https://community.splunk.com/t5/Splunk-Search/How-do-i-extract-backdoor-info-from-a-linux-log-file-into-my/m-p/513173#M143976 Yes, you need to extract fields to present data on a dashboard. Check splunkbase (apps.splunk.com) to see if there is an app available to extract the fields for you. If there isn't one, you can do it yourself. It isn't hard and we'll help, but we need copy-able text rather than screen shots to work with. Sat, 08 Aug 2020 23:40:40 GMT richgalloway 2020-08-08T23:40:40Z https://community.splunk.com/t5/Splunk-Search/How-do-i-extract-backdoor-info-from-a-linux-log-file-into-my/m-p/513152#M143971 <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="splunk_qns3_p1.PNG" style="width: 914px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/10127i512292BA0AEC4616/image-dimensions/914x16?v=v2" width="914" height="16" role="button" title="splunk_qns3_p1.PNG" alt="splunk_qns3_p1.PNG" /></span><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="splunk_qns3_p2.PNG" style="width: 933px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/10128i21C72FD524C5BFF7/image-dimensions/933x14?v=v2" width="933" height="14" role="button" title="splunk_qns3_p2.PNG" alt="splunk_qns3_p2.PNG" /></span><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="splunk_qns3_p3.PNG" style="width: 750px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/10129i794E63823631EEFD/image-dimensions/750x15?v=v2" width="750" height="15" role="button" title="splunk_qns3_p3.PNG" alt="splunk_qns3_p3.PNG" /></span><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="splunk_qns3_p4.PNG" style="width: 800px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/10130i9608BF2238A7D18C/image-dimensions/800x16?v=v2" width="800" height="16" role="button" title="splunk_qns3_p4.PNG" alt="splunk_qns3_p4.PNG" /></span><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="splunk_qns3_p5.PNG" style="width: 743px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/10131i1AFD31A15A70E42C/image-dimensions/743x13?v=v2" width="743" height="13" role="button" title="splunk_qns3_p5.PNG" alt="splunk_qns3_p5.PNG" /></span></P><P><SPAN>I have uploaded the log file containing the backdoor information above into splunk but i'm not sure how to&nbsp;create a search query to present it in my dashboard?&nbsp; Do I need to extract any fields from this?</SPAN></P> Sat, 08 Aug 2020 15:36:55 GMT https://community.splunk.com/t5/Splunk-Search/How-do-i-extract-backdoor-info-from-a-linux-log-file-into-my/m-p/513152#M143971 rkris 2020-08-08T15:36:55Z https://community.splunk.com/t5/Splunk-Search/How-do-i-extract-backdoor-info-from-a-linux-log-file-into-my/m-p/513173#M143976 Yes, you need to extract fields to present data on a dashboard. Check splunkbase (apps.splunk.com) to see if there is an app available to extract the fields for you. If there isn't one, you can do it yourself. It isn't hard and we'll help, but we need copy-able text rather than screen shots to work with. Sat, 08 Aug 2020 23:40:40 GMT https://community.splunk.com/t5/Splunk-Search/How-do-i-extract-backdoor-info-from-a-linux-log-file-into-my/m-p/513173#M143976 richgalloway 2020-08-08T23:40:40Z