Module 5 (10 pts)
What you need:
- A Windows, Linux, or Mac computer
Splunk Course
In the Splunk course materials, do this project:
Near the end, at step 28, you are viewing a stored job
that finds SSH login errors.
Capture a screen image, as shown below,
with these required elements:
- "Expires" date 7 days after "Created at" date
- Search criteria fail* AND password "port 22"
Saving a Screen Image
Capture a screen image.
Save the image with the filename "Mod 5".
Turning in your Project
Upload the image in Canvas, in the appropriate assignment.
Updated 1-3-23