Skip to main content
Add event menu actions that look up an IP address on the web and count its events in Splunk. Launch Lab 20 in the IP Lab Portal

​
What you will do

  1. Create a GET workflow action that looks up an IP address on the web
  2. Create a search workflow action that counts its events
  3. Test both from an event’s menu

​
Before you start

Time

45 minutes

Role

admin

Module

Module 24: Creating and Using Workflow Actions

  • Click Launch Lab 20 in the IP Lab Portal to open the lab page, then click Launch to start your machine.
  • Starting a lab counts as an attempt. Tick off steps in the lab guide to track your progress.
  • The course data is access_30DAY.log, linux_s_30DAY.log, db_audit_30DAY.csv and products.csv.
  • Review the slides in Module 24 Material before you start.