topic create dashboard to monistor windows event logs in Dashboards & Visualizations

create dashboard to monistor windows event logs

syamsekhar — Fri, 18 May 2018 08:53:43 GMT

How to create a dashabord for windows event log monitoring of different windows servers with categories like application, Security,System . so that it can be filtered easly from dashboard itself

Re: create dashboard to monistor windows event logs

HiroshiSatoh — Fri, 18 May 2018 09:42:31 GMT

I think that you can use this sheet to create panels and combine them.

https://www.malwarearchaeology.com/cheat-sheets/

There is also APP like this.
Windows Event Logs Analysis

Re: create dashboard to monistor windows event logs

niketn — Fri, 18 May 2018 10:24:53 GMT

Check out Splunk App for Windows Infrastructure
Enable the data inputs required for Event Monitoring (also whitelist/blacklist events as per your needs). Following is the Event Monitoring Dashboard available in the App: http://docs.splunk.com/Documentation/MSApp/latest/Reference/EventMonitoring

Re: create dashboard to monistor windows event logs

kvswathi — Fri, 18 May 2018 11:20:58 GMT

As I understood from your question, you need to create a dashboard with different windows servers with categories like application, Security,System.

Use the below query , it will list the event count for each sourcetype for each server . Then you can save it as a dashboard , also you can enable drilldown.

index= | chart count by host,sourcetype