Smart AnSwerS #44

Hey there community and welcome to the 44th installment of Smart AnSwerS.

Have you been looking for an opportunity to expand your Splunk search fu? Look no further! As mentioned in a previous Smart AnSwerS post, come join 60+ RSVP’d users (and counting!) this Monday, November 23rd, 2015 @ 11:00AM PST in attending the SplunkTrust Virtual .conf Session #2. The presenter, Kyle Smith, will be covering his popular .conf2014 session “Lesser-known Search Commands”. Be sure to visit the Meetup page to RSVP, find the URL to the WebEx session, and come learn a thing or two with the rest of us next week :)

Check out this week’s featured Splunk Answers posts:

Is there a posted percentage

» Continue reading

Smart AnSwerS #43

Hey there community and welcome to the 43rd installment of Smart AnSwerS.

It’s been a pretty long week, but what better way to take a break for a change of pace with a party! I just got a reminder email that Splunk HQ is celebrating Diwali this afternoon, a Hindu festival of lights celebrated in the Fall every year. The courtyard will apparently be full of food, mehndi, and a talent show, oh my! Time to give my eyes a break from this monitor for a bit.

Check out this week’s featured Splunk Answers posts:

How to get a table cell color to change depending on the field value?

fredkaiser did some hunting around Answers, but couldn’t quite …

» Continue reading

The Hitchhikers’ Guide to Splunk for less than $3 per day

dont-panicUp until now it has been possible to hitchhike around the universe “for less than 30 Altairian dollars a day” but you could never Splunk for anything close to that (even at today’s rather favorable Altairian dollar/US dollar exchange rate) and that has proved, for many in small IT environments, to be a challenge.

You really want to use Splunk to understand and optimize your IT operations but you work in a small IT environment. What do I mean by small? Well first you have like no money to spend on log management (let’s say less than $100 per month) not to mention you have a small staff (let’s say, uhm, you and, in your wildest dreams, four other …

» Continue reading

Smart AnSwerS #42

Hey there community and welcome to the 42nd installment of Smart AnSwerS.

Last week, we had our very first SplunkTrust Virtual .conf Session, the beginning of a series of live online talks via WebEx to give users access to the best technical content presented every year at the Splunk Worldwide User Conference, .conf. Our first presenter was SplunkTrust member Martin Mueller who covered his .conf2015 session “Optimizing Splunk Knowledge Objects –  A Tale of Unintended Consequences”, followed by Q&A. We had an amazing turnout of 100+ users from different timezones around the world. Our next session #2 will be on Monday, November 23rd, 2015 @ 11:00AM PST, presented by alacercogitatus on his .conf2014 session “Lesser-known …

» Continue reading

Smart AnSwerS #41

Hey there community and welcome to the 41st installment of Smart AnSwerS.

There have been a lot of questions on Answers throughout the years asking for a way to add comments to searches such as this 3 year old post with almost 16,000 views. The Answer by steveyz just below the accepted one is the latest development that many of you will be happy to learn about if you haven’t already seen it on this page. Splunk technical writer lstewart updated the documentation to share and publicize this solution: configuring and using a search macro to add comments to search strings with no performance or resource impact. *applause!*

Check out this week’s featured Splunk Answers posts:


» Continue reading

Smart AnSwerS #40

Hey there community and welcome to the 40th installment of Smart AnSwerS.

The San Francisco Bay Area Splunk User Group met up last week at Splunk HQ, and we had some great topics covered. With the latest release of Splunk 6.3 during .conf2015, jcoates presented an on-the-fly overview of new and improved features, spuchbauer gave an awesome demo of new custom alert actions and other dashboard improvements, and lstewart gathered feedback on syntax for search documentation to create better consistency with content. frobinson & smoir tag teamed to provide live updates on happenings during the presentations on the SFBA UG Slack chat channel, in case folks who couldn’t make it out wanted to stay in the loop. We had …

» Continue reading

Splunk App for AWS: Making the invisible, visible

Avengers_age_of_ultron_thor-artI imagine most of you have seen the 2013 Marvel movie, Thor. If not, I highly recommend it, where the Asgardian god of thunder saves the Earth using an enchanted, magical hammer. The movie has a very obvious storyline – triumph of good over evil – but what caught my attention was a reference to a quote by the British science-fiction writer, Sir Arthur Charles Clarke – “Any sufficiently advanced technology is indistinguishable from magic.”

This quote really got me thinking. I am a product marketing manager for Splunk Cloud, which is hosted on AWS. As part of my job, I work very closely with various AWS technologies and customer requirements around cloud adoption. For instance, in the AWS …

» Continue reading

Smart AnSwerS #39

Hey there community and welcome to the 39th installment of Smart AnSwerS.

Playing catch up with work after .conf2015 last week in Las Vegas has been hard, but well worth it. It was great getting to meet many Splunk users for the first time in person, and I have to say, you’re pretty awesome ;D The folks I had the chance to speak to were excited to see old faces, network with other users passionate about our various products, and learn everything and anything possible. Even just overhearing conversations over meals at the same table or in passing, I could feel good vibes all around as the community of users got value not only from the content of …

» Continue reading

Splunk .conf 2015 Stream Sessions You Don’t Want to Miss!


Planning my agenda for the .conf2015 next week is really exciting this year. I am sure you feel the same – like a
kid in a candy store! If you are interested in learning about all the benefits Splunk App for Stream can bring you such as better applications visibility or improved security, then mark your calendars for the three sessions you don’t want to miss.

  1. The Splunk team will present “Splunk App for Stream Deployments in the Real World: Enhance Operational Intelligence Across Application Delivery, IT Ops, Security and More” on Wednesday, September 23, 2:15 PM. Here is a sneak peek into our session. First, we will go over how Stream can help you quickly achieve real-time applications intelligence and cloud visibility
» Continue reading

Smart AnSwerS #38

Hey there community and welcome to the 38th installment of Smart AnSwerS.

It’s almost time for .conf2015, Splunk’s worldwide user conference in Las Vegas in t-minus 4 days! Unless, of course, you’re going to Splunk University to level up your Splunk skills, then the action starts for you in less than 48 hours :) This will be my very first year attending, so it’ll be great to finally put faces to usernames I see on Splunk Answers all the time. If you happen to be around the Answers booth, gamer lounge, or other community spaces where I’ll be hanging out with support folks, don’t be a stranger!

Check out this week’s featured Splunk Answers posts:

How can I assign

» Continue reading