
How to Give Splunk Access to Linux Logs
Don’t just give it root access! Process of onbaording Linux logs into Splunk using ACLs.
Don’t just give it root access! Process of onbaording Linux logs into Splunk using ACLs.
A step-by-step guide to setting up Splunk on Windows using WSL with a free Splunk license. We also discuss the different types of Splunk licenses. This guide accompanies the video tutorial on my YouTube channel.
Splunk Admin Config Service (ACS) API is a super powerful tool that allows you to manage your Splunk Cloud instance programmatically. In this post, I’ll showcase some use cases for Splunk Cloud’s ACS API as well as provide some real-world examples.
Let’s take a look at how to automatically delete old logs when using Syslog-NG. This doesn’t just apply to Syslog-NG, but it’s a common use case.
In this guide, we will walk you through the process of creating a Syslog-NG configuration that caches and organizes syslog data on disk. Additionally, we will delve deep into the structure of the config, examining each option we utilize. Finally, we will explore configuring ‘catch-all’ entries.