deliver “positive festive outcomes” throughout the year. We talked about everything from The Internet Of Toys, use of big data and Ho-ho-hodoop, the unfortunately named Christmas Retail Analytics Platform and Augmented Sleigh Service. In part 1 we’ll review Father Christmas’ plans for The Internet Of Toys and in part 2 (tomorrow) we will cover …

» Continue reading

The best Christmas presents are surprises. Splunk wins “Best Business Application” at UK’s V3 awards.

SurpriseI hope everyone is getting ready for Christmas and nobody got injured in the madness that was black Friday. I’ve just got back from San Francisco where the festive season was in full effect. My Christmas shopping is nearly complete and the adoption of secret service level espionage tactics to hide presents from my children is underway. I’m fairly useless at keeping gifts a secret – I’ve nearly told my 8 year old son that he’s going to get an army of Star Wars Clonetroopers a number of times. I think it is important to try and keep presents a surprise to recapture some of the magic of the festive period when I was growing up and to try and …

» Continue reading

That happened: episode 42 (#splunk, the universe, and everything)

This week in “That happened: notes from #splunk”, a blog about the goings-on in the Splunk IRC channel:

There are really only 300 people on the internet

…and #splunk is 200 of them:

<RichardRa> Is it possible to timechart multiple fields per other field? More specifically, I am wanting to show a timechart of freespace by device by host. Using one of the Linux-TAs, my pseudo-search would look like: index=os_nix sourcetype=df | timechart span=5m max(UsePct) BY MountedOn BY host
<duckfez> RichardRa: by device by host or by the (device,host) tuple?
<Ayn> RichardRa: trying to think about what that would look like
<RichardRa> So, my goal would be a line for each device …

» Continue reading