Splunk: Dashboards and Reports

Walkthrough summary

Splunk: Dashboards and Reports TryHackMe walkthrough with 8 answered prompts and lab methodology notes.

Sample prompts covered

• Which search term will show us results from all indices in Splunk?
  Open the walkthrough page to inspect the full answer and command flow.
• Create a report from the network-server logs host that lists the ports used in network connections and their count. What is the highest number of times any port is used in network connections?
  Open the walkthrough page to inspect the full answer and command flow.
• While creating reports, which option do we need to enable to get to choose the time range of the report?
  Open the walkthrough page to inspect the full answer and command flow.
• Create a dashboard from the web-server logs that show the status codes in a line chart. Which status code was observed for the least number of times?
  Open the walkthrough page to inspect the full answer and command flow.
• What is the name of the traditional Splunk dashboard builder?
  Open the walkthrough page to inspect the full answer and command flow.