You are browsing the archive for Splunk, SPL.

Normalizing our path to Splunk enlightenment

May 23, 2020 in Splunk, SPL

One of the most annoying bits that we come across while doing log analysis is both predictability and unpredictability of file paths. Somehow…. everyone really… vendors, admins, and finally users […]

Couple of Splunk/SPL Gotchas

July 26, 2019 in Splunk, SPL

Splunk is one of the coolest things that have ever happened to the blue team world. Seriously… everyone either used it, is using it, or plans on using it. I […]