Getting Data In

Streaming data into Splunk for Analytics

Keblorki
Engager

Hello!

As a newcomer to the world of IT and Cyber Security, i am having some trouble.
I am trying to set up a splunk homelab environment to get some hands on experience with the application.
My hopeful goal is to be able to import or stream some data to a splunk dashboard to be able to mess a round and learn for starters, but eventually set up my own home network monitoring system.

Ive been able to statically import some local logs and read them over, which is fine. Id like to be able to setup a better environment for detecting intrusions and analyzing for IOCs.

If anyone has some helpful links or advice i would very much appreciate it!

Labels (1)
0 Karma

kprior201
Path Finder

I'd recommend seeing if your home router/firewall can stream syslog and setting up a forwarder to ingest those logs regularly. Install a forwarder on your PC and monitor your windows/linux/whatever you use logs that way as well. I think that would be a good start for messing around with data, at least.

Also, check out https://www.splunk.com/en_us/training/course-catalog.html?sort=Newest&filters=filterGroup1FreeCourse... if you haven't. There's lots of good content there for beginners.

Get Updates on the Splunk Community!

Splunk Observability Cloud’s AI Assistant in Action Series: Analyzing and ...

This is the second post in our Splunk Observability Cloud’s AI Assistant in Action series, in which we look at ...

Elevate Your Organization with Splunk’s Next Platform Evolution

 Thursday, July 10, 2025  |  11AM PDT / 2PM EDT Whether you're managing complex deployments or looking to ...

Splunk Answers Content Calendar, June Edition

Get ready for this week’s post dedicated to Splunk Dashboards! We're celebrating the power of community by ...