News for hackers. Stuff that matters.
Re:Department of Defense Releases Zero Trust Strategy and Ro... by traceroute66 on Wednesday November 23, 2022 @04:45AM (#33717094)
> just ingest those alerts into Splunk

Aah yes, Splunk....

Good tool, but realistically only viable for those working for a corporate-sized employer with corporate-sized pockets filled with $$$$$$$.

Most people can't afford to simply dump it all into Splunk and (if they are using Splunk at all) have to pre-filter first. Which kind of defeats the point of Splunk if they're already doing the hard work outside, and so might was well use some cheaper (F)OSS tool.

Re:Department of Defense Releases Zero Trust Strategy and Ro... by milkshakes on Wednesday November 23, 2022 @05:58AM (#33717648)
you can do the same type of work with spark, which is free
Re:Department of Defense Releases Zero Trust Strategy and Ro... by rsdbdr203 on Wednesday November 23, 2022 @08:33AM (#33718886)
Working on a startup to basically be 75% of the features of Splunk at 50% the cost: https://log-store.com/

Right now it's 100% free, because I'm just looking for user feedback. I think/hope there is an opening in the market for folks looking for an easy-to-use, but powerful tool like Splunk, but can't afford their hefty price tag. All feedback welcomed!

Also created an open-source ETL tool: https://log-ship.com

Re:Department of Defense Releases Zero Trust Strategy and Ro... by traceroute66 on Wednesday November 23, 2022 @09:03AM (#33719170)
That sounds interesting, I'll certainly give it a go when I get a chance in the near-future !