back to day 17
WEEK_3 · DAY_17 · LAB
Lab 17 — Tour Splunk ES
Every dashboard, every menu, every concept inside ES
LAB PROGRESS0/4 steps · 0%
Lab Objectives
- ›Navigate Security Posture, Incident Review, Investigations
- ›Open Security Domains (Access, Endpoint, Network, Identity)
- ›Find Risk Analysis, Threat Activity, and Asset Investigator
- ›Understand the relationship between Splunk Core and ES
Lab Instructions
- 1Open the Splunk ES lab.
- 2Click every top-level tab: Posture, Incident Review, Investigations, Security Intelligence, Security Domains, Audit, Search, Configure.
- 3Open one Notable Event — read every field.
- 4Find the Risk Analysis dashboard. Identify the top 3 risk objects.