Team,
Are there any working sample to create a POC on Splunk Anomaly Detection using Logs messages. In our senario we need to notify admin if any login failure /Error received we need to notify an alert.
Thanks Uma
Two of the Starting points would be
1) Machine Learning Toolkit App 2) Splunk Security Essentials App
Some of the good blocks to read: 1) Anomaly Detection with Splunk IT Service Intelligence and Machine Learning Toolkit v3.2 series 2) Hunting With Splunk Series 3) Advanced Statistics Splunk Documentation
