create a custom alert that fires when a host bigins listening on suspicious ports.

[rambeeram]

Hi .

i tried to create an alert when host listens to suspicious port.

can anyone help me out with the same. 

[Nisha18789]

hi @rambeeram , is there any event log when a host begins to listen on suspicious ports in your Splunk logs?