Educause Security Discussion mailing list archives

Re: For those who Splunk


From: Kevin Wilcox <wilcoxkm () APPSTATE EDU>
Date: Wed, 12 Apr 2017 15:56:12 -0400

On 12 April 2017 at 15:42, Garrett Hildebrand <gdh () uci edu> wrote:

3.  What is your per day license?

20 Gigabytes. But we filter-out logs that have no security application.
Without those filters we would need three times that.

Garrett -- what do you generate that you consider having no security
application? An off-list response is fine if you're okay with sharing
but don't want to send it to the world.

kmw


Current thread: