Splunk
Splunk take any type of data of millions of entries and allows you to process it into reports, dashboards and alerts.
It’s great at parsing machine data. We can train Splunk to look for certain patterns in data and label those patterns as fields.
Planning Splunk Deployments
A note on config files
Everything Splunk does is governed by configuration files. They’re stored in /etc and they’ve .conf extension.
They’re layered. You can have files with the same name in several directories. You might have a global level conf file and an app specific conf file. Splunk check which one to use based on the current app.