How to process BOTS data?

[zakaria1996-cyb]

Hi everyone,

I'm working with the botsv1 attack-only dataset and I need some guidance on how to approach a few SPL tasks. The dataset is available here:
https://s3.amazonaws.com/botsdataset/botsv1/botsv1-attack-only.tgz

I want to learn how to do the following:

1. Find the 10 most requested domains in the DNS traffic.

2. Identify which calendar day in the dataset has the highest HTTP traffic volume.

3. Create a line chart that shows data volume over time.

I'm mainly looking for advice on how to structure the searches and how to approach the analysis step-by-step.

Thanks in advance.