Overall Satisfaction with Splunk
Overall the experience with Splunk has been good. Although some aspects of UI are little annoying when the query exceeds certain limit the text-area gets bigger and there is no way of knowing if the query is actually running or just hung up. Considering the amount of data being pumped everyday Splunk is very good tool for analyzing and creating reports. Another aspect which can be enhanced is of creating public dashboards which enables all the users to see them just with a link and also to delete them when not needed. Overall very good tool and have had a positive experience with it.
- Finding Oracle stats
- Getting request types based on users i.e. sorting capabilities
- Creating reports and charting based on data
- UI could be improved i.e. the query text-area behavior
- Creating reports publicly and deleting them is little non-intuitive for users
For queries with more than a week's data usually will time-out also sometimes query doing lot of things for a days' worth data can time out. There are options where the process can be executed in the background but there isn't a way of knowing if the job failed to fetch the data.