Tips & Tricks Blogs

The Cluster command with Nagios data - an industrial monitoring tool for IT infrastructures - can gather history & diagnostics on issues in the organization.

Splunk 6.1 includes support for native MaxMind DB-.mmdb-updatable when needed. Under limits.conf file change path to mmdb file & it’s safe for Splunk upgrades.

Related to accum, delta command is similar & calculates the difference btn values; delta uses field parameter to calculate; you can rename output field.

Customers use Splunk Enterprise OT platform Splunk Cloud, on prem, AWS; deploy distributed cluster with Splunk AWS CloudFormation for in a half hour or less.