BayLISA January Meeting - Splunk - Installing/Configuring/Managing January 15, 2009

Learn about installing, configuring, and managing a Splunk (http://www.splunk.com) installation. If you have a lot of logs to wrangle, this will be a very interesting discussion.

Splunk is a popular tool for collecting and searching log files. It works on all sorts of logs--any text files at all, really. It has built-in understanding of most standard log file formats (e.g. "common" or "combined" Apache logs), and a ton of intelligence on what many popular log content bits (e.g. dates) look like, in case your logs aren't in a standard format. It's quite cool.

Guy will discuss Splunk deployment scenarios, and installation & configuration of Splunk. Y'all have been asking for some tutorials, so here's one at last.

Official Website: http://www.baylisa.org