Ho Ho Ho, time to go
Simon Duff - Ho Ho Ho, Time To Go!
Big Data Specialist
Simon Duff - Ho Ho Ho, Time To Go!
Visualising Service Status with Emoji Splunk dashboards can host a variety of different visualisation types, from maps and charts to 3D globes. Its also possible to use something as simple as Emoji. Inspired by this app , I propose the use of the following mapping of severity to emoji. Splunk ITSI is a service monitoring tool that can intelligently assign severities to services based on underlying…
What I’m Doing Now Last Updated: 04 June 2018 Location I’ve returrned to South Korea for a different customer (a large ISP), with which I’m developing machine learninng security use-cases. Current Focus Splunk Apps need to be completed! This page inspired by nownownow .
vim commands for bulk incrementing One common task required as part of Splunk administration was that of managing the serverclass.conf file 1 . This file contains a list of servers that belong to a particular class, and all machines of that class receive a particular set of configuration files. A particularly frequent and some-what annoying task is adding and removing servers from each class list.…
Hammerspoon Hammerspoon is a OS X utility that provides a high level of customisation to control the working environment. Using it, one can specify configuration where events such as mouse clicks and drags, and keyboard shortcuts can be used to trigger scripts or alter the environment as one prefers. Caps Lock For many, the caps lock key is one of the most useless keys on modern keyboards; rarely…
Simon Duff - Invisilink Google Play and the Google Play logo are trademarks of Google LLC.
Enough vim to be dangerous My occupation means that I’m usually working at a different customer from one week to the next. There is little time to configure the operating environment I’m working, so I have become some-what proficient at using vim using the out-of-the-boxes defaults. Different distributions may ship with a different set of defaults, but it is usually enough to be efficient by…
Processing Excel XLSX files with Python Using Python’s ElementTree XML Parser, its possible to quickly parse data within a Microsoft Excel .XLSX file. An .XLSX file consists of a large number of XML files that are compressed into a single .ZIP file. Some Spreadsheets make large use of sharedStrings, where are strings that are stored in a separate XML file ( sharedStrings.xml ) which then acts as…
Monty Hall Problem simulated in Python In light of the recent news that Monty Hall has passed away , I thought I would get around to posting a simulation I had written a while ago. The Monty Hall Problem The Monty Hall Problem is a puzzle that seems to contradict common sense. The problem can be stated as such: On a game show, there are 3 doors. Behind one door is a car, while the other doors hide…
Sitemap pings for GitHub-hosted Jekyll sites What is a sitemap? According to a news release by Google, Yahoo and Microsoft, a sitemap is a free and easy way for webmasters to notify search engines about their websites and be indexed more comprehensively and efficiently . Essentially, it is an XML document that describes the various pages of a website, including their relative importance and update…
Colophon How does this marvelous web site work? Site Generation and Hosting This website it hosted on GitHub Pages , which integrates Jekyll, a static site generator. You can find the source for the site at http://github.com/sduff/sduff.github.io . Previously, I had written a custom site generator, called WASTE , but found I was spending more time working on it than I did writing content for the…
Splunk Alert Script A Splunk alert is a search that is periodically run, and if there are any results, an alert action can be run. This is a custom script that can be used to iterate over the search results and perform a task with the found fields. This process is documented , but the key takeaways are summarised on this page. Alert Script Arguments When Splunk fires an alert action, there are…
Restricting the Splunk Time Range Picker The Splunk time range picker is a convinient widget for selecting froma variety of different timeframes for a search. There are several ways that this timepicker can be customised, but they are rather heavy-handed, in that they affect the whole app or system to which they are applied. As mentioned in the documentation , the list of Preset time ranges can be…
Splunk I’ve been using Splunk for almost 10 years, after first being introduced to it as a Security tool while I was working at a major Australian bank. So impressed with the product, I joined the company, and have been a Professional Services consultant with them ever since. What the Splunk? We Make Machine Data Accessible, Usable and Valuable to Everyone Splunk provides a mechanism for the…
Using Python for testing network connectivity More and more Linux distributions have stopped shipping with basic networking tools such as telnet installed by default. ping is still available (sometimes), but to test if a server can communicate with another server on a particular port is now a challenge. However, I find python is installed more-often-than-not, and ships with networking libraries…
A simple REST server in Python Using Python’s BaseHTTPServer , its easy to build a very simple REST server, very handy for prototyping. In no way should this be used in a production environment! When visiting, via GET a page that doesn’t exist, a very simple upload page is presented. Revisiting the page will cause that file to be downloaded or viewd. You need to manually (eg, using CURL) POST to…
About Simon Duff Simon was born and raised in Melbourne, Australia. He now spend much of his time traveling between various Australian cities for work, and Singapore, to spend time with his wife and children. He is a Professional Services Consultant for a leading Big-Data company, which allows him to work with many large enterprises. Each client has their own unique set of use-cases and…