the-blog
Long-form writing, written together.
Most posts here have more than one author. We draft in the same file, argue in pull requests and publish under all our names.
Latest writing
How We Stopped One Splunk Forwarder From Taking All the Traffic
Use of HAProxy, keepalived, and rsyslog to ensure even distribution of both syslog and HEC traffic on three Splunk Heavy Forwarders and how we managed to overcome TCP connection stickiness and absence of the source IP.
- Öykü Can
- Tahsin Güner
