High Performance syslogging for Splunk using syslog-ng – Part 1
Part 1: Implementing syslog with Splunk and three three scenarios you will be able to do so.
High Performance syslogging for Splunk using syslog-ng – Part 2
Part 2: Managing multiple syslogs and what has worked in this Splunkers own experience.
Tracing your TCP IPv4 connections with eBPF and BCC from the Linux kernel JIT-VM to Splunk
From Linux Kernel JIT-VM to Splunk: Tracing your TCP IPv4 connections with eBPF and BCC a how-to in this installment of tips and tricks.
Enriching threat feeds with WHOIS information
Splunk Security continues to grow thanks to insight Splunk Enterprise offers for all data. Finding what’s relevant and how to use the information.
