The latest articles on DEV Community by sheriff adelu (@adelusheriff). https://dev.to/adelusheriff https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F4226268%2F1539dc1f-585d-49e9-b7a2-0d32be8f7619.jpg https://dev.to/adelusheriff en sheriff adelu Wed, 04 Nov 2026 13:15:35 +0000 https://dev.to/adelusheriff/who-did-what-and-could-you-prove-it-4jkj https://dev.to/adelusheriff/who-did-what-and-could-you-prove-it-4jkj <p>I wrote up what I found analysing a month of sample web logs in Splunk, including two wrong anomaly searches and why one busy IP wasn't an attacker. For people already running Grafana with Loki, what made you add a SIEM, or did you decide you didn't need one?<br> <a href="https://medium.com/@adelusheriff/who-did-what-and-could-you-prove-it-2d20268bdac1?sharedUserId=adelusheriff" rel="noopener noreferrer">Who Did What, and Could You Prove It?</a></p> cybersecurity devops monitoring ai