FreeNAS dashboard (?) for Splunk

[diskdiddler]

The FreeNAS twitter account just tweeted out this link.
https://splunkbase.splunk.com/app/2940/#/overview

I don't know what splunk is and the writing in the guide may indicate it's not even a free application, does anyone know much about this or how to get this running? Any thoughts on this.

 

[Steve Brown]

I am interested in this as well.

 

[toadman]

Splunk is a log management and "operational intelligence" application. (According to them, but it's pretty accurate.) Check it out at the website. You can design dashboards of all sorts.

It's a commercial product. There is a free version that limits data ingestion to 500MB per day I believe.

 

[Pointeo13]

I'll have to check this out, I use splunk at work and at home, love it but expensive as f'k! This year I want to make graylog be my forwarders so I can send my important data to splunk and the rest to graylog, should save a lot of money on licenses going that route.

 

[max322223]

If you generate less than 500MB worth of logs per day, you can use splunk for free. Above that it costs nontrivial amounts of money. On the positive side though, it is magic. As in "any sufficiently advanced technology is indistinguishable from magic". Dashboards and visuals are cute, but realtime querying across bunch of servers and arbitrary time ranges is just killer (IMHO). When then unsavory stuff starts hitting the fan, the errors are searchable in splunk seconds later (we have couple hundred servers reporting to a splunk cluster of half dozen VMs)

 

[Ericloewe]

I assume this is going to be (at least partially) enabled by FreeNAS 10.

 

[c32767a]

I assume this is going to be (at least partially) enabled by FreeNAS 10.

It appears to use the FreeNAS 9.3 API and shell scripts.

 

[Steve Brown]

Well since we are only a few month away from FreeNAS 10 might as well wait and see what we get.

 

[diskdiddler]

Did anyone get this running?

 

[vikozo6]

is splunk something similar then ELK (Elasticserarch, logtash, kobana)?

 

[Vijay]

I was able to follow instructions to get data to splunk. But have no idea how to get the dashboard working similar to what is in the screen shot in the top of this thread. Any help from anyone who has this working?

 

[diskdiddler]

I hope this ends up doable under FreeNAS10 a little easier (eventually)