Splunk Search

How to search for firewall data showing source ip, source port, destination ip, and destination port in tabular form?

abassydo2018
Explorer

Hello,

I am new to Splunk and I need to get a report showing Firewall transactions with source IP and source port, destination IP and destination port in a table format.
Please help and advice

0 Karma
1 Solution

solarboyz1
Builder

Something like:

index=firewall | stats count by src, dest, dest_port, src_port

View solution in original post

0 Karma

solarboyz1
Builder

Something like:

index=firewall | stats count by src, dest, dest_port, src_port
0 Karma

abassydo2018
Explorer

Thank you so much. You rock

0 Karma

abassydo2018
Explorer

It works. Thank you

0 Karma
Get Updates on the Splunk Community!

Monitoring Postgres with OpenTelemetry

Behind every business-critical application, you’ll find databases. These behind-the-scenes stores power ...

Mastering Synthetic Browser Testing: Pro Tips to Keep Your Web App Running Smoothly

To start, if you're new to synthetic monitoring, I recommend exploring this synthetic monitoring overview. In ...

Splunk Edge Processor | Popular Use Cases to Get Started with Edge Processor

Splunk Edge Processor offers more efficient, flexible data transformation – helping you reduce noise, control ...