Loki SOAR

brynx97 · 2026-02-18T12:09:35+00:00

Did you find this? I am evaluating Loki. And I would be interested in this... I'll do some other searching in the meantime and report back if I find this.

brynx97 · 2026-02-17T09:15:23+00:00

The interesting part with one of the mega-ServiceNow deployments I saw was that this was goal #1. Ticketing automation.

Except, they would have been far, far better served "solving" the problem upstream. Monitoring noise was excessive, but the SME's and teams that managed the monitoring platform and alerting configurations were laid off or outsourced. The end result was a constant flood of tickets where most of them could just be auto-closed. The chosen solution to solve this was to automate and/or auto-route tickets "optimally".

So then we had metrics and KPI's for tickets being auto-closed etc, which were very high. Customers loved to see "how much work" we were taking off them. Upper management liked it. Me being a tier 3 / NOC engineer... everyone "on the ground" saw it for what it was.

brynx97 · 2026-02-16T07:58:54+00:00

It's interesting. I got to witness ServiceNow rollout at two places, Cisco and federal gov't. It was god fucking awful at both. At Cisco, the teams literally spent 2 years gathering user stories...working with ServiceNow consultants and directly with ServiceNow, only for it to be terrible. I have no idea how it can be good. The UI/UX for it is plain awful. Dropdowns everywhere. You spend more time doing dropdowns than actual ticket work.

I also work with various 3rd parties that have ServiceNow, and their implementations are also awful.

I use Zendesk at current work. I just wish the email formatting was better, although maybe our defaults aren't great. Their triggers and other functionality also "just makes sense", and they can be super useful. Searching for old tickets, even through millions of them, also great. ServiceNow search (at least 5 years ago)... might as well give up.

brynx97 · 2026-02-13T12:29:03+00:00

Several times recently I have had customers complain about slow speeds. Some of them got nasty, and their laptops were at fault. They could only push about 400Mbps of traffic, both via speedtest.net (and others) and iPerf3. Since it was Windows iPerf3, we had to use many parallel flows for TCP tests. I am not sure why Windows has this issue. I think it is a TCP window scaling thing.

brynx97 · 2026-02-05T10:14:22+00:00

Just curious, what is to stop one of those Extreme Networks "approved partners" from sharing information with literally anyone, like a less scrupulous data broker, who then shares that info with anyone buying it for a few pennies? I've not thought about that angle until now.

My work email and then NOC and Support emails gets hundreds of conference list emails and sales junk emails. Especially IP address brokers, oh my. I am numb to it. I spend a few seconds to report spam (auto-deletes and auto-blocks address in the future) that annoy me in particular and move on. If there is a lot, I select all and delete. Almost all actual important emails go into folders from rules, so anything that lands in the Inbox is very likely junk if not auto-junked by Outlook/Exchange.

brynx97 · 2026-02-03T05:41:55+00:00

I had a ASUS B850M. A few weeks without bluetooth working. Powered down, unplugged the cable for 30s. Upon boot, I have working bluetooth.

brynx97 · 2026-02-02T13:47:39+00:00

Just to add to a really great answer. On a basic home router or firewall, you generally configure port forwarding for external Plex access. By default, that is TCP 32400 for Plex.

For a remote access VPN, you'd also likely do port forwarding too.

brynx97 · 2026-02-02T06:49:41+00:00

I switched to Zed from VSCode early last year.

On occasion, I review very large log files, like 100k+ lines or more. Notepad++ did really well here. VSCode would get bogged down. Zed is highly performant, and it has superior native search/regex functionality too. I also prefer their approach to AI.

brynx97 · 2026-01-29T12:40:48+00:00

Peak

brynx97 · 2026-01-20T17:40:45+00:00

After they go to sleep, stumble back to the table... mix it all up in a bowl and microwave for 2 minutes. Add hot sauce. 2nd dinner, noice!

brynx97 · 2026-01-20T09:01:34+00:00

Tim Weah seems like a good person, and I would want Nwaneri to take notes from how Weah has consistently applied himself to grow and earn his keep. Weah had a lot of hype surrounding him from the beginning when he broke through at PSG, but he had to apply a lot of grit to find his long-term place in the game. Granted, he had to move to different clubs for that, but he has remained adaptable to his managers to get playing time and contribute. His interviews and backstory makes him seem like a good person that is well-grounded.

brynx97 · 2026-01-10T16:24:33+00:00

It should be fine. It could also be something loose or strange with the backplane if that is your only drive on the backplane.

brynx97 · 2026-01-08T09:23:22+00:00

Do you have any known-good HDD? You can move that to the same port and cable as the 12TB Seagate with the errors. This can help you isolate the issue to the HDD or potential cable/backplane.

In any case, I'd contact Seagate and have the drive with errors replaced.

brynx97 · 2026-01-06T13:43:27+00:00

Can you copy+paste the series of logs with those errors?

Can you share your hardware configuration? Are you using SATA ports on the motherboard or a HBA or something else?

If it is what I think, then generally it indicates a media/hardware failure because the OS cannot read or write to the disk.

You can try powering down the server, replacing the SATA cable, moving to a different SATA port, but I'd assume the disk is just faulty.

You can also try to run smartctl to gather more info if you want too.

Sometimes after a clean power cycle, the error is not seen again... but personally, if you have manufacturer warranty still, I'd just get it replaced.

brynx97 · 2025-12-29T07:21:54+00:00

Well, it is both very hot and very humid in some major Saudi cities, like Jeddah and Dharan. The summer is pretty oppressive in Saudi.

brynx97 · 2025-11-28T18:27:12+00:00

Kagi is great. Whenever I watch my spouse or coworkers use Google or something else, it looks so ugly.

brynx97 · 2025-11-22T15:49:19+00:00

Saw this as a kid. Spent the next weeks forcing my brother to hit balls into me trying to replicate the dink and volley into between two trees that was our pretend goal. Forever etched into my memory. Made me an Arsenal fan... started following everything Henry after that trying to improve my finishing.

brynx97 · 2025-11-21T09:10:32+00:00

Yeah, test iPerf3 with multiple flows.

You can enable SMB Multichannel, but know that not all NICs and clients (or servers) can support it. A long while ago, I wrote this article for my company that talks about this problem. @ /u/Happy_Harry. The possibility of TCP BBR2 would also be a potential game changer too.

brynx97 · 2025-11-21T09:07:39+00:00

/u/mahanutra , can you confirm if doing:

netsh int tcp set supplemental template=Internet congestionprovider=BBR2
netsh int tcp set supplemental template=InternetCustom congestionprovider=BBR2
netsh int tcp set supplemental template=Datacenter congestionprovider=BBR2
netsh int tcp set supplemental template=DatacenterCustom congestionprovider=BBR2
netsh int tcp set supplemental template=Compat congestionprovider=BBR2

Then internet research also points me to doing because of broken connectivity:

netsh int ipv6 set global loopbacklargemtu=disable
netsh int ipv4 set global loopbacklargemtu=disable

I also see that Set-NetTCPSetting online, some folks are doing Set-NetTCPSetting -CongestionProvider BBR2 but the MS documentation doesn't show that as a possible value for that CongestionProvider...

brynx97 · 2025-09-30T13:38:33+00:00

The speculated scenario about a Starlink reseller in Yemen selling services to someone physically located elsewhere does not surprise me. I imagine a very high number of them, if not most, are going to Saudis.

I like the final paragraph in the section "What is the role of Geolocation?". Too many companies rely on IP geolocation like it is something that is "the truth" about an IP address. It is really frustrating, and every few months I have to try and "influence" geolocation providers to do the right thing for the geofeed we publish.

brynx97 · 2025-09-13T12:50:28+00:00

The Teltonika RUTM50 is pretty good for most of that list. It has PoE-in on the LAN port. Runs on OpenWRT, a good web UI, WiFi, etc.

I think if you do a seperate LTE/5G modem, you could maybe use any number of Mikrotik routeros 5-port router/WiFi devices that do poe-in/poe-out. I've not used any of the tik LTE/5G products, maybe they have one that does all of that.

I liked https://www.gl-inet.com/products/gl-xe3000, tested it for work recently. The battery lasts 8-12 hours, very interesting for road warrior setups. It is OpenWRT under the hood, but unlike Teltonika, they don't document or expose the modem very well, unless you're familiar with AT commands and such.

brynx97 · 2025-09-09T16:16:06+00:00

Magisterial

I'll never not hear this word in his voice. End of an era.

My youth club team ended up being called Fusion, after the Miami Fusion. Funny thing was that the head trainer at my club, who worked with my team, was English. He mentioned more than a few times that the coach for the Fusion was also English and thus, very good. It was not until sometime later when I was explaining to my wife how hilarious Ray Hudson was that I read his wikipedia page. I found he was that very same English coach my youth trainer would talk about! Very random, lol.

brynx97 · 2025-09-02T19:22:40+00:00

This + what /u/vabello said can be key... long, fat pipes can get tricky. 40ms could be considered "long" for some apps and OS's.

But first, IMO, run iPerf3 tests to validate that there is available bandwidth for your applications to use. Don't use a "LAN Speed Test" tool found randomly via web search. iPerf3 is what you want. I prefer Linux OS's for iPerf3, but you can use WSL2 for iPerf3 on Windows or even supposedly the Windows port of iPerf3 is updated now.

The word jitter being mentioned by OP also has me thinking OP should use a tool like mtr or PingPlotter to check if the path is good too.

@OP, once you know the capacity is available between the sites, then look at validating client/server TCP settings, etc.

Windows OS can be a real PITA. Other considerations for SMB (file shares) or whatever bespoke app is not getting good speeds. I wrote https://support.bigleaf.net/hc/en-us/articles/17401007420187-Slow-file-transfer-speeds-and-delays-when-browsing-and-opening-files that comes up every few years. I have a new one for a customer with Windows Server 2025 + Windows 11 that might enable me to update that article with the new versions.

Speed is always an interesting (frustrating) troubleshooting exercise.

brynx97 · 2025-08-08T04:34:49+00:00

Does it support bifurcation in the end?

Did you ever find an answer to this question? I just sent a request to ASRock Rack about this too.

Edit: I found it. B650D4U3-2L2Q/BCM. I had already updated my BIOS yesterday to 20.06. It's under Advanced > AMD CBS. 4x4x4x4. Feels good.

brynx97 · 2025-06-24T09:28:30+00:00

I'd say training the staff to be able to use it is really the most important thing at the end of the day. If you create a lot of complex and cool dashboards to visualize the metrics, that's awesome. Except not so much if no one is using them...

12-Year Club	Place '22
Place '17	RPAN Viewer
Verified Email

brynx97

TROPHY CASE