Macros and Tokens: Getting the Best Use of Them

While at a client recently, I had the task of creating a dashboard with the ability to look at Linux and Windows data's highest points and averages. The Windows and Linux data needed to be viewed separately, but still have the ability to view the data in total. To accomplish this, I created a base search using six macros: two to encompass both operating systems with each calculation mode, and two per operating system for each calculation mode.My first step was to create the macros. This is done by Settings > Advanced Search > Search Macros. Once at this page, click “New”. You will be...


Integrating External Asset Databases with the Splunk App for Enterprise Security

Overview

In this post I'd like to cover an approach for integrating an external asset database with the Splunk App for Enterprise Security (ES).  This post is relevant for people just starting out with ES or who have used it for a while and want to improve the integration of their assets information with the application. 

For those wondering what an assets list is in the context of ES, it's a list containing information (such as ip,...


It's Raining Email

Email Inbox – 1,846,752  You - 0

Feel defeated by the amount of emails in your inbox?  Managing your e-mail inbox can be a chore, especially if you receive hundreds of messages a day. As messages build up, the task of reading and addressing each one may seem impossible, and for most becomes a daunting task. For some, the go-to answer is to ignore some correspondences because most of them are spam or junk and don't require a response.  This isn’t the best solution as one can miss deadlines or get on someone’s bad side if something urgent isn’t addressed in a timely manner....


5 Ways to Beat Creative Block

We've all heard of (and have probably experienced) the much-feared Writer's Block so it should come as no surprise that the designer's version, Creative Block, haunts even the best in the game from time-to-time. Let's face it, when being creative is your lifeline day-in and day-out, it's easy to feel overwhelmed at just the thought of ideating. Is the idea of coming up with yet another innovative, mind-blowing and client-pleasing layout keeping you up at night? You're probably experiencing that dreaded Creative Block. But, not to worry! This is so common among creators that you'll find...


Stay In Touch