ServerWatch: Dig Deep, Display Shallow With Splunk
Apr 10, 2006, 10:30 (0 Talkback[s])
(Other stories by Charlie Schluting)
"Splunk, Inc. has received plenty accolades lately, mostly as a
result of its effort in making Splunk, its flagship product,
available with an open source API. Splunk seeks to parse every log
file within an IT infrastructure, and it then correlates the data
in a meaningful way. After it consumes tons of data, Splunk's Web
interface makes it very easy to grok the root cause of most issues
without having to manually peruse tons of separate log files.
"Splunk's main purpose is to figure out relationships between
disparate and seemingly unrelated data. During the development of
Splunk, they studied how expert systems administrators made
correlations in their heads, and realized that this could all be
done in software..."