I am a data analyst interested in Security that have been reccently introduced to Splunk that I am learning on my own now. I was wondering how can I monitor any event on the **local event Log** ? here is what I do :
I go to the **local event log** after clicking the Monitoring option, then select **System**. In the **input settings** I change the **app context** from **Search & Reports** to **Monitor console**. The events looks structured when I am done , but nothing is appearing on the visualisation tab; How can I have a visualisation of my monitoring. I do not mind monitoring anything else; I just need to see the graph. I guess
I go to the **local event log** after clicking the Monitoring option, then select **System**. In the **input settings** I change the **app context** from **Search & Reports** to **Monitor console**. The events looks structured when I am done , but nothing is appearing on the visualisation tab; How can I have a visualisation of my monitoring. I do not mind monitoring anything else; I just need to see the graph. I guess