Splunk Enterprise Security

Where do I find already built in Dashboards in Splunk Enterprise & ES

SamHTexas
Builder

Where do I find already built in Dashboards in Splunk Enterprise & ES

Labels (1)
Tags (1)
0 Karma

splunkcol
Builder

What you should know about Splunk ES is that it is more focused on the correlation use cases that it already comes with by default.

These correlation cases are not active, you must activate them according to what you need since there are different types.

Now, if you want to see dashboards, you can see the ones that the tool brings

splunkcol_0-1615997443988.png

if you want to see the correlation events you must enter "Settings" "Content" "Use Case library" and from there you activate or deactivate the use cases that apply to your splunk implementation


splunkcol_2-1615998591679.png

 

 

0 Karma

lkutch_splunk
Splunk Employee
Splunk Employee
0 Karma

SamHTexas
Builder

Thank u for this very much. IT is talking about already built in dashboards in ES. Are there already built in dashboards in Splunk enterprise & where do I find them ( on which Splunk server). Thank u

Tags (1)
0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.


Introducing Unified TDIR with the New Enterprise Security 8.2

Read the blog
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...