Hello everyone, currently I am investigating a scenario where a user have opened porn sites on several time. but the user denied doing that. we have logs that shows the sites has been opened on the user pc, now is there any way by which we can check whether the  site was open by the user intentionally or the system has been compromised due to which this kind of situation has occurred. the system doesn't have an active anti virus software.   ... View more

Hello everyone, I am facing some issues with log restoration process from azure cloud to splunk . I have gone through the epoch time conversion process to get the exact date for file. then restore the particular file using the shell commands. But right now I want to restore two months of log data in splunk. so the previous process is really time taking and there is a chance that we might miss some of the data for a particular time interval. So is there any way we can restore the two months of date using some prebuild commands or is there any process to ease the task. Thanks in advance.  ... View more