HYBRID: DASUG 2nd-Tue Nov 12 LUNCH presents: Wrangling Large Lookup Files After the Fact

Nov 12, 6:00 – 8:00 PM (UTC)

Dallas Area Splunk User Group

Did you know that there are 2 lookup-related limits that you might hit? Everybody knows about busting your knowledge bundle limit but there is another Have you ever started using a mild-mannered, small lookup file and seen it grow out of control beyond your wildest expectations, to the point that the searches (and alerts, and dahsboards) no longer work, but have gotten to be mission-criticail?

About this event

WE ARE MEETING AT LUNCH THIS TIME AND AT THE NEW UT Dallas VENUE

YES, the topic/speaker is changing at the last minute.  It was unavoidable.

Did you know that there are 2 lookup-related limits that you might hit? Everybody knows about busting your knowledge bundle limit but there is another Have you ever started using a mild-mannered, small lookup file and seen it grow out of control beyond your wildest expectations, to the point that the searches (and alerts, and dahsboards) no longer work, but have gotten to be mission-criticail?  Don't let this problem catch you flat-footed and put you in a bind.  Come to tihs DASUG and see how to both get ahead of it, and also resolve it in a pinch!  After this meeting you will walk away knowing:

1) What the 2 lmits are and why you probably should NOT increase them.
2) What to look for to see if you are hitting the subtler/rarer limit.
3) Step-by-step instructions to remediate the problem, one lookup file at a time.

https://splunkbase.splunk.com/app/3796

This will be BOTH a virtual event AND a live event @ NEW BUILDING (SP2) in UTD:
3020 Waterview Pkwy, Richardson, TX 75080

It will also have signs for "SP2" on the building/doors.
Once you go into the building, it will be upstairs in the "Texoma" conference room (12.511).

You must show a parking pass on your dashboard or risk being towed:

https://drive.google.com/file/d/1HVWwqh7OAhB0P5uOZTl2o63q5FMie-of/view?usp=sharingFeelN

Feel free to start the conversation early in the #dallas channel of
splunk-usergroups.slack.com (sign up with http://splk.it/slack).

Virtual Teams Link: https://teams.microsoft.com/l/meetup-join/19%3ameeting_MDM0ZTc4ODYtNzA0My00NmZmLWE3NjgtYzg4MjQ5ZTcwY2Qw%40thread.v2/0?context=%7b%22Tid%22%3a%222cd63174-d293-4ac5-a3c9-d8c89a2bebf1%22%2c%22Oid%22%3a%22a8db61a7-8dfc-4920-a864-28ef5b482b65%22%7d

Speaker

  • Gregg Woodcock

    Splunxter, Inc.

    President

Panelist

  • Gregg Woodcock

    Splunxter, Inc.

    President

When

When

Tuesday, November 12, 2024
6:00 PM – 8:00 PM (UTC)

Agenda

6:00 PMSoft Start
6:30 PMHard Start
7:30 PMQandA
8:00 PMFree Time

Host

  • Gregg Woodcock

    Splunxter, Inc.

    President

Organizers

  • Gregg Woodcock

    Splunxter, Inc.

  • Noah Woodcock

Event Sponsor

Splunxter, Inc. logo

Splunxter, Inc.

Partner

Splunxter, Inc. logo

Splunxter, Inc.

Contact Us