Live data from Hacker News

Cisco Acquires Splunk

splunk.com

191–200 of 525 posts

Re: Cisco Acquires Splunk

#191

I hated Splunk so much that I spent a couple days a few months ago writing a single 1200 line python script that does absolutely everything I need in terms of automatic log collection, ingestion, and analysis from a fleet of cloud instances. It pulls in all the log lines, enriches them with useful metadata like the IP address of the instance, the machine name, the log source, the datetime, etc. and stores it all in S…

I’m sure the Cisco CEO is quaking in his boots thinking about this cronjob

Well today you are doing 100KB log processing, who knows, tomorrow you may end up doing 500KB log processing. It will be All Hands On on late night Friday to eliminate this existential threat.

Re: Cisco Acquires Splunk

#192
post #56

Earlier quoted context omitted.

Apple Weather may be better, but DarkSky is gone and it has not included all the features it used to have, such as hourly rain probability for any day.

Oddly enough this is the one reason why I don't use Apple Weather. I live in Texas - if you don't have covered parking you will inevitably get hail damage. The 1-2 days per week I go into the office I have to check Accuweather beforehand. Precipitation probability is the most important thing in a weather app to me.

You can set up alerts with windy.com to be notified about a location have a forecast combination of wind and rain that may work well for forecasting hail.

Re: Cisco Acquires Splunk

#193

$28 billion - $157 a share Splunk shares were trading at $119.59, so ~31% premium. Cisco lost 4% in premarket trading.

Cisco cash is flowing out to Splunk shareholders so it makes sense that its equity value is X% lower after announcement

There are ~4bn Cisco shares outstanding. CSCO is down $2. So the market thinks that Cisco is overpaying by $8bn, or a 33 percent premium. Seems pretty bang on to me. Score one for the efficient market hypothesis.

Re: Cisco Acquires Splunk

#194
post #19

Earlier quoted context omitted.

GitHub I'm sure there are tons of other, lesser known acquisitions... looking at what Apple acquires - seems relevant to be integrated into their products: https://en.wikipedia.org/wiki/List_of_mergers_and_acquisitio... Oh, wow, they even acquired Intel smartphone modem business at 2019 and other Semiconductor businesses.

> Oh, wow, they even acquired Intel smartphone modem business at 2019 and other Semiconductor businesses. Was the easiest way to put some fire under Qualcomm's arse, RF modems, batteries and displays are the only things Apple doesn't have under their direct control - but for batteries and displays they at least have a selection of competing suppliers. With modems, they're stuck at whatever crap Qualcomm delivers.

For better or worse, Qualcomm has not been delivering crap.

Re: Cisco Acquires Splunk

#195
I wonder if this segment is ready for disruption. Splunk is very expensive, ElasticSearch is still lacking many of the features of Splunk and when hosted on AWS is very expensive. SumoLogic was acquired by private equity, which means that it won't get cheaper. DataDog is also very expensive.

Solution like SnowFlake for logs / telemetry where compute and storage are separated might be the future.

Re: Cisco Acquires Splunk

#196
post #6

Earlier quoted context omitted.

[flagged]

There’s a couple out there, Devo, Exabeam and Sumo Logic are the big three I’ve seen most recently.

Avoid Devo, querying across data sets with their system was hot garbage in comparison to both splunk and elastic. Then when you try and break up with them it becomes a whole thing.

Re: Cisco Acquires Splunk

#198
post #157
post #108

To pile onto the Splunk "love" going on here. Splunk is one of those systems that's too "powerful" for small use-cases, but too expensive for the ones it's really designed for. Anecdote, I once worked with a client that really wanted to get Splunk, but produced so much network traffic that the discounted annual costs were more than the entire budget for the rest of the organization combined. That's staff, the buildin…

Sampling via just enabling it for some hosts/partitions is one solution (if you're producing 100M entries a day ... probably could just grab 1/100 of those for parsing). Another solution is pre-processing (serial dupes are not forwarded). Another solution is heavily reduced logging (ERR or higher only on prod hosts). These can be used together and be very helpful.

All technical workarounds for bad pricing.

Re: Cisco Acquires Splunk

#200
Does anyone ever look at this type of problem - Shipping, ingesting, retaining, searching gigabytes of log files - and stop and think - what if there was another way?

In other words, what if there were no log files?

Intended as a thought experiment.

Post reply on HN