Lessons Learned: Upgrading a Splunk Instance with No Downtime

Upgrading a single machine's instance of Splunk is easy. All we need to do is stop the instance, download either the .tar or the .rpm, and then either untar or yum install the package, restart Splunk, and voilà, we have an upgrade!

Splunking The Billboard Hot 100 with help from the Spotify API

There's a lot of data out there and once we put it into Splunk, there's a lot of interesting information we can pull out of it, so why not have a trip down memory lane and see what sort of songs pop up when going through the Billboard Hot 100 charts from now back to 2000?

First, I found a scraper for the data - thank you Allen Guo for your Billboard charts scraper - and output the data in this format: 

date | title | artist | weeks | delta | current | peak | previous | spotifyID

I did so with this python...

Moving? Don’t leave anything behind...

My client was creeping up on their massive Splunk infrastructure migration to all new hardware and they wanted a quick and simple way to be sure that the knowledge objects in their environment were migrated successfully and nothing important was left behind. 
I suggested a solution that would utilize the various REST API searches that are available to gather this information and present it in a simple way.
We came up with a list of the knowledge objects and other important items they had in their environment. We ended up starting with the...

Stay In Touch