Hurricane Labs has collected a significant amount of security-related data in Splunk as part of the National Collegiate Penetration Testing Competition. This tutorial will walk you through the process of importing this data into your own Splunk instance. We anticipate this data will be beneficial for research and training purposes.

Read more...


Splunk SmartStore is a fundamental change in how Splunk stores data, allowing the use of an S3 compliant object store to store your data. In this article, Tom and Brian will walk you through configuring SmartStore on an existing Splunk instance and cluster, and migrating an existing index to this new storage.

Read more...

This series will help you as you’re working with the Splunk Universal Forwarder (UF). There are a variety of reasons you may not want the universal forwarder running on your machine anymore and, in this portion of the series, Tom will walk you through how to uninstall the Splunk UF. This can help reduce the likelihood of configuration conflicts if you’re migrating to a new Splunk environment.

Read more...



Close off Canvas Menu