Knowledge Management

Splunk Customized dashboard creation

sankardevarajan
Explorer

Need a report based on previous day 
I have source ip segment xx.xx.xx.xx/28, & destination ip segment xx.xx.xx/24 

outcome of query should provide below

  • Date and start + end time of the connection
  • USERNAME
  • APPLICATION:PORT & PROTOCOL
  • APPLICATION SEGMENTS
  • ACCESS POLICY NAME
  • ACTION
    how can i create customized dashboard, please suggest.
Labels (1)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Start with a search that returns the data you are interested in visualising. Do you have this already?

0 Karma

sankardevarajan
Explorer

No. i dont have customized dasboard, can you please share some reference query?

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

You don't need a dashboard to create a search - just use the search and reporting interface to find the events you are interested in. Do you know what these events are?

0 Karma
Get Updates on the Splunk Community!

Why You Can't Miss .conf25: Unleashing the Power of Agentic AI with Splunk & Cisco

The Defining Technology Movement of Our Lifetime The advent of agentic AI is arguably the defining technology ...

Deep Dive into Federated Analytics: Unlocking the Full Power of Your Security Data

In today’s complex digital landscape, security teams face increasing pressure to protect sprawling data across ...

Your summer travels continue with new course releases

Summer in the Northern hemisphere is in full swing, and is often a time to travel and explore. If your summer ...