<story><title>Cisco Acquires Splunk</title><url>https://www.splunk.com/en_us/blog/leadership/splunk-and-cisco-unite-to-accelerate-digital-resilience-as-one-of-the-leading-global-software-companies.html</url></story><parent_chain><item><author>bugsense</author><text>Splunk is a dead player too. It&amp;#x27;s a great match.</text></item><item><author>tw04</author><text>Wow - I guess I&amp;#x27;m both surprised and completely unsurprised.  Surprised because Splunk is a pretty big pill to swallow.  Unsurprised because they&amp;#x27;ve obviously been interested in the space for a long time (they attempted to acquire Datadog and got shot down).&lt;p&gt;&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;realmoney.thestreet.com&amp;#x2F;investing&amp;#x2F;technology&amp;#x2F;cisco-reported-offer-for-datadog-software-ambitions-15096681&quot; rel=&quot;nofollow noreferrer&quot;&gt;https:&amp;#x2F;&amp;#x2F;realmoney.thestreet.com&amp;#x2F;investing&amp;#x2F;technology&amp;#x2F;cisco-r...&lt;/a&gt;&lt;p&gt;Good luck Splunk folks - Cisco isn&amp;#x27;t exactly known for their software innovation in the upper stacks (they still do pretty incredible things at the network OS layer).</text></item></parent_chain><comment><author>sethammons</author><text>Splunk is hands down the best log analysis tooling I&amp;#x27;ve used. If not for the hefty price tag, I&amp;#x27;d use it for my personal stuff and every workplace I&amp;#x27;ve been. Structured logs and Splunk are the stuff dreams are made of if you care about monitoring the quality of software.&lt;p&gt;The logs into metrics abilities along with the ability to unlock finding relationships in data is amazing. Mouse over the fields found in logs matching your search and see the top N values for other these keys.&lt;p&gt;Imagine getting an alert and being able to search your logs for that error message and immediately being able to see it affects these N users disproportionally, that it is split 50&amp;#x2F;50 in two of your seven regions, only affects version X of your service. A couple more searches to dig in and you can see it is only feature Y with setting Z that is the problem. You switch to a timechart view and can see the moment the error started and the affected user counts. A few more minutes and your support team has a list of known affected users. You decide to monitor this new feature so you quickly create a new dashboard (or panel on an existing dashboard) and a new alert. At no time did you have to declare a field of your structured logs as an index or as searchable or aggregatable.</text></comment>
<story><title>Cisco Acquires Splunk</title><url>https://www.splunk.com/en_us/blog/leadership/splunk-and-cisco-unite-to-accelerate-digital-resilience-as-one-of-the-leading-global-software-companies.html</url></story><parent_chain><item><author>bugsense</author><text>Splunk is a dead player too. It&amp;#x27;s a great match.</text></item><item><author>tw04</author><text>Wow - I guess I&amp;#x27;m both surprised and completely unsurprised.  Surprised because Splunk is a pretty big pill to swallow.  Unsurprised because they&amp;#x27;ve obviously been interested in the space for a long time (they attempted to acquire Datadog and got shot down).&lt;p&gt;&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;realmoney.thestreet.com&amp;#x2F;investing&amp;#x2F;technology&amp;#x2F;cisco-reported-offer-for-datadog-software-ambitions-15096681&quot; rel=&quot;nofollow noreferrer&quot;&gt;https:&amp;#x2F;&amp;#x2F;realmoney.thestreet.com&amp;#x2F;investing&amp;#x2F;technology&amp;#x2F;cisco-r...&lt;/a&gt;&lt;p&gt;Good luck Splunk folks - Cisco isn&amp;#x27;t exactly known for their software innovation in the upper stacks (they still do pretty incredible things at the network OS layer).</text></item></parent_chain><comment><author>Covzire</author><text>This might be why Cisco bought them:&lt;p&gt;OMB Memorandum M-21-31[0], “Improving the Federal Government&amp;#x27;s Investigative and Remediation Capabilities Related to Cybersecurity Incidents” which includes directives to ensure event logging goes well beyond the current norms.&lt;p&gt;By all accounts I&amp;#x27;ve heard it&amp;#x27;s going to enrich the fortunes of every single SIEM&amp;#x2F;Log aggregation company out there, pretty much every govt contractor is going to need larger licenses in the next few years as contracts get rewritten with this EO in mind.&lt;p&gt;[0] &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;www.fedramp.gov&amp;#x2F;2023-07-14-fedramp-guidance-for-m-21-31-and-m-22-09&amp;#x2F;&quot; rel=&quot;nofollow noreferrer&quot;&gt;https:&amp;#x2F;&amp;#x2F;www.fedramp.gov&amp;#x2F;2023-07-14-fedramp-guidance-for-m-21...&lt;/a&gt;</text></comment>