13 Jun
2013
13 Jun
'13
3:02 a.m.
On Thu, Jun 13, 2013 at 11:35 AM, Jonathan Lassoff <jof@thejof.com> wrote:
In the PRISM context, I highly doubt their using Splunk for any kind of analysis beyond systems and network management. It's not good at indexing non-texty-things. What if you need to search for events that were geographically proximate to one another? That takes a special kind of index.
I was under the impression stuff like Palantir was used a bit, in this context (but I don't even have nth-hand evidence for that.) -- Noon Silk