topic Re: Server/URL List in Reporting

Server/URL List

downhill345 — Mon, 08 Mar 2021 10:11:51 GMT

Hi everybody,

i need quick help with this:

Please make a corresponding proxy evaluation which servers have accessed which URLs / hosts in the last week.

Thx a lot!!

Re: Server/URL List

ITWhisperer — Mon, 08 Mar 2021 10:39:06 GMT

What data do you have to make this evaluation from?

Re: Server/URL List

downhill345 — Mon, 08 Mar 2021 10:40:08 GMT

We use splunk in our Company. It's connected the to whole infrastructure

Re: Server/URL List

ITWhisperer — Mon, 08 Mar 2021 10:51:32 GMT

Congratulations. So, exactly what data have you put into splunk to allow you to do this evaluation?

Re: Server/URL List

downhill345 — Mon, 08 Mar 2021 10:53:20 GMT

I'm not a pro. But i think i have everything i need... isn't there a possibility to out in a command and see a list fo servers and urls?

Re: Server/URL List

ITWhisperer — Mon, 08 Mar 2021 11:43:56 GMT

Your data will probably have been ingested into splunk and indexed and categorised into different source types with various fields extracted from the events. These are the basic classes of data you will be dealing with. However, your company may have ingested your data in any number of ways so it is difficult for anyone without that knowledge to tell you what you need to do. Do you know what sources, sourcetypes, indexes, etc. you have in splunk? Do you know which index the data you are interested in has been put in?