Splunk 101

Prompts and answers

• I'm ready to look at Splunk apps.
  No answer needed
• What is the Version?
  10.6.2
• Use Splunk to Search for the phrase 'failed password' using tutorialdata.zip as the source.
  No answer needed
• What is the sourcetype?
  www1/secure
• In the search result, look at the Patterns tab.
  No answer needed
• What is the last username in this tab?
  myuan
• What is the highest EventID?
  11
• I have a general understanding on how to create an alert in Splunk.
  No answer needed
• I know the fundamentals of Splunk.
  No answer needed