About nelsons

nelsons · ‎09-20-2010

Info : my eventtypes are : host="x.x.x.x" Built outbound TCP connection for outside host="x.x.x.x" Built outbound UDP connection for outside and when I search using these I find exactly the data I am looking for

nelsons · ‎09-20-2010

I'm not sure this is going to work for me, because as well as the firewall builds there are also the associated teardowns when the connection timer expires, these are also based on TCP or UDP. surely if I can search the logs and get the responses I want to see with two different eventtypes (one for TCP and one for UDP) I can display them on the same graph??

nelsons · ‎09-20-2010

Thanks Simeon, I do have an eventtype so I'll try that. Many thanks !

nelsons · ‎09-20-2010

Hi I am new to splunk so please bear with me if this is a noob kinda question. I am taking syslogs from our Cisco ASA 5510 and have managed to create a single graph of all the denied traffic to the external FW interface. I would now like to create a graph with two elements to it, the are all the FW Builds for both TCP and UDP packets, I can create the search to show either TCP or UDP builds or a search to show both but I am unsure how to show both on the same graph for my dashboard. Any help would be great. Thanks Steve

Posts	4
Solutions	0
Karma Given	0
Karma Received	0
Member Since	‎09-20-2010

Online Status	Offline
Date Last Visited	‎06-05-2020 02:02 AM

Cisco ASA Tcp / UDB Builds in the same graph

Re: Cisco ASA Tcp / UDB Builds in the same graph

Re: Cisco ASA Tcp / UDB Builds in the same graph

Re: Cisco ASA Tcp / UDB Builds in the same graph

Cisco ASA Tcp / UDB Builds in the same graph