- 4chan hell raisers finding fame brings heat?
- The 10 dumbest mistakes network managers make
- NetApp quits bidding war in face of EMC opposition
- CompuServe closes after 30 years
- Google to launch open-source Chrome OS this year

A vendor that searches log files and IT data to uncover security breaches and find the source of service interruptions is unveiling a new version of its product at Interop and will provide troubleshooting for the massive temporary network that powers the Las Vegas conference.
Splunk, which bills its product as the “IT search engine,” Tuesday is announcing Splunk 3.0, with new features such as personalized dashboards, expanded search language and interactive reporting.
Splunk’s search engine has been used by Interop for a couple of years and will once again help uncover potential security problems in Las Vegas this week, says Glenn Evans, lead engineer for the Interop network, which serves 450 exhibitors and 20,000 attendees.
In a previous show, Splunk’s product discovered that a private password allowing access to equipment in the network operations center had been inadvertently released to a public space, Evans says.
One big advantage of Splunk is that it consolidates log files into one location so they don’t have to be searched separately, Evans says.
“We collect all of the logging data and messaging data from all the different network devices and applications at the show, and we let the people who run the network search against that data to resolve problems,” says Splunk CEO Michael Baum.
This involves collecting and searching logs and IT data for a vast amount of unstructured information that changes constantly, he says. In addition to investigating potential security breaches and finding the sources of service interruptions, he says customers use Splunk to help comply with regulations such as the Sarbanes-Oxley Act and the Payment Card Industry data security standard.
New features in Splunk 3.0 include interactive reporting, which eliminates the need for complex data mapping and lets users shift easily from unstructured search to structured reporting.
New personalized dashboards let users receive any report, chart, search or alert on a dashboard. Splunk says it also has added a deployment server that enables “centralized management and control of distributed Splunk deployments across large numbers of applications, servers and devices.”
Improvements to the search language include a feature that lets users adjust the clock on search results. This is useful when analyzing data from many different sources and the clock on one of those sources is inaccurate, Baum says.
Comment