How to create a WIDS/IDPS/Internet Content Filtering dashboard in Splunk?

[waJesu]

I need help on how to create a WIDS/IDPS/Internet Content Filtering dashboard in Splunk so that I can continuously monitor the web traffic or pull up reports when asked.

[gcusello]

Hi @waJesu,

your question is just a little bit vague,

could you better describe your requirement, the data source that you need to monitor and the level of your Splunk knowledge?

In the meantime I hint to search in Splunkbase if there's some App (e.g. using your IPS technology) to use as starting point for your activity.

Ciao.

Giuseppe

[waJesu]

I am not very experienced. I would like to monitor the IPS for traffic from the internet. I need to come up with a dashboard. It's the splunk query to use that I am looking for.