×

Are you a member of the Splunk Community?

Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
Izz-
New Member
Member since: ‎04-12-2023
‎04-13-2023
Community Statistics
Posts 1
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎04-12-2023
View All

How to do the query for jumpcloud - bruteforce fro...

by in Splunk Search
‎04-12-2023 08:38 PM
‎04-12-2023 08:38 PM
index=* success="false" process_name="C:\\Windows\\System32\\svchost.exe" | stats count as failedAttempts by user | sort -failedAttempts index=* success="false" process_name="C:\\Windows\\System32\\svchost.exe" | timechart count by user | sort by _time I tried do both query but I'm stuck...Need any guidance, thank you 🙂 ... View more
Labels
Contact Me
Online Status
Offline
Date Last Visited
‎04-13-2023 05:33 AM