On Thu, Jun 13, 2013 at 11:35 AM, Jonathan Lassoff <j...@thejof.com> wrote: > > In the PRISM context, I highly doubt their using Splunk for any kind > of analysis beyond systems and network management. It's not good at > indexing non-texty-things. > What if you need to search for events that were geographically > proximate to one another? That takes a special kind of index.
I was under the impression stuff like Palantir was used a bit, in this context (but I don't even have nth-hand evidence for that.) -- Noon Silk
