Splunk Assistance: How to create dashboards in Splunk?

SplunkDummy33 — Wed, 23 Aug 2023 17:30:29 GMT

I am a student at Embry-Riddle Aeronautical University and i am attending MISA 532 Intgd Threat Warning Attk EIS. Our semester project is to create a dashboard using Splunk and adding panels each week. I am requesting assistance because i have been able to download Splunk successfully but have not been able to use Splunk to create dashboards. I am asking if someone can assist me in dashboard creations to be able to fulfill my class requirements.

I am tasked to create three panels;

Access Denied/Privilege Escalation. how many failed attempts or PE were recorded.
Failed Log in. How many failed login attempts were detected by company users.
Social Media (OSINT). A dashboard showing OSINT information for employees.

Re: Splunk Assistance: How to create dashboards in Splunk?

gcusello — Thu, 24 Aug 2023 06:28:03 GMT

Hi @SplunkDummy33,

your question is just a little vague, because, before arriving to create a dashboard, you should have ingested the data in your Splunk and have the knowledge to create the search that's the base for each dashboard, then you should know the matter of your dashboard (in your case MISA 532 Intgd Threat Warning Attk EIS) that means to know the fields and values that you can find in your data.

In other words: dashboards is the last step in your activity!

About data ingestion, see some video about getting data in: https://www.google.com/search?q=splunk+getting+data+in&rlz=1C1VDKB_itIT1048IT1048&oq=splunk+getting+data+in&gs_lcrp=EgZjaHJvbWUqCwgAEEUYExg7GIAEMgsIABBFGBMYOxiABDIGCAEQRRg8MgYIAhBFGDwyBggDEEUYPNIBCDQ5MDZqMWo3qAIAsAIA&sourceid=chrome&ie=UTF-8

About search creation, see the Splunk Search Tutotial: https://docs.splunk.com/Documentation/SplunkCloud/latest/SearchTutorial/WelcometotheSearchTutorial

At least, about dashboard (using Dashboard Studio), you can see at: https://www.google.com/search?q=splunk+dashboard+studio&sca_esv=559635945&rlz=1C1VDKB_itIT1048IT1048&sxsrf=AB5stBgBS3RZfbGreHysHppw4IkpdRKr7Q%3A1692858189178&ei=TffmZNW2CoD-7_UPn5C7sAU&ved=0ahUKEwiVkZWY1PSAAxUA_7sIHR_IDlYQ4dUDCA8&uact=5&oq=splunk+dashboard+studio&gs_lp=Egxnd3Mtd2l6LXNlcnAiF3NwbHVuayBkYXNoYm9hcmQgc3R1ZGlvMggQABiABBjLATIIEAAYgAQYywEyCBAAGIAEGMsBMggQABiABBjLATIIEAAYgAQYywEyCBAAGIAEGMsBMggQABiABBjLATIIEAAYgAQYywEyCBAAGIAEGMsBMggQABiABBjLAUjaKVAAWJwbcAB4AZABAJgBeqABiQ2qAQQ1LjExuAEDyAEA-AEBwgIEECMYJ8ICDBAjGIoFGBMYgAQYJ8ICBxAjGIoFGCfCAgoQABiABBgUGIcCwgIFEAAYgATiAwQYACBBiAYB&sclient=gws-wiz-serp

Ciao.

Giuseppe

topic Re: Splunk Assistance: How to create dashboards in Splunk? in Getting Data In

Splunk Assistance: How to create dashboards in Splunk?

Re: Splunk Assistance: How to create dashboards in Splunk?