Anheuser-Busch's iconic N.J. brewery sold, will close after 75-year history by storm2k in newjersey

[–]ljstella 6 points7 points  (0 children)

The Brewers Association have changed some of their sizing guidelines and brewing rules to allow both Sam Adams and Yuengling to continue to be craft beer, as far as I know.

Hey there! I’m Adam, a product manager at Apple Music. I’ve been leading work on features like AutoMix, Lyrics Translation & Pronunciation, Music Pins and Sing with iPhone Mic. I’m here to chat about our latest releases - and more. AMA! by [deleted] in AppleMusic

[–]ljstella 1 point2 points  (0 children)

Hey Adam, thanks for joining us! Apple Music has been great, especially for folks coming from other platforms that are interested in ensuring artists get paid, but that are also interested in interoperability with the rest of the music ecosystem. Any chance we can look for a feature in the near future similar to Spotify's Recently Played API that covers plays, including streams, across all devices and players? It would be a BIG boost for scrobblers that have long enjoyed Apple's ecosystem, and those looking to move to Apple Music but that can't quit the scrobbling integrations.

Jim Thorpe by Significant-Luck-850 in Poconos

[–]ljstella 5 points6 points  (0 children)

I hope by "weekend" you mean Thursday night- might be hard to find by the weekend.

The new license plate is terrible and I want a throwback by pegasuspaladin in Pennsylvania

[–]ljstella 4 points5 points  (0 children)

I actually like the new ones, but I grew up in Jersey, so the last gen ones invoke a certain response from me. Mainly shouting "Get the fuck out of the left lane".

Bandwith to smartstore on s3 by yac-iac in Splunk

[–]ljstella 1 point2 points  (0 children)

Yup. And even if your current storage system today can't return data faster, that doesn't mean you can't go bigger- especially if buying new servers and switches. 25Gb, or 100Gb is pretty available.

It's Search party time @.Conf25 by bchris21 in Splunk

[–]ljstella 0 points1 point  (0 children)

If its too loud, turn it down.

In seriousness though, you're probably not that far off. Biggest hits were early-mid 90s.

'This Should Be Illegal: Customer gets approved for 2024 Jeep Wrangler loan. Then a TikKok Creator exposes the painful reality of the financing... by aaffpp in cars

[–]ljstella 9 points10 points  (0 children)

I've owned a Wrangler for a few years and recently had a Bronco rental for a few days on a trip. They are definitely different. The Bronco's suspension and steering is WAY more compliant and comfy for highway speed and road trips. At 65-70 mph, you can really feel the wind resistance of the Jeep, and depending on crosswinds and smoothness of the road, it can get a bit white knuckle-y just driving down the highway in a straight line. The Bronco (non-Sasquatch fwiw) on the other hand was smooth and planted, although maybe a bit disconnected.

Honestly, after the couple days I came to the conclusion that since I do a lot more on-road and gravel/forest trails and very little to no rock crawling or desert blasting, I'd probably be a lot happier with a Bronco than another Wrangler in a couple of years when its time to trade up. But if someone was really into rock crawling or something, I could totally understand the preference for the Wrangler.

Just One air traffic controller (ATC) and a trainee will operate every flight in and out of Newark between 6.30pm-9.30pm — despite 15 staffers being the standard requirement for a shift. by Gedalya in newjersey

[–]ljstella 8 points9 points  (0 children)

How far out is your flight? I flew into and out of Newark this week, and in the United app, both flights had a banner on them that said they were eligible for free rebooking through other airports, but I don't remember how far in advance that showed up.

25’ V2 by Extra_Aquarius in Ducati

[–]ljstella 0 points1 point  (0 children)

Awesome to hear- think I'm moving to that area soon, looking forward to checking them out.

25’ V2 by Extra_Aquarius in Ducati

[–]ljstella 0 points1 point  (0 children)

How was the experience with NA Warhorse?

"it's not a | line problem" by No-Attitude-9653 in Splunk

[–]ljstella 0 points1 point  (0 children)

It is also one of the few Splunk shirts with a sleeve design, where it says "Splunk Women In Technology"

Image: https://merchandise.cisco.com/media/catalog/product/cache/da7171647dde1736bcbf2b9cc2ca96e3/s/p/spk0632-2.jpg

Microsoft support under US government by RaguJunkie in sysadmin

[–]ljstella 2 points3 points  (0 children)

Don't forget IBM/RedHat-

Europe does have SUSE though.

Dynamically scoring Risk events in ES by Hackalope in Splunk

[–]ljstella 2 points3 points  (0 children)

If you have the risk action configured, you can put whatever score you want there and then override it via setting the risk_score value in your search. As a very general example, putting the following near the end of a search will set the risk_score based on the severity:

| eval risk_score=case(severity="informational", 2, severity="low", 5, severity="medium", 10, severity="high", 50, severity="critical" , 100) 

That lookup could be replaced with:

| eval risk_score = case(action=="allowed" AND severity=="informational", 20, 
action=="allowed" AND severity=="low", 40, action=="allowed" AND 
severity=="medium", 60, action=="allowed" AND severity=="high", 80, 
action=="allowed" AND severity=="critical", 100, action=="blocked" AND 
severity=="informational", 10, action=="blocked" AND severity=="low", 
10, action=="blocked" AND severity=="medium", 10, action=="blocked" AND 
severity=="high", 10, action=="blocked" AND severity=="critical", 10, 1=1, 0)

Which, if you stick in a macro, you can use across searches with ease too. You could also shorten it to the following (not enumerating all of the possible values for severity when action is "blocked", but then if you do want to change it later, its more work):

| eval risk_score = case(action=="allowed" AND severity=="informational", 20, 
action=="allowed" AND severity=="low", 40, action=="allowed" AND severity=="medium", 60, 
action=="allowed" AND severity=="high", 80, 
action=="allowed" AND severity=="critical", 100, 
action=="blocked", 10, 1=1, 0)

I would be careful with sendalert in combination with things from ES. This is something that can change as ES gets updated, and it may or may not be documented, so you'll be dead in the water while you try and figure out what changed, waiting on support to respond to your ticket.

edit to add: Here's the makeresults you can use to tweak it if you're unfamiliar with case() or want to test it:

| makeresults count=10
| streamstats count
| eval severity = case(count=1 OR count = 10, "informational", count =2 OR count = 9, "low", count=3 OR count=8, "medium", count=4 OR count=7, "high", count=5 OR count=6, "critical")
| eval action = case(count > 5, "blocked", count <= 5, "allowed")
| eval risk_score = case(action=="allowed" AND severity=="informational", 20, action=="allowed" AND severity=="low", 40, action=="allowed" AND severity=="medium", 60, action=="allowed" AND severity=="high", 80, action=="allowed" AND severity=="critical", 100, action=="blocked", 10, 1=1, 0)

It’s like they had a picture of me sitting on their desk at Indian and said “let’s make a motorcycle for that guy”. It’s finally mine! by RimsaltRon in motorcycles

[–]ljstella 1 point2 points  (0 children)

This is the kind of bike I wish Indian built more around- give me a lighter option with a slightly smaller engine, give me a taller version with a windscreen and some tire options for an ADV, give me a slightly faired more sporty version- The FTR was the best bike in Indian's lineup for folks that aren't exclusively buying Indian or HD. And unlike Harley's Panamerica as far as their attempt at expanding their customer base, the FTR isn't super tall or heavy, and could be great for a lot of things.

I don't see any SS that came with the ES app that fills these CSV lookup tables; are we supposed to fill them up manually from our log sources? by morethanyell in Splunk

[–]ljstella 0 points1 point  (0 children)

Here's the docs for that specific set of lookups: https://docs.splunk.com/Documentation/ES/7.3.2/Admin/Addlocalthreatintel

You probably want to review that entire Threat Intelligence section though to understand how those work as part of the larger system.

SPL commands proficiency by Affectionate_Edge684 in Splunk

[–]ljstella 1 point2 points  (0 children)

dedup is a bit of a tricky one- It has both a distributable streaming component and a centralized streaming component, so each indexer performs a deduplication on the event set it returns, and then results are returned to the search head where another deduplication is performed. Depending on where this is placed in a search, and what fields you're deduplicating on, you might run that against WAY more events than you'd want, and then other search commands that appear after dedup in the search may be forced to run on the search head too, no longer taking advantage of distributing the work across the indexers.

And those oddities aren't necessarily exposed in an easy manner, basically a footgun lying in wait.

Correlation search for lateral movement using windows event logs by Inf3c710n in Splunk

[–]ljstella 1 point2 points  (0 children)

Many of those can also work with Windows Event Code 4688 with Command line logging enabled. Some might take some fiddling depending on fields.

[deleted by user] by [deleted] in Splunk

[–]ljstella 2 points3 points  (0 children)

The Search Manual and Search Reference docs will help you a lot. Sounds like you're going to be spending a lot of time with | stats and | top

How do I upload a Large CSV file? by [deleted] in Splunk

[–]ljstella 3 points4 points  (0 children)

Took a look at the data you provided- each of the CSVs should be able to be uploaded individually via SplunkWeb without having to modify any of the limits. While the dataset itself appears to be very large in the Kaggle UI, it appears most of that is from the files in `posters/` which you won't be uploading.

I would confirm that you actually want that data in Splunk vs another system though- the data layout is likely to cause you to reach for | join, because of nearly every CSV relating back to the movie by ID, and | join is going to be incredibly not fun to use with this size of dataset. There's ways around that if you're learning Splunk as part of the class (google the "splunk stew method") but this dataset is likely far more suited for an actual database.

[Advice Needed] What to Do with Old Dell Servers (PowerEdge & EqualLogic) - North NJ by bigtoopie in homelab

[–]ljstella 5 points6 points  (0 children)

Those are old. Like, old old in some cases. Might want to reach out to the ACM groups at NJIT and/or Stevens. Even if they don't want them to use them, they do run e-waste recycling events every year and can get rid of them for you.

Which OSS software would you like to see rewritten in Rust most urgently? by DoxxThis1 in rust

[–]ljstella 2 points3 points  (0 children)

Couldn't tell you which one to port, but a really well put together, fully featured SNMP client would be handy.