Splunk Regex for IP Addresses

Let’s say you’re needing to examine the logs using Splunk to find invalid logins, but perhaps the way the logging works from your application, Splunk is not able to identify the IP Address automatically. This isn’t a problem, you can use a Regex. So let’s say you’re looking for the string “failed login for user … Read more

Simple Splunk Dashboard Example

Splunk is a great tool for visualising alerts and events, I’ve been creating a dashboard to aggregate all the failed logon attempts from management interfaces of our network switches, firewalls, storage etc. so that if someone tries to brute force password attempt the interfaces we have some visibility. Obviously the queries you need to use … Read more

Separate SSL Certificate

Let’s say you have a certificate bundle in PKCS12 format, where you have the Private Key, the Public Key (Certificate Signed by a CA) and the Chain, and you need to break it down into its individual files for use within an application or the like. You can achieve this with the following set of … Read more

AWS S3 Performance Tweaks

We had a need to upload a large volume of data to AWS S3, obviously we want this to upload as fast as possible, we choose to use the AWS S3 Sync tool; however to get the most performance out of it, you need to perform some tweaks to the configuration. Although you can make … Read more

AWS Workstation, SSO Login and No Browser

Here’s a quick example configuration. I’m assuming you already have the AWS CLI packages installed, but if you need to use SSO to login to your AWS Organisation/Account, you can use the following example. AWS CLI Configuration File The AWS configuration file that should be located in: ~/.aws/config, with the contents such as: So let’s … Read more

Quick DD Script for Generating Files

Sometimes it can be useful to generate some files, so you can watch activity, I created this script for this use-case when performing storage updates, I can run this to generate some activity which is made visible to the screen so you can see if and when either expected or unexpected pauses take place. Its … Read more