Monitoring Splunk

continuously monitor any local event Log windows 10

YANN84
New Member

I am a data analyst interested in Security that have been reccently introduced to Splunk that I am learning on my own now. I was wondering how I can monitor any event on the local event Log ? here is what I do :

I go to the local event log after clicking the Monitoring option, then select System. In the input settings I change the app context from Search & Reports to Monitor console. The events looks structured when I am done , but nothing is appearing on the visualisation tab;

How can I have a visualisation of my monitoring. I do not mind monitoring anything else; I just need to see the graph. I guess

Tags (1)
0 Karma

HiroshiSatoh
Champion

What kind of graph is necessary?
Please check how to use STATS, CHART, TIMECHART etc.

ex.
sourcetype="WinEventLog:System"|timechart count by EventCode

0 Karma
Get Updates on the Splunk Community!

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...

Splunk MCP & Agentic AI: Machine Data Without Limits

Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization uses ...