topic Re: Example data/incidents for ES in Security

Example data/incidents for ES

MichalG1 — Sun, 15 Oct 2023 08:16:41 GMT

Hello Team,

I have my training Splunk instance with ES 7.1.

I have used it for training and experiments. Question: is there any "training/example" data i could use to import it there ? The point is: i do not want to configure dozens of TA's/collectors, create real labs with real cybersecurity attacks, instead would love to have a test data so i could learn/experiment/review Splunk ES capabilities.

Anything ?

Re: Example data/incidents for ES

gcusello — Sun, 15 Oct 2023 13:30:32 GMT

Hi @MichalG1,

have you access to Splunk Show (show.splunk.com)?

if yes, you already have a complete environment for test and training with all the installed add-ons and data.

Otherwise, it's really difficoult to create a relevant data test environment.

Ciao.

Giuseppe

Re: Example data/incidents for ES

PickleRick — Sun, 15 Oct 2023 14:58:12 GMT

You can use BOTS dataset

https://github.com/splunk/botsv3

Re: Example data/incidents for ES

MichalG1 — Sun, 15 Oct 2023 17:17:54 GMT

Looks great, will test it, thx !

Re: Example data/incidents for ES

MichalG1 — Sun, 15 Oct 2023 17:18:54 GMT

I can login there (using my instructor account), but see 0 events (both public and invited), any way to get the access there ? Thanks @gcusello !