What is Santa bringing your Splunk instance?

jplumsdaine22 — Wed, 23 Dec 2015 17:24:59 GMT

We asked Santa to teach users to use the same timestamp format in every log file

Re: What is Santa bringing your Splunk instance?

lguinn2 — Tue, 29 Dec 2015 02:53:19 GMT

Here is a present for your developers: Logging best practices

Happy New Year!

Re: What is Santa bringing your Splunk instance?

acharlieh — Tue, 29 Dec 2015 06:01:23 GMT

Albeit fictitious and and possibly a little off due to the late hour, this seemed like the most appropriate answer:

On the first day of Splunk-mas my company gave to me
A money cannon for my next license.

On the second day of Splunk-mas my company gave to me
Two quick ref Cards,
And A money cannon for my next license.

On the third day of Splunk-mas my company gave to me
Three New Databases,
Two quick ref Cards,
And A money cannon for my next license.

On the fourth day of Splunk-mas my company gave to me
Four .conf passes,
Three New Databases,
Two quick ref Cards,
And A money cannon for my next license.

On the fifth day of Splunk-mas my company gave to me
Five Black Tshirts,
Four .conf passes,
Three New Databases,
Two quick ref Cards,
And A money cannon for my next license.

On the sixth day of Splunk-mas my company gave to me
Six Certs Encrypting,
Five Black Tshirts,
Four .conf passes,
Three New Databases,
Two quick ref Cards,
And A money cannon for my next license.

On the seventh day of Splunk-mas my company gave to me
Seven Apps Installing,
Six Certs Encrypting,
Five Black Tshirts,
Four .conf passes,
Three New Databases,
Two quick ref Cards,
And A money cannon for my next license.

On the eighth day of Splunk-mas my company gave to me
Eight Proserve Hours,
Seven Apps Installing,
Six Certs Encrypting,
Five Black Tshirts,
Four .conf passes,
Three New Databases,
Two quick ref Cards,
And A money cannon for my next license.

On the ninth day of Splunk-mas my company gave to me
Nine sourcetypes parsing,
Eight Proserve Hours,
Seven Apps Installing,
Six Certs Encrypting,
Five Black Tshirts,
Four .conf passes,
Three New Databases,
Two quick ref Cards,
And A money cannon for my next license.

On the tenth day of Splunk-mas my company gave to me
Ten teams onboarding,
Nine sourcetypes parsing,
Eight Proserve Hours,
Seven Apps Installing,
Six Certs Encrypting,
Five Black Tshirts,
Four .conf passes,
Three New Databases,
Two quick ref Cards,
And A money cannon for my next license.

On the eleventh day of Splunk-mas my company gave to me
Eleven virtual trainings,
Ten teams onboarding,
Nine sourcetypes parsing,
Eight Proserve Hours,
Seven Apps Installing,
Six Certs Encrypting,
Five Black Tshirts,
Four .conf passes,
Three New Databases,
Two quick ref Cards,
And A money cannon for my next license.

On the twelfth day of Splunk-mas my company gave to me
Twelve Beefy Boxes,
Eleven virtual trainings,
Ten teams onboarding,
Nine sourcetypes parsing,
Eight Proserve Hours,
Seven Apps Installing,
Six Certs Encrypting,
Five Black Tshirts,
Four .conf passes,
Three New Databases,
Two quick ref Cards,
And A money cannon for my next license!!!!

Re: What is Santa bringing your Splunk instance?

jplumsdaine22 — Tue, 29 Dec 2015 10:27:37 GMT

The Splunk team should youtube this for next christmas

Re: What is Santa bringing your Splunk instance?

lguinn2 — Wed, 30 Dec 2015 18:31:08 GMT

Awesome answer

topic Re: What is Santa bringing your Splunk instance? in #Random

What is Santa bringing your Splunk instance?

Re: What is Santa bringing your Splunk instance?

Re: What is Santa bringing your Splunk instance?

Re: What is Santa bringing your Splunk instance?

Re: What is Santa bringing your Splunk instance?