Splunk Enterprise Security

IS IIS and Apache logs of any use in enterprise security

ranjitbrhm1
Communicator

I was looking at our enterprise security and wondering weather IIS or apache logs are playing any significant role in the application. There are a few GB's of logs available. So if brought in will it form part of any of the prebuilt panels or do i have to write my own queries in respect to ES.

0 Karma
Get Updates on the Splunk Community!

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics GA in US-AWS!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...