Solved: Re: Infosec App for Splunk Dashboard- Malware Dash... - Splunk Community

All Apps and Add-ons

Hi,

Will the result on the Malware dashboard also change when we already clean the detected malware?

Thanks!

1 Solution

Solution

Hi @crizelle, the logic here is not specific to the InfoSec app but applies to many other dashboards you see in Splunk:

Malware events come into Splunk with time stamps
When you look at the Malware dashboard, it displays events in the past 24 hours by default but you can select a different time window (see screenshot below)
If your anti-malware tool does not keep reporting on old malware events, the events will not show in the new time window

View solution in original post

Solution

Hi @crizelle, the logic here is not specific to the InfoSec app but applies to many other dashboards you see in Splunk:

Malware events come into Splunk with time stamps
When you look at the Malware dashboard, it displays events in the past 24 hours by default but you can select a different time window (see screenshot below)
If your anti-malware tool does not keep reporting on old malware events, the events will not show in the new time window

Get Updates on the Splunk Community!

Updated Data Type Articles, Anniversary Celebrations, and More on Splunk Lantern

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

A Prelude to .conf25: Your Guide to Splunk University

Heading to Boston this September for .conf25? Get a jumpstart by arriving a few days early for Splunk ...

4 Ways the Splunk Community Helps You Prepare for .conf25

.conf25 is right around the corner, and whether you’re a first-time attendee or a seasoned Splunker, the ...