Hi everyone, I'm working with the botsv1 attack-only dataset and I need some guidance on how to approach a few SPL tasks. The dataset is available here: https://s3.amazonaws.com/botsdataset/botsv1/botsv1-attack-only.tgz I want to learn how to do the following: Find the 10 most requested domains in the DNS traffic. Identify which calendar day in the dataset has the highest HTTP traffic volume. Create a line chart that shows data volume over time. I'm mainly looking for advice on how to structure the searches and how to approach the analysis step-by-step. Thanks in advance.
... View more