Monitoring Splunk

continuously monitor any local event Log windows 10

YANN84
New Member

I am a data analyst interested in Security that have been reccently introduced to Splunk that I am learning on my own now. I was wondering how I can monitor any event on the local event Log ? here is what I do :

I go to the local event log after clicking the Monitoring option, then select System. In the input settings I change the app context from Search & Reports to Monitor console. The events looks structured when I am done , but nothing is appearing on the visualisation tab;

How can I have a visualisation of my monitoring. I do not mind monitoring anything else; I just need to see the graph. I guess

Tags (1)
0 Karma

HiroshiSatoh
Champion

What kind of graph is necessary?
Please check how to use STATS, CHART, TIMECHART etc.

ex.
sourcetype="WinEventLog:System"|timechart count by EventCode

0 Karma
Get Updates on the Splunk Community!

Splunk at Cisco Live 2025: Learning, Innovation, and a Little Bit of Mr. Brightside

Pack your bags (and maybe your dancing shoes)—Cisco Live is heading to San Diego, June 8–12, 2025, and Splunk ...

Splunk App Dev Community Updates – What’s New and What’s Next

Welcome to your go-to roundup of everything happening in the Splunk App Dev Community! Whether you're building ...

The Latest Cisco Integrations With Splunk Platform!

Join us for an exciting tech talk where we’ll explore the latest integrations in Cisco + Splunk! We’ve ...