I need help with Splunk assignment
Budget: $10 – $30 USD
Scenario: Your boss want to know hackers’ Locations (Failed password) in the following 3 cases
Giving functions/commands and Operators: index, source, HDFS, rex, stats, iplocation, geostats, where, NOT,
|, =, count by.
Using regex to extract the IP address as field name “hacker_ip”.
Data fields’ name: : hacker_ip, Country, Region, City
Practicing with your data:
Using regex to extract the IP address as field name “hacker_ip”, review the values in the fields
of hacker_ip, Country, Region, City.
Case 1:
Showing statistic of hackers’ IP address, Country, Region, City.
• Hint 1: Lab 7, Lab 9
• Hint 2: index=??? source=??? | rex ??? | stats ??? | iplocation ???
• Hint 3: “| geostats ???”, Visualizing with map
Case 2:
Showing all hackers’ location which are in the “United States”.
• Hint 1: “where” in Lab 7.
• Hint 2: from case 1 adding “| where ???”
• Hint 3: “| geostats ???”, Visualizing with map
Case 3:
Showing all hackers’ location which are NOT in the “United States”.
Hint:
• From case 2 adding “NOT”
Giving functions/commands and Operators: index, source, HDFS, rex, stats, iplocation, geostats, where, NOT,
|, =, count by.
Using regex to extract the IP address as field name “hacker_ip”.
Data fields’ name: : hacker_ip, Country, Region, City
Practicing with your data:
Using regex to extract the IP address as field name “hacker_ip”, review the values in the fields
of hacker_ip, Country, Region, City.
Case 1:
Showing statistic of hackers’ IP address, Country, Region, City.
• Hint 1: Lab 7, Lab 9
• Hint 2: index=??? source=??? | rex ??? | stats ??? | iplocation ???
• Hint 3: “| geostats ???”, Visualizing with map
Case 2:
Showing all hackers’ location which are in the “United States”.
• Hint 1: “where” in Lab 7.
• Hint 2: from case 1 adding “| where ???”
• Hint 3: “| geostats ???”, Visualizing with map
Case 3:
Showing all hackers’ location which are NOT in the “United States”.
Hint:
• From case 2 adding “NOT”