On Sun, 11 Aug 2013, Corey Quinn wrote:
On Aug 11, 2013, at 1:03 PM, Yves Dorfsman <[email protected]> wrote:
On 2013-08-10 21:29, Derek Balling wrote:
Veering slightly off-topic, I remember when I asked them to quote me out a license when I
was at Answers.com ... for "a couple hundred" servers and their system and web
traffic and error logs.
They - literally - quoted me a number that was eight digits long, before the
decimal point.
Their licenses are based on the amount of log you index per day. If you didn't
provide them with an estimate of how much log you'd consume per day, then
somebody probably did a very pessimistic (for you) estimation.
This is a *problem*, and I can't seem to get anyone at Splunk to care, at least
openly.
If your entire business is predicated upon analysis of large volumes of data, encouraging
your customers (via your pricing model) to log *less* data is at direct cross purposes
with the long term growth of your company. "Oh, we can use Splunk for X as
well!" gets said a lot, but it's not going to happen unless you've got the data that
relates to X already in Splunk to begin with, so you can start seeing the connections
that could be made.
Until that winds up shifting somehow, I feel like there's a giant untapped
market out there that they've got a fit-for-purpose solution for, that they'll
never be able to capitalize on.
Disclaimer: I love Splunk. I just wish I could *afford* it!
There s no perfect solution to licensing. I much prefer the Splunk data-per-day
approach to something that charged for the total data available, or per-cpu
licensing.
That being said, Splunk is a fabulous tool for doing ad-hoc searches of data,
but it's a poor to middling platform to build reports, dashboards and alerts on.
It makes it really easy to create them, but unless you are really careful in how
you do so, it's really easy to create them in _really_ inefficient ways.
Especially with their licensing costs, you are probably better off using other
tools to generate alerts, reports and summary data (even if you then put the
summary data into Splunk for it to display in a dashboard)
David Lang
_______________________________________________
Discuss mailing list
[email protected]
https://lists.lopsa.org/cgi-bin/mailman/listinfo/discuss
This list provided by the League of Professional System Administrators
http://lopsa.org/
