Hi, Sorry to bother you!! I am kind of lost with this... i have installed severall apps, but i don't know what to do... for example right now i have firepower logs and windows dhcp logs, i do search for both of them and found some patterns,, but i don't know what to do next, i mean maybe i think this works automatically, and when i install the app it will do everything for me.. (there is no real documentacion for the apps that i have installed, it only says what is the purpose but no more details).. I understand (maybe i am wrong) that everything is based on searchs.. but what can i done with the search results?.. and where i will go next.. i read several splunk docs, but maybe i didn't catch the steps/procedure after i got the data into splunk, i understand i need to normalize, but as you said the app will do it for me,, and i don't see that and obviusly i don't see any analitics, if i go to statistics i see "Your search isn't generating any statistic or visualization results." and have this options: pivot, quick reports, search commands. hope you could help me guiding me... best regards and thanks in advance..
... View more
