Splunk Enterprise Security

How do I run a query to findout blocked inbound traffic from external PAN and F5-ASM

New Member


I am trying to find a query to run to find out all blocked inbound traffic from my external PAN and F5 ASM. Can someone please show me show that is done. Any assistance would be greatly appreciated.

I look forward to your response.



0 Karma
Don’t Miss Global Splunk
User Groups Week!

Free LIVE events worldwide 2/8-2/12
Connect, learn, and collect rad prizes and swag!