Welcome back to the first Edinburgh Splunk User Group session in 2024. We were hoping to meet in person, but are unable due to conflicts, we're only able to meet online this month.

This month we've got two topics:

Firstly, Laks Ganesan will talk about lessons he learned while undertaking a migration project to a straight forward Splunk Forwarding setup.

Secondly, Tom Wise will go over Splunk Connect for Syslog (SC4S) with a walk-through and demo

Throughout the session, We'll be in the event chat where attendees will be encouraged to bring up issues or ideas they've had with Splunk. If you want to bring your issue to the session, please get in touch with us prior to the event so we can ensure we can help with your issue.

I would also like to plug the session that the London User Group is hosting on the 29th. Do sign up if you're able to: https://usergroups.splunk.com/events/details/splunk-london-splunk-user-group-presents-splunk-london-user-group-thursday-29th-february-2024-inpersonhybrid-splunk-hq/

Online

Our session will be hosted online through YouTube Live.

Agenda

"Lessons learnt from migrating legacy systems to Splunk Forwarding" - Join Laks to hear about discoveries and lessons learnt migrating from Gemini appliances back to a standard forwarding setup and facing many constraints by the customer.

"SC4S walk-through and demo" - Tom Wise will walkthrough and demo a Splunk supported mechanism to ingest Syslog data in a scalable method.

Code of Conduct

We adopt and enforce the Berlin Code of Conduct (CoC) for all our events and all cases of abuse or harassment are dealt with swiftly and in accordance with this CoC.

Any concerns or issues should be reported to the organisers of this chapter:

Andrew McManus (andrewjohnmcmanus@googlemail.com / @Andrew McManus on Splunk Community Slack)

Tom Wise (tom.wise@adarma.com / @phanTom on Splunk Community Slack)

Contributing to the SUG

We are always looking out for new speakers or participants to this SUG. We can be contacted in many ways:

See above for our contact details as well as:

Splunk Community: Interact with us at our Splunk Community Hub page

Slack: Join up to the Splunk Community Slack at http://splk.it/slack and join us at #Edinburgh

LinkedIn: User Group LinkedIn Page