Skip the navigation

Splunk sees wiki as troubleshooting systems tool

The company’s tool can search multiple log files for problems

By Patrick Thibodeau
April 3, 2006 12:00 PM ET

Computerworld - The idea behind the Wikipedia, a collaborative, community-built encyclopedia, is being applied by a tools vendor for untangling system problems.

Splunk Inc. has built a wiki it calls the Splunk Base for users to report and share information about systems events from any system, hardware or software. Although anyone can use the wiki and contribute to it, the San Francisco-based company is integrating the wiki’s information repository with its troubleshooting diagnostic tool.

The Splunk software uses its own algorithms to read log files, such as Apache server logs and Windows event files and other system files generated by hardware and software, to find patterns. Via a Web interface, users can search through log files from multiple systems to trace a problem.

The main issue systems administrators face is finding out what is causing a problem, said Splunk CEO Michael Baum. “It’s not fixing the problem, it’s not restarting my servers, it's finding the problem in these complex distributed systems with lots of components.”

The paid version of Splunk software was released in December, and among its users is Varadarajan Krishnaswamy, Web services manager at the American Society of Civil Engineers in Reston, Va. Krishnaswamy initially tried the free version of the tool but recently upgraded to the professional, paid version. Pricing is based on usage.

Krishnaswamy uses the tool on Apache and Sendmail servers and said it has cut his diagnostic time by about half. “I’ve been very satisfied with the project,” he said.

He noted, however, that the Splunk product, which runs on a two-CPU Sun Solaris box, can tax system resources when it's indexing. “It needs a lot of horsepower in terms of CPU and memory,” Krishnaswamy said.

Searches that users conduct will include a link to Splunk Base, which has been operating quietly, with about 3,500 people contributing so far. Splunk Base is intended to serve as a repository for hardware and software system events to help users identify problems. The person in charge of that effort is Patrick J. McGovern III, who is a former director of SourceForge.net, a open-source software development site. McGovern is the son of Patrick J. McGovern, the founder and chairman of International Data Group Inc., which publishes Computerworld.

Cameron Haight, research vice president at Gartner Inc., said he believes the wiki can be valuable because problems reported on it could actually involve multiple products. “The alternative would be to potentially visit many different technology supplier Web sites and to search their technical support pages for similar clues in regards to log messages,” Haight said.

He sees Splunk Base as an extension of what many users now do every day when they run into a problem, which is to rely on search engines to find users with similar problems in the hope of finding a solution. “The potential downside is if the quality of the information becomes potentially suspect, [as] has happened already in the broader wiki environment,” he said.

Read more about Hardware in Computerworld's Hardware Topic Center.



Additional Resources
Forrester Consulting - Optimizing Users and Applications in a Mobile World
WHITE PAPER
Solving application issues over the WAN requires careful consideration. Based on their independent research, Forrester Consulting offers recommendations on how to tackle application performance issues, insufficient bandwidth and the inability to quickly restore users in a disaster.

Read now.

Security KnowledgeVault
WHITE PAPER
Security is not an option. This KnowledgeVault Series offers professional advice how to be proactive in the fight against cybercrimes and multi-layered security threats; how to adopt a holistic approach to protecting and managing data; and how to hire a qualified security assessor. Make security your Number 1 priority.

Read now.

Cut Communications Costs Once and for All
WHITE PAPER
New IP-based communications systems are being deployed by small and midsized businesses at a rapid rate. Learn how these organizations are enabling faster responsiveness, creating better customer experiences, speeding office or mobile interactions, and dramatically reducing existing communications costs.

Read now.

Hardware White Papers
The Laptop Dilemma: How to Maximize Productivity and Lower the Burden on IT
Download Now
Overcome Top 7 Admin Challenges of Active Directory
As Active Directory's role in the enterprise has drastically increased, so has the need to secure the data. Gain insight on creating repeatable,...
Insiders Can Ruin Your Company. Take Action.
Did you know that 80 percent of threats to an organization come from the inside? The threat from insiders is often overlooked in...
Top Solutions and Tools to Prevent Devastating Malware
Custom malware frequently goes undetected. According to Forrester Research, the best way to reduce risk of breach is to deploy file integrity monitoring...
Streamline Compliance and Increase ROI
Streamline, simplify, and automate compliance related activities; especially those that impact multiple business units. This white paper from NetIQ, outlines solutions that will...
All Hardware White Papers
Hardware Webcasts
Optimizing Networks for the Cloud
Join guest speaker, Rohit Mehra, IDC Director of Enterprise Communications Infrastructure, to explore current trends, discuss best practices for optimizing Data Center and...
Apps QuickStart Series Part 2: Designing and Deploying SQL Server on VMware vSphere
Download this webcast to learn about the design considerations for virtualizing SQL workloads, performance and scalability information and high-availability options, as well as...
Apps QuickStart Series Part 1: Designing and Deploying Exchange 2010 on VMware vSphere
Download this webcast to learn the virtual hardware design considerations for Exchange 2010, deployment using the building block approach, options for high-availability and...
Customer Spotlight: How IPC The Hospitalist Company Implemented Oracle on VMware
Have you been looking to hear about customer's experiences with the new VMware vCenter Site Recovery Manager product? View this webcast to learn...
Virtualize Business-Critical Applications with Confidence
Virtualizing business-critical applications has become a key focus for organizations as they move along their virtualization journey. With the launch of VMware vSphere®...
All Hardware Webcasts
Newsletter Sign-Up

Receive the latest news test, reviews and trends on your favorite technology topics

Choose a newsletter
  1. View all newsletters | Privacy Policy
IT Jobs