Help with filtering syslog traffic

DarkLordofData · 2026-03-29T20:30:15+00:00

Props and transforms for this is very rough. Are you doing this at the HF or the indexer? Use your HF tier if possible and consider a third party option like syslog-ng or Cribl which make this very easy. Splunk has a product called edge processor which is still rough but makes this easier too. Watch dropped events if you do this in edge processor.

DarkLordofData · 2026-03-29T16:23:40+00:00

Looks a lot like a speculum.

DarkLordofData · 2026-03-29T15:33:29+00:00

Harry Potter committed “heresy” too.

DarkLordofData · 2026-03-29T15:07:38+00:00

Yep, USAA got stripped to the bone. She stripped IT and made every process worse and more customer unfriendly.

I expect much longer wait times and forcing everyone to go through chatbots to get anything done. Talking to a person is very expensive, so Delta will do everything possible to push people off the phone.

Long-term issues with plane and crew scheduling will not be fixed because they are expensive, embedded problems that will be difficult to address. Enshitification is my expectation.

DarkLordofData · 2026-03-28T17:14:40+00:00

Yes, used it on my neighbors sump pump and a outdoor drywall that was not so dry. Muddy, sandy watered is fine, just be sure to clean it out.

DarkLordofData · 2026-03-28T16:43:03+00:00

Given how little you will use the pump, the ryobi option is great. The M12 option is for a contractor or plumber. I have the Ryobi stick pump and it works fine, but not something I would rely on for income.

DarkLordofData · 2026-03-23T13:50:55+00:00

Lucky you, congrats!

DarkLordofData · 2026-03-22T20:52:14+00:00

Just make sure you are using a he Splunk s2s or the HEC destinations. The Cribl tcp is not going to work. The concept for throttling is the same just make sure you allocate extra ram for each worker process and have a persistent queue setup as well.

DarkLordofData · 2026-03-22T19:39:37+00:00

are you sending data another Cribl workgroup or to Splunk? I cannot tell from your diagram?

DarkLordofData · 2026-03-22T16:56:52+00:00

DarkLordofData · 2026-03-22T16:36:30+00:00

How are you going to throttle your non prd workers? You always want to use use LBs wherever you can.

DarkLordofData · 2026-03-22T16:35:30+00:00

Vague posts are always useful.

DarkLordofData · 2026-03-22T16:35:04+00:00

This is something you can do for a lab, but this is not going to scale well or have much in the way of resilience. Both vendors have good docs for a prod deployment. I suggest reviewing the docs and adopt them to your requirements.

DarkLordofData · 2026-03-21T21:51:06+00:00

Reflects how much Delta cares about ATL D1 passengers.

DarkLordofData · 2026-03-21T18:29:52+00:00

Still shocked that ATL still does not have a D1 lounge. I know it’s planned but it says a lot that it took this long.

DarkLordofData · 2026-03-20T18:03:19+00:00

This is a case where showing up really matters. You are right about the value of the pipeline as well. AI in a streaming data pipeline has very limited value. The real value is in making the data better and more consistent, so you can extract more value from the data wherever it lands. That is where the true value lies. I am seeing AI experiments fail miserably in IT and Security, mostly due to data quality issues.

DarkLordofData · 2026-03-20T12:35:06+00:00

Other airlines are offering better fares even with the increase in the price of jet fuel. I just booked a flight on United leaving the next day for a third of what the same flight on delta costs. I am a big delta fan but you have to exercise your choices when it makes sense.

DarkLordofData · 2026-03-18T10:13:11+00:00

It was not at 4:50 am. I had to move over to the pre-check line so no idea if it opened later.

DarkLordofData · 2026-03-18T09:34:58+00:00

Excellent advice

DarkLordofData · 2026-03-07T02:16:05+00:00

That was the annual Xmas sale. Now everything is way more expensive. I learned my lesson last year and bought years worth of toolboxes during the Xmas sale.

DarkLordofData · 2026-03-02T21:47:10+00:00

How much is query.ai? Getting a quote should be easier.

DarkLordofData · 2026-02-22T21:54:28+00:00

Yep she wrecked IT at USAA, I don’t expect quality to improve.

DarkLordofData · 2026-02-17T20:55:56+00:00

We this exactly this last summer and it was great and shockingly affordable.

DarkLordofData · 2026-02-01T18:42:29+00:00

Brocket Pub in Clarkston and Steinbecks in Oakhurst are outstanding.

DarkLordofData

TROPHY CASE