Solved: Infosec App for Splunk Dashboard- Malware Dashboar... - Splunk Community

All Apps and Add-ons

Hi,

Will the result on the Malware dashboard also change when we already clean the detected malware?

Thanks!

1 Solution

Solution

Hi @crizelle, the logic here is not specific to the InfoSec app but applies to many other dashboards you see in Splunk:

Malware events come into Splunk with time stamps
When you look at the Malware dashboard, it displays events in the past 24 hours by default but you can select a different time window (see screenshot below)
If your anti-malware tool does not keep reporting on old malware events, the events will not show in the new time window

View solution in original post

Solution

Hi @crizelle, the logic here is not specific to the InfoSec app but applies to many other dashboards you see in Splunk:

Malware events come into Splunk with time stamps
When you look at the Malware dashboard, it displays events in the past 24 hours by default but you can select a different time window (see screenshot below)
If your anti-malware tool does not keep reporting on old malware events, the events will not show in the new time window

Get Updates on the Splunk Community!

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...

Data Persistence in the OpenTelemetry Collector

This blog post is part of an ongoing series on OpenTelemetry. What happens if the OpenTelemetry collector ...

Thanks for the Memories! Splunk University, .conf25, and our Community

Thank you to everyone in the Splunk Community who joined us for .conf25, which kicked off with our iconic ...