<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">At my place of work, we ship Splunk
embedded in appliances. <br>
I gather that it is a closed source log handler which <u>can talk
SYSLOG protocol</u> and presses its affinity for CEF (Common
Event Format). CEF strikes me as a good thing because SYSLOG
traffic can be way too free-form for enterprise processing. (Just
too little structure for huge volumes of log traffic to be
processed effectively without something like CEF.) <br>
<br>
I found Splunk's gigabyte licensing to be annoying. A customer can
bump into the wall and lose traffic. (I forget the details of the
failure mode.) <br>
<br>
-- R; <><<br>
<br>
<br>
On 10/14/2016 12:36 PM, Evan Miller wrote:<br>
</div>
<blockquote
cite="mid:CAD99F+2Te-7iZVR7=gs0Gu81w_HLvpjwFMmEXV91FpYdxKc7Kg@mail.gmail.com"
type="cite">
<div style="white-space:pre-wrap">Splunk is widely used at enterprise level. It is closed-source and generally licensed on a by-the-gigabyte basis. I've deployed it myself in a production environment and it does a great job.
That said on the open source side something like Graylog or ELK (elasticsearch, logstash, kibana) is a common comparison to the features and function of Splunk.
Hope that helps!
Evan</div>
<br>
<div class="gmail_quote">
<div dir="ltr">On Fri, Oct 14, 2016 at 12:33 PM Jeff Frontz <<a
moz-do-not-send="true" href="mailto:jeff.frontz@gmail.com"><a class="moz-txt-link-abbreviated" href="mailto:jeff.frontz@gmail.com">jeff.frontz@gmail.com</a></a>>
wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr" class="gmail_msg">
<div class="gmail_msg">Anybody heard-of/using splunk? Is it
a widely-deployed platform?</div>
<div class="gmail_msg"><br class="gmail_msg">
</div>
<div class="gmail_msg">I try to keep a list of upcoming
events that are "code-centric" -- things that would be of
interest to individual contributors (vs. the pointy-haired
and the marketeers) in IT/software/systems -- and send
them out at the bottom of code camp email blasts. Usually
I can suss-out the purely marketing/spammy ones and
recognize the good stuff. However, "splunk" is something
I'm not familiar enough with, so...</div>
<div class="gmail_msg"><br class="gmail_msg">
</div>
<div class="gmail_msg">I need some feedback on whether the
upcoming Columbus stop of "Splunk live" (<a
moz-do-not-send="true"
href="http://splunklive.splunk.com" class="gmail_msg"
target="_blank"><a class="moz-txt-link-freetext" href="http://splunklive.splunk.com">http://splunklive.splunk.com</a></a> ) is
worthy of inclusion in my list.</div>
<div class="gmail_msg"><br class="gmail_msg">
</div>
<div class="gmail_msg"><br class="gmail_msg">
</div>
<div class="gmail_msg">Oh, just for reference, here's my
current list (please let me know if you are aware of any
others):</div>
<div class="gmail_msg"><br class="gmail_msg">
</div>
<div class="gmail_msg">
<ul
style="color:rgb(80,80,80);font-family:arial;font-size:14px;font-variant-ligatures:normal;line-height:21px"
class="gmail_msg">
<li class="gmail_msg"><a moz-do-not-send="true"
href="https://www.eventbrite.com/e/tech-townhall-tickets-28060566911"
style="color:rgb(51,102,153)" class="gmail_msg"
target="_blank">BLK Hack Tech Townhall</a> is Oct 17</li>
<li class="gmail_msg"><span
style="background-color:rgb(255,215,0)"
class="gmail_msg">new</span> <a
moz-do-not-send="true"
href="http://www.meetup.com/meetup-group-wEkWWOXK/events/234246784/"
style="color:rgb(51,102,153)" class="gmail_msg"
target="_blank">José Valim (creator of Elixir &
Devise) at CRB</a> on Oct 17.</li>
<li class="gmail_msg"><a moz-do-not-send="true"
href="http://columbuscodecamp.com/"
style="color:rgb(51,102,153)" class="gmail_msg"
target="_blank">Columbus Code Camp</a> is Oct 22.</li>
<li class="gmail_msg"><a moz-do-not-send="true"
href="http://coderetreat.org/events/global-day-of-coderetreat-2016-columbus-oh-usa?referer=CCC2016"
style="color:rgb(51,102,153)" class="gmail_msg"
target="_blank">Global Day of Coderetreat</a> is Oct
22.</li>
<li class="gmail_msg"><a moz-do-not-send="true"
href="http://www.govtech.com/events/Ohio-Digital-Government-Summit.html?referer=CCC2016"
style="color:rgb(51,102,153)" class="gmail_msg"
target="_blank">Ohio Digital Government Summit</a> is
Oct 25-26.</li>
<li class="gmail_msg"><a moz-do-not-send="true"
href="https://www.thegdex.com/?referer=CCC2016"
style="color:rgb(51,102,153)" class="gmail_msg"
target="_blank">GDEX - Game Developer Expo</a> is
Oct 28-30.</li>
<li class="gmail_msg"><a moz-do-not-send="true"
href="http://www.devopsdays.org/events/2016-ohio/welcome/?referer=CCC2016"
style="color:rgb(51,102,153)" class="gmail_msg"
target="_blank">DevOpsDays Ohio</a> is Oct 31-Nov 1.</li>
<li class="gmail_msg"><a moz-do-not-send="true"
href="http://www.up.co/communities/usa/columbus/startup-weekend/9968?referer=CCC2016"
style="color:rgb(51,102,153)" class="gmail_msg"
target="_blank">Startup Weekend Columbus</a> is Nov
11-13.</li>
<li class="gmail_msg"><a moz-do-not-send="true"
href="https://ohiodevfest.com/?referer=CCC2016"
style="color:rgb(51,102,153)" class="gmail_msg"
target="_blank">Ohio DevFest</a> is Nov 19.</li>
<li class="gmail_msg"><span
style="background-color:rgb(255,215,0)"
class="gmail_msg">new</span> <a
moz-do-not-send="true"
href="https://qaorthehighway.com/?referer=CCC2016"
style="color:rgb(51,102,153)" class="gmail_msg"
target="_blank">QA or the Highway</a> is Feb 7,
2017.</li>
</ul>
<br class="gmail_msg">
Thanks<br class="gmail_msg">
Jeff</div>
</div>
_______________________________________________<br
class="gmail_msg">
colug-432 mailing list<br class="gmail_msg">
<a moz-do-not-send="true" href="mailto:colug-432@colug.net"
class="gmail_msg" target="_blank">colug-432@colug.net</a><br
class="gmail_msg">
<a moz-do-not-send="true"
href="http://lists.colug.net/mailman/listinfo/colug-432"
rel="noreferrer" class="gmail_msg" target="_blank">http://lists.colug.net/mailman/listinfo/colug-432</a><br
class="gmail_msg">
</blockquote>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
colug-432 mailing list
<a class="moz-txt-link-abbreviated" href="mailto:colug-432@colug.net">colug-432@colug.net</a>
<a class="moz-txt-link-freetext" href="http://lists.colug.net/mailman/listinfo/colug-432">http://lists.colug.net/mailman/listinfo/colug-432</a>
</pre>
</blockquote>
<br>
</body>
</html>