Posts

I Got Rick Rolled by Claude (And Here's the Proof)

Splunk TCP Routing to Multiple Destinations

Managing Precedence in Splunk: Input Routing When Multiple Teams Share Ownership

Securing Splunk End-to-End with Custom Certificates

Populating Splunk Asset Lookups with TA-LDAPSearch

Formatting LDAP Identity Data for Splunk Enterprise Security

Tuning Assets and Identities in Enterprise Security

First-Time Setup of Splunk Enterprise Security: Data Models, CIM, and Taming the Noise

Gitignore for Deployment Server

The First Time I Broke All the Dashboards: Lessons in Field Normalization

Best Practices for Keeping inputs.conf Organized in Shared Environments