Recently I’ve been having a great time playing with Splunk. Splunk is a big data platform that allows you to search practically any machine data and present it in ways that will give you insight into what you have. It has practical applications for application management, IT operations, security, compliance, big data as well as web and business analytics.
I downloaded the free trial version, installed it locally and played with some personal data sources including phone bills, bank statements, my personal twitter archive as well as some weather data I downloaded from the Bureau of Meteorology.
Below are a few of the interesting charts that came out of my Twitter archive (@dan_cake), along with the basic search query used to extract and present the data in this way. Click to view a full-sized version.
Tweets by month
Tweets peaked in July 2010 when I sent on average almost 4 tweets per day. The first drop in usage is probably due to the birth of my first child and then the subsequent months where there was hardly any usage is due to just being too busy at work and at home.
Tweets per hour of day
sourcetype=twitter_csv | stats count BY date_hour | chart sum(count) By date_hour
Most tweets were sent between 9am-5pm but there is an dip around lunchtime and an interesting smaller increase in usage between 9pm-11pm. What really surprised me about this was the volume of tweets sent between 1am and 5am. Drilling down into the data is seems that some of these are due to issues with the timezone of the device I was on.
Tweets sent by Twitter client
sourcetype=twitter_csv | rex field=client "<*>(?<client>.*)</a>" | eval client=lower(client) | top client
Also I was surprised by this. I know I have been searching for the perfect client but had forgotten just how many I have been through!
The search query involved stripping some HTML tags from some of the client values with regex as well as matching on lowercase to get around inconsistencies with the same client having different capitalisation.
defaults write NSGlobalDomain KeyRepeat -int 0
You’ll need to log out and log in again to see the change
It seems with the Lion operating system update the addition of support for IPv6 addresses really slows down any localhost resolutions. As usual, a great answer on StackOverflow supplied the solution, capturing the IPv6 lookup as well as the standard IPv4. Thanks to guns for the solution.
Basically you need to add a value of ::1 for every localhost value:
With regards to overriding domains in the hosts file, I have found that in some circumstances, Lion queries the IPv6 address for a domain if it senses that a domain is unreachable over the IPv4 network.
I discovered this when I noticed some ads that I had never seen before on Snow Leopard because I had redirected the ad domains to 127.0.0.1. I fired up wireshark and noticed AAAA (IPv6 DNS records) queries following the IPv4 A queries (IPv4). The ad servers indeed have IPv6 addesses and were able to serve me their content.
The solution to this is have a “::1” entry for every 127.0.0.1 in your hosts file.
entry for every
entry in your hosts file.
Interestingly, if you happen to have a local webserver running on 127.0.0.1:80 and your browser receives a response from the webserver (error or otherwise), no AAAA query is issued, as it seems to be satisfied that a TCP connection was at least possible.
Recently I had some issues trying to add WordPress plugins through the dashboard. It seemed at first like a permissions issue but apparently with the latest version of WordPress you need to add a line of code to your wp-config.php file to enable this
This forces the file system method and enables you to add plugins again.
Well it has been over a year since my last post, and in that time a great deal has changed. I moved countries, changed jobs, had a baby boy and bought a house!
Also during the last year my work focus has broadened away from being a Flash and ActionScript specialist. As Digital Director of a local agency I now manage all web projects covering a broad range of technology. This means that the posts I’ve been inspired to write are not really relevant to the existing content of this blog: “ActionScript Scraps”. I have decided to continue blogging here, but will change the tone of the blog with new posts.
From now on I hope to be blogging on a wider variety of topics including all web technologies. Going along with this change I feel it is time for a design refresh which will be happening over the next few weeks.