I have been lost for four days in Elastic/Kibana documentation.
If this message reaches you, send help. And snacks.
And maybe a saner SIEM setup. I am in peril.
@mttaggart I am about to start down that hole myself.
@mttaggart once I tried to do this I understood why splunk gets away with charging so much money.
@tehfishman It's crazy. I include both as options in The Homelab Almanac and the ease of setting up Splunk is embarrassing.
@mttaggart there is no such thing called sane SIEM
@jan But sane*er*. Like still in the negatives, but closer to 0
@mttaggart reading this gives me anxiety. I tried it once. It was a lot.
@motoridersd I've used it many times for many things, but I'm currently attempting to:
- Really understand the details of the config
- Fully automate a Fleet Server setup
These are notably difficult, it would seem.
