Dashboards & Visualizations

How to create a dashboard that shows the total number of emails stopped by reputation filter Ironport?

Ghanayem1974
Path Finder

I want to create a dashboard that shows the total number of emails stopped by IronPort, along with Invalid recipients, spam but I am not sure what search I should start with.

0 Karma
1 Solution

adonio
Ultra Champion

hello there
onboard the ironport logs
leverage pre-built splunk apps for cisco: (i think this is the proper one)
https://splunkbase.splunk.com/app/1761/#/overview
read about the app here:
http://docs.splunk.com/Documentation/AddOns/latest/CiscoESA/About
search the data and the interesting fields and build your queries for panels in dashboard
or download the cisco security suite https://splunkbase.splunk.com/app/525/
which has some pre-built dashboards around your use case

example:

alt text

hope it helps

View solution in original post

0 Karma

adonio
Ultra Champion

hello there
onboard the ironport logs
leverage pre-built splunk apps for cisco: (i think this is the proper one)
https://splunkbase.splunk.com/app/1761/#/overview
read about the app here:
http://docs.splunk.com/Documentation/AddOns/latest/CiscoESA/About
search the data and the interesting fields and build your queries for panels in dashboard
or download the cisco security suite https://splunkbase.splunk.com/app/525/
which has some pre-built dashboards around your use case

example:

alt text

hope it helps

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...