https://community.splunk.com/t5/Splunk-Search/How-do-i-extract-virus-info-from-a-linux-log-file-into-my-splunk/m-p/513145#M143969 <P>&nbsp;</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="splunk_qns2_p3.PNG" style="width: 1086px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/10126iA07A048979F4B436/image-dimensions/1086x19?v=v2" width="1086" height="19" role="button" title="splunk_qns2_p3.PNG" alt="splunk_qns2_p3.PNG" /></span><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="splunk_qns2_p2.PNG" style="width: 1520px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/10125i76BE6B5D1AB903A7/image-dimensions/1520x19?v=v2" width="1520" height="19" role="button" title="splunk_qns2_p2.PNG" alt="splunk_qns2_p2.PNG" /></span><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="splunk_qns2_p1.PNG" style="width: 1999px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/10124i29D39ED79063B4DE/image-dimensions/1999x35?v=v2" width="1999" height="35" role="button" title="splunk_qns2_p1.PNG" alt="splunk_qns2_p1.PNG" /></span></P><P>I have uploaded the log file containing the virus information above into splunk but i'm not sure how to&nbsp;create a search query to present it in my dashboard?&nbsp;</P> Sat, 08 Aug 2020 15:25:51 GMT rkris 2020-08-08T15:25:51Z https://community.splunk.com/t5/Splunk-Search/How-do-i-extract-virus-info-from-a-linux-log-file-into-my-splunk/m-p/513145#M143969 <P>&nbsp;</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="splunk_qns2_p3.PNG" style="width: 1086px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/10126iA07A048979F4B436/image-dimensions/1086x19?v=v2" width="1086" height="19" role="button" title="splunk_qns2_p3.PNG" alt="splunk_qns2_p3.PNG" /></span><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="splunk_qns2_p2.PNG" style="width: 1520px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/10125i76BE6B5D1AB903A7/image-dimensions/1520x19?v=v2" width="1520" height="19" role="button" title="splunk_qns2_p2.PNG" alt="splunk_qns2_p2.PNG" /></span><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="splunk_qns2_p1.PNG" style="width: 1999px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/10124i29D39ED79063B4DE/image-dimensions/1999x35?v=v2" width="1999" height="35" role="button" title="splunk_qns2_p1.PNG" alt="splunk_qns2_p1.PNG" /></span></P><P>I have uploaded the log file containing the virus information above into splunk but i'm not sure how to&nbsp;create a search query to present it in my dashboard?&nbsp;</P> Sat, 08 Aug 2020 15:25:51 GMT https://community.splunk.com/t5/Splunk-Search/How-do-i-extract-virus-info-from-a-linux-log-file-into-my-splunk/m-p/513145#M143969 rkris 2020-08-08T15:25:51Z https://community.splunk.com/t5/Splunk-Search/How-do-i-extract-virus-info-from-a-linux-log-file-into-my-splunk/m-p/513151#M143970 <P>When you ask about the REGEX, please provide sample <STRONG>text.<BR /><BR /></STRONG><A href="https://github.com/Graylog2/graylog-guide-snort" target="_blank">https://github.com/Graylog2/graylog-guide-snort</A><BR /><BR />this is REGEX sample. you can do it.</P> Sat, 08 Aug 2020 16:58:54 GMT https://community.splunk.com/t5/Splunk-Search/How-do-i-extract-virus-info-from-a-linux-log-file-into-my-splunk/m-p/513151#M143970 to4kawa 2020-08-08T16:58:54Z