[163603] in North American Network Operators' Group
Re: Prism continued
daemon@ATHENA.MIT.EDU (Eugen Leitl)
Thu Jun 13 02:47:43 2013
Date: Thu, 13 Jun 2013 08:47:33 +0200
From: Eugen Leitl <eugen@leitl.org>
To: nanog@nanog.org
In-Reply-To: <CAHsqw9sivWnTeZ=76dDHFGJchJkGWaovK+C2k7STH7CgHNMwmw@mail.gmail.com>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Wed, Jun 12, 2013 at 06:35:35PM -0700, Jonathan Lassoff wrote:
> In the PRISM context, I highly doubt their using Splunk for any kind
> of analysis beyond systems and network management. It's not good at
> indexing non-texty-things.
> What if you need to search for events that were geographically
> proximate to one another? That takes a special kind of index.
PostgreSQL has PostGIS, but I doubt it's high-performance.