About gayathrc

gayathrc · ‎11-13-2023

Hi @inventsekar - you guessed it right! I'm only looking to use Splunk for a small Network Forensics project where I need to demo an attack on an internal network. For this purpose, I need to log the events and ensure that one such events sends out an Event Alert from Splunk. This will aid in investigating the attack. It's not a huge network, the project only requires about 5-6 devices in the internal network.

gayathrc · ‎11-12-2023

Hi! This is a very basic question. First time working with Splunk Enterprise Platform. How do you actually go about switching on the feature to log network traffic coming into an internal network with a specific IP range? I essentially want for Splunk Enterprise to act as a logger for all traffic that enters the internal network on a certain port, for example. How do I go about it? FYI - I do not want to use the Forwarder or upload log files function.

Posts	2
Solutions	0
Karma Given	2
Karma Received	0
Member Since	‎11-12-2023

Online Status	Offline
Date Last Visited	‎11-16-2023 12:28 PM

Logging in Splunk Enterprise

Re: Logging in Splunk Enterprise

Logging in Splunk Enterprise