fighting the lack of good ideas
I had a decent library of documentation, templates, hand-offs, slide decks, etc in my pre-Splunk consulting life (technically, I still have them). It’s nice to be finally getting a decent collection to draw from for my customers in my post-automation consulting life.
Had a customer recently ask about to disaggregate a Splunk search that had aggregated fields because they export to CSV horribly. Here’s the thing. You can’t disaggregate aggregated fields. And there’s a Good Reason™ too: aggregation, by definition, is a one-way street. You can’t un-average something. Average is an aggregation function. So why would you…
Splunk’s | stats functions are incredibly useful and powerful. There are two, list and values that look identical…at first blush. But they are subtly different. Here’s how they’re not the same. values is an aggregating, uniquifying function. list is an aggregating, not uniquifying function. “Whahhuh?!” I hear you ask. Here’s a prime example – say…
While you should never be the one to burn the bridge of a relationship, sometimes you need to be aware that the other person had placed dynamite around the joints, soaked the whole shebang in gasoline, and is walking around on top with a lit road flare: and you don’t want to be around when…
Manning Publishers has a liveBook offering. And it allows for the type of mini transactions (through their self-hosted “token” system) that I proposed when writing about how I’d dumped Pi-hole last year. Quoting from their recent announcement email Book publishers follow a simple rule: put your content behind a solid paywall. At Manning, we believe…
continue “manning is doing something similar to my bucket proposal” »
But always carry a can of gasoline and some matches – because sometimes you do need to be the one to break the relationship.
After combing through the docs and several how–tos on deploying the Squid proxy server – none of which really did everything I wanted, of course – I’ve finally gotten to the format below. Installing Squid is easy-peasy – it’s in the standard package repos for the major platforms (CentOS/Fedora/RHEL, Ubuntu/Debian, etc) – so just run…
continue “a fairly comprehensive squid configuration for proxying all the http things” »