32 ms·
We use Splunk at my organization to handle alerting and paging (and lots of other things). Generally speaking, it works out pretty well for us. If you're a Spl
by meowface 12y ago
We use Splunk at my organization to handle alerting and paging (and lots of other things).
Generally speaking, it works out pretty well for us. If you're a Splunk query guru you can also correlate and/or combine multiple disparate logs in elaborate ways to create more complex alert conditions.
The same can presumably be done with Elasticsearch/Logstash/Kibana.
We're actually security incident response, not reliability incident response, so our goals and methods differ a bit but the core concepts are all the same.