I did this presentation at Splunk's 2011 User Conference. I'm working on a video, but if you'd like to check out the presentation in the mean time, its embedded right here from SlideShare.net. Also, a direct download link for the PDF is below.
The SplunkNinja social network is a community for Splunk users, customers and enthusiasts. Share, learn and communicate. Freely.
Help fund SplunkNinja.com
(this site is not funded by Splunk, Inc). There are monthly fees to remove advertising. Help out if you like
Splunk Ninja T-Shirts