From the course: Integrating Splunk with Microsoft Purview

Unlock the full course today

Join today to access over 24,900 courses taught by industry experts.

Solution: Create a dashboard

Solution: Create a dashboard - Splunk Tutorial

From the course: Integrating Splunk with Microsoft Purview

Start my 1-month free trial Buy for my team

Solution: Create a dashboard

“

(upbeat music) - [Instructor] Let's see if you got the steps to creating a dashboard from a set query result correctly. First, we'll launch the Splunk add-on for Microsoft Office 365 to confirm our Azure Tenant configuration with Splunk Enterprise. Next, go to the Input tab so we can run the search query from Microsoft Purview. This search query is to return audit log of all activities that has been performed in the last 24 hours in our Microsoft Azure tenants. We are using Splunk Enterprise to capture these activities. So here we have 1,456 events returned in the last 24 hours. To see more details about the results, you can scroll down the page to have a full view of analysis of all generated events. So we'll filter the search query to return only failed activities by typing in fail asterix, you hit the Enter button. So here we have 262 events failed, and here we are going to extract the date_minute field on that interesting field. We'll be checking the maximum value over time…

Contents