Knowledge Management

Splunk Customized dashboard creation

sankardevarajan
Explorer

Need a report based on previous day 
I have source ip segment xx.xx.xx.xx/28, & destination ip segment xx.xx.xx/24 

outcome of query should provide below

  • Date and start + end time of the connection
  • USERNAME
  • APPLICATION:PORT & PROTOCOL
  • APPLICATION SEGMENTS
  • ACCESS POLICY NAME
  • ACTION
    how can i create customized dashboard, please suggest.
Labels (1)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Start with a search that returns the data you are interested in visualising. Do you have this already?

0 Karma

sankardevarajan
Explorer

No. i dont have customized dasboard, can you please share some reference query?

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

You don't need a dashboard to create a search - just use the search and reporting interface to find the events you are interested in. Do you know what these events are?

0 Karma
Get Updates on the Splunk Community!

Splunk Answers Content Calendar, July Edition I

Hello Community! Welcome to another month of Community Content Calendar series! For the month of July, we will ...

Secure Your Future: Mastering Upgrade Readiness for Splunk 10

Spotlight: The Splunk Health Assistant Add-On  The Splunk Health Assistant Add-On is your ultimate companion ...

Observability Unlocked: Kubernetes & Cloud Monitoring with Splunk IM

Ready to master Kubernetes and cloud monitoring like the pros? Join Splunk’s Growth Engineering team on ...