Tag:reddit

Why? June 08, 2020 at 11:09AM via reddit https://www.reddit.com/r/Splunk/comments/gyg56h/if_i_want_to_run_splunk_on_linux_which_one_is/ftdj3en?utm_source=ifttt

…unless your organization is standardized on Ubuntu or SLES 🙂 June 08, 2020 at 11:09AM via reddit https://www.reddit.com/r/Splunk/comments/gyg56h/if_i_want_to_run_splunk_on_linux_which_one_is/ftdj4rq?utm_source=ifttt

I didn't say I preferred any platform I asked why you think it's "preferable" 🙂 LPT: when giving advice to folks for their career and/or employers, you need to give reasons, not just "is preferable" 🙂 June 08, 2020 at 11:12AM via reddit https://www.reddit.com/r/Splunk/comments/gyg56h/if_i_want_to_run_splunk_on_linux_which_one_is/ftdjgo3?utm_source=ifttt

Never Fedora – not in production, at least June 08, 2020 at 10:56AM via reddit https://www.reddit.com/r/Splunk/comments/gyg56h/if_i_want_to_run_splunk_on_linux_which_one_is/ftdhmfk?utm_source=ifttt

You've seen people installing on HP-UX!? June 08, 2020 at 10:56AM via reddit https://www.reddit.com/r/Splunk/comments/gyg56h/if_i_want_to_run_splunk_on_linux_which_one_is/ftdhofc?utm_source=ifttt

Why? June 08, 2020 at 10:57AM via reddit https://www.reddit.com/r/Splunk/comments/gyg56h/if_i_want_to_run_splunk_on_linux_which_one_is/ftdhrzr?utm_source=ifttt

I've seen: Amazon Linux (in Splunk classes) RHEL/CentOS Ubuntu SLES Windows (once (and for a very strange set of circumstances)) In short, it doesn't matter. In long, go with the Linux you either already know, or the one that your organization is already standardized on (which is nearly the same thing) If you don't know …
Continue reading New comment on reddit

Why? June 08, 2020 at 11:03AM via reddit https://www.reddit.com/r/Splunk/comments/gyg56h/if_i_want_to_run_splunk_on_linux_which_one_is/ftdihjk?utm_source=ifttt

It doesn't matter what is in <search> – the relative speedup of where you place the [| inputlookup ] is the same 🙂 June 07, 2020 at 08:48AM via reddit https://www.reddit.com/r/Splunk/comments/gx7604/why_is_inputlookup_in_the_initial_search_line/ft9ib1h?utm_source=ifttt

This is my SSL config format: https://antipaucity.com/2017/07/07/ssl-configuration-for-apache-2-4-on-centos-7-with-lets-encrypt/ I never tweak the ”base” apache settings, personally June 06, 2020 at 04:44PM via reddit https://www.reddit.com/r/Wordpress/comments/gxwi4z/what_would_the_perfect_apache_setting/ft6nch1?utm_source=ifttt

Headlines and titles should be capitalizing all words – except for articles Standard English rules most people learn by 3rd grade June 06, 2020 at 09:24AM via reddit https://www.reddit.com/r/space/comments/gxfgza/nasa_denies_the_earlier_reported_ham_radio/ft4aqbj?utm_source=ifttt

If you cropped that a little, it’d look like mountain ranges 🙂 June 06, 2020 at 08:55AM via reddit https://www.reddit.com/r/foraging/comments/gxqcen/please_can_somone_help_id_this_tree_for_me_i/ft463iy?utm_source=ifttt

Plone and the Pandemic https://plone.org/news/2020/plone-and-the-pandemic Submitted June 05, 2020 at 10:30PM via reddit https://www.reddit.com/r/plone/comments/gxiks4/plone_and_the_pandemic/?utm_source=ifttt

Plone Conference 2020 – Namur, Belgium – 16-22 Nov 2020 https://2020.ploneconf.org Submitted June 05, 2020 at 10:35PM via reddit https://www.reddit.com/r/plone/comments/gxio45/plone_conference_2020_namur_belgium_1622_nov_2020/?utm_source=ifttt

Maybe because they were – ostensibly – allies of Germany in WWII? June 05, 2020 at 07:39PM via reddit https://www.reddit.com/r/aviation/comments/gxfq21/found_these_matches_in_my_kitchen_backside_has_a/ft11j5z?utm_source=ifttt

That makes sense … and also makes sense as to why not only would the job complete in ~15 minutes (for the specific example I found this from), but also have only about 600MB in the returned data vs running over an hour, returning over a gig – and getting "finalized" instead of completing (when …
Continue reading New comment on reddit

that can't be it – because sequential runs of the same search produces the same size results in the Job Manager 🙂 June 05, 2020 at 06:18PM via reddit https://www.reddit.com/r/Splunk/comments/gx7604/why_is_inputlookup_in_the_initial_search_line/ft0qwzh?utm_source=ifttt

The end results are "the same" (in the stats table, for example) But when you go to Activity->Jobs, you'll notice the size of the results might be 268MB for the first form, and only 140MB in the second And that size is vital when you're dealing with disk quotas for individual users of ~1GB 🙂 …
Continue reading New comment on reddit

I was running both forms in Fast Mode June 05, 2020 at 04:04PM via reddit https://www.reddit.com/r/Splunk/comments/gx7604/why_is_inputlookup_in_the_initial_search_line/ft0andd?utm_source=ifttt

should the first also be a subsearch? Since its encased between square brackets? June 05, 2020 at 03:11PM via reddit https://www.reddit.com/r/Splunk/comments/gx7604/why_is_inputlookup_in_the_initial_search_line/ft041c4?utm_source=ifttt

That makes sense – though not exactly why the ending resultset would still be so much bigger … unless Splunk's holding-onto all those unfiltered results for funzies? June 05, 2020 at 03:12PM via reddit https://www.reddit.com/r/Splunk/comments/gx7604/why_is_inputlookup_in_the_initial_search_line/ft045nr?utm_source=ifttt

there's a pattern sample in the question 🙂 June 05, 2020 at 02:28PM via reddit https://www.reddit.com/r/Splunk/comments/gx7604/why_is_inputlookup_in_the_initial_search_line/fszyk14?utm_source=ifttt

Why is `[|inputlookup…]` in the initial search line faster than `|search [| inputlookup…]`? Lookup tables are fantastic But I'm trying to figure out why doing: <search> [| inputlookup lookupname ] Is not only faster, but returns a result set substantially smaller (on the order of 50%) than this format: <search> | search [| inputlookup lookupname …
Continue reading Why is `[|inputlookup…]` in the initial search line faster than `|search [| inputlookup…]`? via /r/Splunk

…right up until you're in a situation where you have to have them 🙂 June 04, 2020 at 03:46PM via reddit https://www.reddit.com/r/Splunk/comments/gvgrh0/correct_use_of_aggregate_functions/fsw7rnq?utm_source=ifttt

When my site's been atacked, it's been as high as a few thousand a minute – for hours on end …until it was over I don't have any special WordPress plugins to handle this, though – I use fail2ban on the server, and sometimes add subnets to a .htaccess file blacklist I also make sure …
Continue reading New comment on reddit