I am new to Splunk and would really appreciate some guidance or advice on how to do the following: I have some log files that I wish to build a search/report that correlates them. I have loaded them into Splunk as separate log sources via the "Choose Data From File or Directory" option. I followed the documentation to do this and they now appear as separate log sources in the search app. The logs are of the following systems: IDP/S Firewall NAT DHCP Domain Controller Antivirus I wish to correlate them by linking together certain fields of each source type to create a report of an instance of network incident such as malware threat picked up by Antivirus. This should then show the full path, step by step through the log sources above. I am conducting this for a university project on logs that I have generated. I would really be grateful for any help or guidance anybody can offer. Many thanks, Elliott ... View more