Splunking for who-what-when

 
 
Cameron Sturdevant Cameron Sturdevant is the executive editor of Enterprise Networking Planet. Prior to ENP, Cameron was technical analyst at PCWeek Labs, starting in 1997. Cameron finished up as the eWEEK Labs Technical Director in 2012. Before his extensive labs tenure Cameron paid his IT dues working in technical support and sales engineering at a software publishing firm . Cameron also spent two years with a database development firm, integrating applications with mainframe legacy programs. Cameron's areas of expertise include virtual and physical IT infrastructure, cloud computing, enterprise networking and mobility. In addition to reviews, Cameron has covered monolithic enterprise management systems throughout their lifecycles, providing the eWEEK reader with all-important history and context. Cameron takes special care in cultivating his IT manager contacts, to ensure that his analysis is grounded in real-world concern. Follow Cameron on Twitter at csturdevant, or reach him by email at cameron.sturdevant@quinstreet.com.
By Cameron Sturdevant  |  Posted 2007-03-06 Email Print this article Print
 
 
 
 
 
 
 

Splunk is a software application that uses a search language and log aggregation techniques to assist IT help desk staff and managers get to the root cause of system, application and infrastructure problems. Splunk 2.2 takes log data from almost any source and parses out the time information in the message in order to execute fast searches based on user requests of the basic form "what was happening at such-and-such time." While Splunk can work without any training and end users should be able to come up to speed on the product with little training, getting the most out of the reams of data that Splunk processes does take skill. Besides knowing the right questions to ask and formatting those problems correctly operators can also tag found events to make the system work even better. Tagging and searching do get better over time and that is part of what I've been working on in eWEEK Labs during our tests of the log search engine.

 
 
 
 
del.icio.us | digg.com
 
 
 
 
 
 

Submit a Comment

Loading Comments...

 
 
Manage your Newsletters: Login   Register My Newsletters























 
 
 
 
 
 
 
 
 
 
 
Rocket Fuel