Image courtesy of: FreeDigitalPhotos.net
Your Splunk Shoe RackWhen splunking with a new customer, one the first things I review when auditing their environment is their index structure. Why? Well there's a lot you can tell about the maturity of a Splunk deployment based on this particular configuration. The old saying that Forrest learned from his mom comes to mind...
"Momma always says there's an awful lot you could tell about a person by their shoes. Where they're going. Where they've been. I've worn lots of...