Monitoring Splunk

continuously monitor any local event Log windows 10

YANN84
New Member

I am a data analyst interested in Security that have been reccently introduced to Splunk that I am learning on my own now. I was wondering how I can monitor any event on the local event Log ? here is what I do :

I go to the local event log after clicking the Monitoring option, then select System. In the input settings I change the app context from Search & Reports to Monitor console. The events looks structured when I am done , but nothing is appearing on the visualisation tab;

How can I have a visualisation of my monitoring. I do not mind monitoring anything else; I just need to see the graph. I guess

Tags (1)
0 Karma

HiroshiSatoh
Champion

What kind of graph is necessary?
Please check how to use STATS, CHART, TIMECHART etc.

ex.
sourcetype="WinEventLog:System"|timechart count by EventCode

0 Karma
Get Updates on the Splunk Community!

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics GA in US-AWS!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...