logoalt Hacker News

UltraSane11/04/20251 replyview on HN

Splunk uses bloom filters to make searching for rare events fast. Rare events are usually the most interesting.


Replies

hinkley11/04/2025

I’ve only used Splunk with one set of devs and maybe we were doing it wrong, but it didn’t feel fast to me.

Several of us were working hard to move everything into Prometheus that made any sense to be in Prometheus instead of Splunk.

Notably any time we had a production issue that it was unclear which team was responsible, Splunk became the bottleneck because we started exceeding quotas immediately.

show 1 reply