Probably mostly Splunk Stuff

Routing Logs to Multiple Indexes with props.conf and transforms.conf

Consolidating a Multisite Splunk Cluster into a Single Site

Building a Proving Grounds Environment for Splunk Candidates

Modular Inputs That Don’t Make a Mess