News for hackers. Stuff that matters.
Re:Cisco Acquires Splunk by eigenvalue on Thursday September 21, 2023 @09:24AM (#37597262)
It's around 6 data sources on ~25 machines, but it could be easily scaled to way more than that with a bit of work. And I mean less work than it takes to do even trivially simple things using the horrible Splunk API. There are many thousands of small companies using Splunk and getting totally ripped off for a very mediocre product with a rapacious and annoyingly aggressive salesforce.
Re:Cisco Acquires Splunk by tw04 on Thursday September 21, 2023 @09:41AM (#37597481)
I think we're talking about very different levels of scale. Enterprises are generally feeding tens to hundreds of thousands of datapoints into Splunk depending on their size between servers, networking gear, endpoint devices, etc.
Re:Cisco Acquires Splunk by coalbin on Thursday September 21, 2023 @09:28AM (#37597317)
That is a tiny setup all things considered. You aren’t operating at a scale you’d need to consider a monitoring platform for.
Re:Cisco Acquires Splunk by steveBK123 on Thursday September 21, 2023 @09:40AM (#37597472)
You'd be surprised how many companies with infra that small have CTOs get consultant buzzword pilled into buying every SaaS under the sun nonetheless...
Re:Cisco Acquires Splunk by mlhpdx on Thursday September 21, 2023 @11:16AM (#37598894)
How many servers does Stack overflow run on? It’s not a good measure of data volume or criticality.

I think “expensive” here is basically relative to revenue/margin. Where margins are high, spending on Splunk (etc.) isn’t meaningful. Where margins are thin, it hurts.

Basically, the arguments here seem to reflect the markets and business model folks are working under. Some pay, some can’t and some won’t - all valid.

Re:Cisco Acquires Splunk by ilyt on Thursday September 21, 2023 @02:14PM (#37601643)
But you definitely want to, even if it simple ELK stack
Re:Cisco Acquires Splunk by ta1243 on Thursday September 21, 2023 @09:52AM (#37597624)
I have an order of magnitude more machines than you and would never in a million years consider splunk

Right tool for the right job. Splunk is for mega-scale setups

Re:Cisco Acquires Splunk by ignoramous on Thursday September 21, 2023 @09:53AM (#37597633)
> it could be easily scaled to way more than that with a bit of work.

I guess you'd appreciate the words easily and bit are doing a lot of heavy lifting there.

Re:Cisco Acquires Splunk by hk__2 on Thursday September 21, 2023 @12:15PM (#37599835)
> I guess you'd appreciate the words easily and bit are doing a lot of heavy lifting there.

This goes with the previous comment:

> And oh yeah, it's totally free instead of costing my company thousands of dollars a year

Unless you work for free, then something you make and maintain is not "totally free".

Re:Cisco Acquires Splunk by westpfelia on Thursday September 21, 2023 @01:41PM (#37601169)
Liiiiissssteeeennnnn

I havent developed it yet. But my Splunk killer solutions actually scales so big we can use it to walk to the center of the universe. And its only 1 line of Rust and a bash script that runs when ever the Unix clock has 420 in the number string.

Re:Cisco Acquires Splunk by davinci123 on Thursday September 21, 2023 @09:54AM (#37597653)
ya as someone else already noted - Splunk is not for you
Re:Cisco Acquires Splunk by thereddaikon on Thursday September 21, 2023 @10:57AM (#37598605)
Splunk isn't perfect. Managing it is more work than it should be for example. But I've got hundreds of systems I'm pulling logs from and that's not counting infra and applications as well. And my deployment isn't even a large one by their standards. Your use case just isn't the scale where splunk makes sense.
Re:Cisco Acquires Splunk by callalex on Thursday September 21, 2023 @01:36PM (#37601089)
Wait what this is such an important detail. Log aggregators like Splunk start being something to consider when you get to about 25 THOUSAND machines, not 25 machines. I hope that for you, humility will come with experience.