Lisa Lorenzin, Juniper Networks
You must have Flash installed and Javascript
enabled to view this video.
Description:
Lisa Lorenzin, Consulting Engineer with Juniper Networks, talks about using Splunk's search features.
Interop NYC 2007
Date: Dec 12, 2007 | Runtime: 01:24
Permalink
http://fr.splunk.com/view/SP-CAAACG5
Transcript
Lisa Lorenzin
Interop 2007 Transcript
00:00
My name is Lisa Lorenzin. I'm a consulting engineer with Juniper Networks. My first Interop was, Interop, Las Vegas, and I was putting in network access control to make sure unauthorized systems couldn't access the NOC network without going through one of us first.
00:20
The Splunk server and the Splunk log searching was extremely helpful because I was trying to juggle a Radius Server, a back-end Infranet Controller, and all sorts of end-points connecting to the networks. So, I had users trying to get on the network, and we would have authentication failures because they didn't have the right EAP method or they didn't have their mac address in the system.
00:40
So the Splunk search capabilities were really helpful, because if I was looking for a particular user authentication that was failing I could easily build a search for that. I could build a search for a class of authentication failures.
00:51
Show me all the mac addresses that have tried to get on the network and failed. You can do all this with the Radius logs, but it's incredibly painful. You end up doing a lot of grepping, and a lot of visual difs to try to figure out what's going on. So, having the Splunk tools available really made that happen a lot faster.
01:04
I had never seen Splunk before I showed up at hot stage. And, being able to just sit down, pull the interface up and start working... I actually only probably used about five percent of the functionality available, but that five percent was incredible. And I'm sure if I actually took the time to get to know the product better, I'd be doing even more.