What you will do
- Start with a broad keyword search
- Narrow it to failed logins with keywords and fields
- Zoom in with the timeline
- Manage and share the search job
Before you start
Time
45 minutes
Role
admin
Module
Module 6: Using Fields in Searches
- Click Launch Lab 3 in the IP Lab Portal to open the lab page, then click Launch to start your machine.
- Starting a lab counts as an attempt. Tick off steps in the lab guide to track your progress.
- The course data is
access_30DAY.log,linux_s_30DAY.log,db_audit_30DAY.csvandproducts.csv. - Review the slides in Module 6 Material before you start.