Hi everyone,
I am newbie in Splunk. Now I need do a network Diagram in Glass Tables but I don't know exactly the meaning of security metrics.
Example :
Access - Distinct Apps, Access - Distinct Destinations, Access - Distinct Source, Access - Distinct Users
DNS - Errors, DNS - Messages, DNS - Query Sources, DNS-Unique queries
Email - Cloud Activity
Licensing - Average Events Per Day
Modular Actions - Action Invocations, Modular Actions- Avarage Duration, Modular Actions- Distinct Search Name
Please explain for me or send for me link document about it.
Thank everyone very much
... View more