How to Make a Syslog-NG Config with Examples

How to Make a Syslog-NG Config with Examples

In this guide, we will walk you through the process of creating a Syslog-NG configuration that caches and organizes syslog data on disk. Additionally, we will delve deep into the structure of the config, examining each option we utilize. Finally, we will explore configuring ‘catch-all’ entries.

January 19, 2024 · 13 min · 2567 words · Emlin
How to Install Syslog-NG on Linux - Ubuntu and Debian

How to Install Syslog-NG on Linux - Ubuntu and Debian

In this guide, we’ll walk you through the process of installing Syslog-NG on your Ubuntu or any other Debian-based Linux distribution. Syslog-NG is a powerful logging and event management tool used widely in cybersecurity and system administration. Follow these steps to get it up and running on your system.

January 18, 2024 · 2 min · 372 words · Emlin
Finding and Replacing Encrypted Secrets in Splunk Configurations

Finding and Replacing Encrypted Secrets in Splunk Configurations

Have you ever needed to locate and replace encrypted secrets in your Splunk configurations? It’s a tricky task that requires careful handling. In this article, we’ll guide you through the process.

December 8, 2023 · 3 min · 453 words · Emlin
Demystifying Splunk Index Retention Settings

Demystifying Splunk Index Retention Settings

Splunk’s index retention settings might seem tricky because they involve various options. If you don’t fully understand these configuration options, you could encounter problems like data being deleted too early or not being removed as expected. Let’s explore some important index retention settings in indexes.conf.

October 4, 2023 · 6 min · 1231 words · Emlin
Splunk - How to Delete Events/Data from Splunk

Splunk - How to Delete Events/Data from Splunk

In this guide, we will go through the two main methods you can follow to delete events from Splunk.

August 30, 2023 · 5 min · 933 words · Emlin