Summary

Although containers, namely Docker, have been around since 2013, they are only recently being accepted as a solution in modern organizations at a large scale. Container technology offers organizations flexibility and scalability at a lower cost. In this chapter, we looked at how Docker and Kubernetes work. We also looked at the basic installation and deployment steps for each tool. Finally, we ended the discussion with information on logging and securing containers.

We’ve also reached the end of this book. We looked at the different components that make up Splunk, including indexers, search heads, and forwarders. We installed and configured a simple Splunk deployment in AWS. We used different methods, including the configuration files and Splunk Web, to onboard and normalize data into our environment. Next, we used the Splunk BOTS v1 dataset to learn SPL, including using different types of commands, lookups, and macros. We used the data in the BOTS v1 dataset to...