Servidae: Log Analysis in ELK

Walkthrough summary

Servidae: Log Analysis in ELK TryHackMe walkthrough with 18 answered prompts and lab methodology notes.

Sample prompts covered

• What is the name of the open-source search engine library that Elasticsearch is built on?
  Open the walkthrough page to inspect the full answer and command flow.
• Which component of the Elastic Stack would you use to perform advanced filtering and processing of data before it gets stored?
  Open the walkthrough page to inspect the full answer and command flow.
• Update the date and time filter as specified. How many total hits were captured within the selected time period?
  Open the walkthrough page to inspect the full answer and command flow.
• Look at the Top values under the destination.ip field. Which IP address stands out?
  Open the walkthrough page to inspect the full answer and command flow.
• Use an IP address lookup tool (such as iplocation.io). What country does this IP address originate from?
  Open the walkthrough page to inspect the full answer and command flow.