2026-08-11 SPLUNK 3 min
Finding the delta in Splunk
Comparing a value to its previous event is one of those things I look up every single time. streamstats does it in one line, and here is the version I keep in my snippets file.
Tags
all 6 spl 3splunk 3actions 1ai 1ci 1claude 1eval 1github 1music 1performance 1practice 1streamstats 1tooling 1
ALL NOTES
2026-07-28 SPLUNK 2 min
Make timestamps human readable
Epoch seconds are fine for machines. For a dashboard someone else has to read, format the field once at search time and never think about it again.
READ NOTE →2026-07-14 AI 4 min
Letting Claude read my repo before it writes
A short CLAUDE.md worth about ten prompts of pasted context — so the agent stops guessing at conventions it could just read.
READ NOTE →2026-07-02 MUSIC 4 min
Practising scales with a click
Two months of metronome work condensed into one take — plus the practice log that made it stick.
READ NOTE →2026-06-19 GITHUB 3 min
Actions cache that actually caches
The cache key was wrong, not the action. Here is the fix that took CI from six minutes to ninety seconds.
READ NOTE →2026-06-05 SPLUNK 5 min
Lookups vs. subsearches, finally
When each one is faster, with the row counts that decided it — so I stop reaching for a subsearch out of habit.
READ NOTE →