topic Splunk Customized dashboard creation in Knowledge Management

Splunk Customized dashboard creation

sankardevarajan — Tue, 14 May 2024 14:30:37 GMT

Need a report based on previous day
I have source ip segment xx.xx.xx.xx/28, & destination ip segment xx.xx.xx/24

outcome of query should provide below

Date and start + end time of the connection
USERNAME
APPLICATION:PORT & PROTOCOL
APPLICATION SEGMENTS
ACCESS POLICY NAME
ACTION
how can i create customized dashboard, please suggest.

Re: Splunk Customized dashboard creation

ITWhisperer — Tue, 14 May 2024 14:34:16 GMT

Start with a search that returns the data you are interested in visualising. Do you have this already?

Re: Splunk Customized dashboard creation

sankardevarajan — Tue, 14 May 2024 15:39:08 GMT

No. i dont have customized dasboard, can you please share some reference query?

Re: Splunk Customized dashboard creation

ITWhisperer — Tue, 14 May 2024 15:42:15 GMT

You don't need a dashboard to create a search - just use the search and reporting interface to find the events you are interested in. Do you know what these events are?