Splunk App vs Add-On - What's the Difference?
A guide to understanding the difference between a Splunk App and a Splunk Add-On.
Guide
Bearlychilly - Detecting Typosquatting with Splunk and the URL Toolbox App
Splunk users can apply the ut_levenshtein macro from the URL Toolbox app to compare domain names against a reference domain, enabling the detection of potential typosquatting.
How to Make a Syslog-NG Config with Examples
In this guide, we will walk you through the process of creating a Syslog-NG configuration that caches and organizes syslog data on disk. Additionally, we will delve deep into the structure of the config, examining each option we utilize. Finally, we will explore configuring ‘catch-all’ entries.
How to Install Syslog-NG on Linux - Ubuntu and Debian
In this guide, we’ll walk you through the process of installing Syslog-NG on your Ubuntu or any other Debian-based Linux distribution. Syslog-NG is a powerful logging and event management tool used widely in cybersecurity and system administration. Follow these steps to get it up and running on your system.
Finding and Replacing Encrypted Secrets in Splunk Configurations
Have you ever needed to locate and replace encrypted secrets in your Splunk configurations? It’s a tricky task that requires careful handling. In this article, we’ll guide you through the process.