All Apps and Add-ons

How to setup threshold for brute force accelerated data model splunk queries

sudhirsks
Loves-to-Learn Lots

Searching for last one brute force login attempt failure from sources and host  getting multiple results,so need to setup threshold to tune the traffic

 

Labels (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust
Please describe your use case more. What exactly are you looking for? Have you looked at the Brute Force Login Attempt examples in the Splunk Security Essentials app?
---
If this reply helps you, an upvote would be appreciated.
0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!