Dashboards & Visualizations

How to Analyse the application Logs before implementing splunk , to come up with alerts/dashboard and reports ?

raj_mpl
Path Finder

Hi all,

How to analyse the unstructured log and come up with a plan to create the appropriate alerts/dashboard and reports before going to splunk implementation .

Thank you all for your valuable time ..

0 Karma

kmorris_splunk
Splunk Employee
Splunk Employee

I would recommend downloading the free version of Splunk on your desktop/laptop and ingesting a sample of the log. This will allow you to analyze the log and play with it before pushing it to your production Splunk instance. This is assuming you already have Splunk in production. Either way, you can download Splunk from splunk.com and use it for free for up to 500MB of ingestion per day.

adonio
Ultra Champion

or you can ask the log developer what to pay attention to and what they need to be alerted or reported on

Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

 (view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...