Jon Rust's repositories
s2_traffic_report
Dashboard showing upload and download stats for SmartStore
hec_perf_report
Some HEC stats
py_hec_token_mgr
Create HEC tokens in Cribl Stream through the API
cluster_masters_status
Overall health of multiple Splunk Cluster Masters
Splunk_Forwarder_Troubleshooter
Help troubleshoot forwarders: Version, last contact, xfer rates, 'interesting' messages and other bits
splunk_clean_orphaned_user
Bash script to remove an orphaned user from Splunk
collector-templates
Templates for Cribl Stream Collectors
cribl-fix_timezone_gap
Cribl Stream Pipeline to automatically fix timezone issues in logs
cribl-hashicorp
PRE-RELEASE Cribl Pack for handling Hashicorp logs
cribl_replay_run.py
Simple proof-of-concept script to call Cribl's API to ad hoc (re-)ingest data from a data lake
indexer_queueing_research
Dashboard to hopefully give insight re: indexer queueing issues
storage_analysis_app
Storage Analysis - Splunk app for reviewing storage performance & configuration
cribl-linux-utils-parsing
A Cribl Pack for handling output from various linux utilities
cribl_code_truncate_fields
Code function that will truncate string fields to specified length
cribl_inline_redux_report
A pipeline to show the volume impact and timing of another pipeline or Pack
cribl_lookupdate
A python script to update a lookup file via the API
search_jobs_report
Show details on search jobs (currently causes OoM error on large clusters)
splunk_ansible_playbooks
Some handy splunk ansible playbooks i've slapped together