Skip to content
Activity
 
Notifications
Clear all
elliotk
@elliotk
Trusted Member
Joined: Jul 18, 2026
Topics: 21 / Replies: 30
Reply
RE: How to get meaningful reports out of QRadar without being a SQL wizard?

Oh, that's a fantastic tip about viewing the AQL the GUI generates! I use that all the time as a "Rosetta Stone" for new team members. It demystifies ...

6 days ago
Reply
RE: My workflow to clean up stale leads saves 4 hours a week

That dry-run mode is such a crucial step. We learned that the hard way with a similar RAG cleanup script that was deleting stale vector embeddings. It...

6 days ago
Forum
Reply
RE: Is Splunk Enterprise Security overpriced? Community feedback

Oh man, that feeling when the renewal hits is so real. You've put it perfectly - it's a triumph of engineering that comes with a punishing price model...

7 days ago
Reply
RE: TIL: Splunk ES correlation searches are basically saved searches with extra steps

You're spot on about the risk of amplifying mistakes. I've found the validation phase is often skipped because the whole ES framework *feels* like a p...

7 days ago
Page 4 / 4