Is there an app that has helped you analyze Linux system logs?

[bestSplunker]

linux_secure、linux_message_syslog、linux_audit

The three logs contain a lot of logs about the Linux system itself. We can find many interesting events from them, such as user login behavior, malicious code execution, etc.

If you don't understand the meaning of these logs, it will take a lot of time to analyze these logs. Is there an APP that has helped you analyze the logs and helped you extract alerts or useful information?

What I expect is that I only need to import these logs, which would automatically help me analyze the events and find interesting or malicious events and behaviors.

Can anyone tell me which app can help me analyze these logs? All help would be greatly appreciated.

[inventsekar · Accepted solution]

Hi,
on splunkbase.splunk.com, you could find all splunk apps.

"linux os" gives around 56 apps -
https://splunkbase.splunk.com/apps/#/search/linux%20os

linux and auditd gives 3 apps -
https://splunkbase.splunk.com/apps/#/search/linux%20auditd/

As i read your post, the best one should be - splunk Enterprise Security App(this got some free trials as well, you could try before buying)
https://splunkbase.splunk.com/app/263/

As you are a new user to Splunk Answers, you can upvote the answers/comments,
if this answer resolved your query, you can select this answer and "accept" it as the answer, so that this question will be moved to answered queue. Happy Splunking!