Re: [Blind-sysadmins] Splunk accessibility
Chris: Really good to hear Splunk is pretty accessible. I won't be the primary admin, that's our security team' job, so when you say for a searcher 95% of the web interface is accessible, can you elaborate, what works and what should be avoided? Thanks. Ryan -----Original Message----- From: Blind-sysadmins [mailto:blind-sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Chris Nestrud Sent: Friday, April 22, 2016 11:30 AM To: Blind sysadmins list Subject: Re: [Blind-sysadmins] Active Directory auditing Splunk should be able to provide the data in whatever format you desire, including exporting to csv if Excel is your thing. If you'll be searching, the web interface is I'd say 95% accessible. There is also a command-line interface and REST API. If you'll be administering, everything is ini-style configuration files at the core, so things are good from that standpoint. Interfaces are similar; web for many things, command-line for some, API, or config file editing. I'm in the midst of working with a small team to implement Splunk in a distributed environment. Let me know if you have any questions. Chris On Fri, Apr 22, 2016 at 02:46:42PM +0000, Ryan Shugart wrote:
_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org https://lists.hodgsonfamily.org/listinfo/blind-sysadmins
participants (1)
-
Ryan Shugart