Monitoring Splunk

continuously monitor any local event Log windows 10

YANN84
New Member

I am a data analyst interested in Security that have been reccently introduced to Splunk that I am learning on my own now. I was wondering how I can monitor any event on the local event Log ? here is what I do :

I go to the local event log after clicking the Monitoring option, then select System. In the input settings I change the app context from Search & Reports to Monitor console. The events looks structured when I am done , but nothing is appearing on the visualisation tab;

How can I have a visualisation of my monitoring. I do not mind monitoring anything else; I just need to see the graph. I guess

Tags (1)
0 Karma

HiroshiSatoh
Champion

What kind of graph is necessary?
Please check how to use STATS, CHART, TIMECHART etc.

ex.
sourcetype="WinEventLog:System"|timechart count by EventCode

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...