Skip to main content
Extract the user from Linux session events with the Field Extractor and check the values it finds. Launch Lab 16 in the IP Lab Portal

​
What you will do

  1. Open the Field Extractor on Linux session events
  2. Extract the user field
  3. Validate the values it finds
  4. Save the extraction

​
Before you start

Time

45 minutes

Role

admin

Module

Module 20: Creating and Managing Fields

  • Click Launch Lab 16 in the IP Lab Portal to open the lab page, then click Launch to start your machine.
  • Starting a lab counts as an attempt. Tick off steps in the lab guide to track your progress.
  • The course data is access_30DAY.log, linux_s_30DAY.log, db_audit_30DAY.csv and products.csv.
  • Review the slides in Module 20 Material before you start.