Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How can I test my threat list is working?

$
0
0
All, I just enabled a threat list in Splunk ES. First time. I guess it's working, no error message. emerging_threats_compromised_ip_blocklist threatlist Emerging Threats compromised IPs blocklist https://rules.emergingthreats.net/blockrules/compromised-ips.txt\ How do I test this? How can generate an event against it?

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>