Tips & Tricks Blogs

Use of Splunk logging driver & HEC (HTTP Event Collector) grows w/ JSON-JavaScript Object Notation; Find answers on extracting key-value pairs from JSON fields.

Wondering how to find the baddies in huge volumes of data? Work with Splunk & Windows event Log Monitoring – refer to table of event codes in NSA paper.

Send data to Splunk w/o a forwarder using HEC (HTTP Event Collector); Perfect for log data over HTTP or IoT. Install Nginx with HTTPS support, then configure.

Learn ways to estimate what size Splunk license you need. How to estimate how much data you have, asking admins, add a buffer, and try a free Splunk trial.

Part 1: Implementing syslog with Splunk and three three scenarios you will be able to do so.

Part 2: Managing multiple syslogs and what has worked in this Splunkers own experience.

Splunk Security continues to grow thanks to insight Splunk Enterprise offers for all data. Finding what’s relevant and how to use the information.

Part three on URL analysis, this post will assist you in using Splunk to detect DNS tunnels.

Digging deeper into the HTTP Event Collector issue and workarounds for Splunk that could lead to a better, more efficient solution.