Blog

High cardinality metrics can be cumbersome to use and affect your real-world observability capabilities, even when you theoretically have data with more dimensions. Dealing with high cardinality metrics can be challenging because these metrics involve a large number of different values. High cardinality can lead to increased memory consumption, slower query performance and difficulties in […]

How to insert newline to Splunk Alert? This blogpost is a quick one, i couldn’t find answear to do it, so it works all of the times i tried. I have worked with several companies that use Splunk for their time series data and monitoring stack. I don’t usually write all of the queries, but […]

The aim of this blog post is to clear up some of the confusion surrounding various SOC (System and Organisation Controls) reports. These assessments are a set of auditing standards developed by the American Institute of Certified Public Accountants – AICPA. The objective is the evaluation and reporting of controls in organisations. The reports are […]

Just 3 simple and useful Linux networking tricks which sometimes can be useful to quickly achieve what you want. This is nothing special, just handy examples. Get the external IP from within the node Lets say you have node behind WAF, Load Balancer and 7 proxies. Just make sure you have capability to make egress […]

This blog post is not affiliated with or otherwise sponsored by The Linux Foundation. eBPF logo is used following The Linux Foundation Brand Guidelines. I sometimes work with high performance systems, space where nanoseconds matter. EBPF has a great use there. But mostly I work with higher layers, compiled probes, things like Cilium. Another place […]

AWS offers free ECR (Amazon Elastic Container Registry ) container scans once a day (anything over this and you will get billed). Here is quick way how to get free AWS ECR scanning working. In the past I have created code to trigger scans with Lambda (Python boto3 code). But some time ago I have […]

I’ve been implementing Open Policy Agent Gatekeeper policies for Kubernetes for a while, and this post should reflect some tips for getting the policies and underlying components to work in a redundant way. Open Policy Agent Gatekeeper is an awesome admission controller, but implementing it can be a hurdle for unprepared organisations. I have noticed […]

A bit about my background. I’m a Site Reliability Engineer and co-founder of a consultancy. I’m focused on site reliability, security engineering and infrastructure automation. I have worked on Linux hardening and improving cloud security posture for companies around the world. I’ve seen cases where the tools security teams use aren’t being used to their […]