Hi :sheepy: Did u know any cool blog aka cheat-sheets monitoring for Linux like this? Something «i'm too lazy to understand what is critical and wanna read article where guru on the fingers explains exactly what should be monitoring and why»
hey @test_qweqwe
Refer this link https://www.peerlyst.com/posts/splunk-enterprise-security-threat-detection-and-reponse-yuri-livshitz Also if you interested in health monitoring logs of windows and Splunk then there are some plug and play apps which will give you ready-made dashboards and reports https://splunkbase.splunk.com/app/273/ https://splunkbase.splunk.com/app/1680/ https://splunkbase.splunk.com/app/3067/ https://splunkbase.splunk.com/app/3011/ https://splunkbase.splunk.com/app/3777/ https://splunkbase.splunk.com/app/1753/ https://splunkbase.splunk.com/app/3089/
You can explore apps related to windows and linux in the below link https://splunkbase.splunk.com/apps/
I hope that helps you!
View solution in original post
