33 ms·
> just ingest those alerts into Splunk Aah yes, Splunk.... Good tool, but realistically only viable for those working for a corporate-sized employer with corp
by traceroute66 4y ago
> just ingest those alerts into Splunk
Aah yes, Splunk....
Good tool, but realistically only viable for those working for a corporate-sized employer with corporate-sized pockets filled with $$$$$$$.
Most people can't afford to simply dump it all into Splunk and (if they are using Splunk at all) have to pre-filter first. Which kind of defeats the point of Splunk if they're already doing the hard work outside, and so might was well use some cheaper (F)OSS tool.
- milkshakes 4y agoyou can do the same type of work with spark, which is free
- rsdbdr203 4y agoWorking on a startup to basically be 75% of the features of Splunk at 50% the cost: https://log-store.com/ https://log-store.com/ Right now it's 100% free, because I'm just looking for user feedback. I think/hope there is an opening in the market for folks looking for an easy-to-use, but powerful tool like Splunk, but can't afford their hefty price tag. All feedback welcomed! Also created an open-source ETL tool: https://log-ship.com https://log-ship.com
- traceroute66 4y agoThat sounds interesting, I'll certainly give it a go when I get a chance in the near-future !