Splunk Search

How do i extract backdoor info from a linux log file into my splunk dashboard ?

rkris
Explorer

splunk_qns3_p1.PNGsplunk_qns3_p2.PNGsplunk_qns3_p3.PNGsplunk_qns3_p4.PNGsplunk_qns3_p5.PNG

I have uploaded the log file containing the backdoor information above into splunk but i'm not sure how to create a search query to present it in my dashboard?  Do I need to extract any fields from this?

Labels (3)
0 Karma

richgalloway
SplunkTrust
SplunkTrust
Yes, you need to extract fields to present data on a dashboard. Check splunkbase (apps.splunk.com) to see if there is an app available to extract the fields for you. If there isn't one, you can do it yourself. It isn't hard and we'll help, but we need copy-able text rather than screen shots to work with.
---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Get the T-shirt to Prove You Survived Splunk University Bootcamp

As if Splunk University, in Las Vegas, in-person, with three days of bootcamps and labs weren’t enough, now ...

Wondering How to Build Resiliency in the Cloud?

IT leaders are choosing Splunk Cloud as an ideal cloud transformation platform to drive business resilience,  ...