Predicting Security Threats with Splunk: Getting to Know Splunk by Hacking Wisdom

Author:Hacking Wisdom [Wisdom, Hacking]
Language: eng
Format: epub
Published: 2016-03-30T22:00:00+00:00

Chapter Four

Reports and Statistics tab

The results of a search are reports. In the example below (Figure 5) you can see the output of the following command search string:

sourcetype=access_ status=200 action=purchase | top categoryId*

the command searches among all the web access types (sourcetype=access_*) that resulted in a 200 HTTP access status (status=200), filtering the web requests that issued a purchase action (action=purchase) for a specific product, finally piping the output to the top command.

The top command returns a tabulated report for the most common values of category_id for the example of game product purchases (STRATEGY, ARCADE, TEE, etc).

Because top is a reporting command, this report displays in the Statistics tab.

(Figure 5) As top is a reporting command, you can also view (Figure 6) a report in the Visualization tab. By default, the Visualizations opens with a Column Chart, but of course you can choose the visualization that best fits your reporting needs (by clicking on the visualization type selector, recommended visualization charts for this data set, such as Column, Bar, and Pie charts, are shown).

(Figure 6)

Download

Copyright Disclaimer:
This site does not store any files on its server. We only index and link to content provided by other sites. Please contact the content providers to delete copyright contents if any and email us, we'll remove relevant links or contents immediately.