Splunk: Exploring SPL

Walkthrough summary

Splunk: Exploring SPL TryHackMe walkthrough with 17 answered prompts and lab methodology notes.

Sample prompts covered

• What is the name of the host in the Data Summary tab?
  Open the walkthrough page to inspect the full answer and command flow.
• In the search History, what is the 7th search query in the list? (excluding your searches from today)
  Open the walkthrough page to inspect the full answer and command flow.
• In the left field panel, which Source IP has recorded max events?
  Open the walkthrough page to inspect the full answer and command flow.
• How many events are returned when we apply the time filter to display events on 04/15/2022 and Time from 08:05 AM to 08:06 AM?
  Open the walkthrough page to inspect the full answer and command flow.
• How many Events are returned when searching for Event ID 1 AND User as *James*?
  Open the walkthrough page to inspect the full answer and command flow.