Splunk Reviews

FastNetMon Reviews

Splunk mentions (18)

• Can I install apps on Free 60 day Enterprise?

  I'm using the free 60day Enterprise license and tried to install different apps from the "Browse more apps" menu in Splunk Enterprise, but it doesn't accept my credentials when I try to log in. I tried my username and password from splunk.com(which I'm sure it works, because I tried it straight away on the official website). Also I tried using my username and password with which I'm accessing Splunk Enterprise,... Source: 6 months ago

• Can someone explain this before I go a little crazy? xD

  I'm noticing a questionable trend in Splunk question/answer structure for these free courses on splunk.com So I go to an exam dump to try and compare to something I have studied thus far. (Prepping for entry level 1002). Source: 7 months ago

• Where exactly can I start to learn?

  With your splunk.com username, you can login to Splunk trainings portals as well https://www.splunk.com/en_us/training.html .. There are lots of free trainings available. Enroll yourself, complete them, you will gain more confidence. Source: 11 months ago

• VAST 3.0 released. Open-Source Security Data Pipelines with Kusto-like syntax

  VAST is an open-source SecDataOps project for working with data from open-source security tools. Version 3.0 adds a pipeline syntax similar to splunk, Kusto, PRQL, and Zed. Source: about 1 year ago

• Apps not downloading in Splunk Enterprise Trial on EC2 Instance

  I'm entering my correct credentials for splunk.com nothing happends, even tried downloading the tgz file from splunkbase and then going the install app from file route. Nothing happens. No failure message, no app downloading. Please help! Source: over 1 year ago

FastNetMon mentions (3)

• A DDoS attack with unknown scr and dst port.

  If you have a BGP peering with you ISP/upstream provider, ask them if they have a blackhole community you can broadcast to. Usually they are ASN:666. The only downside is you would only be able to advertise your IP address to that, essentially killing your internet (if that's your only IP) as long as the block is up. We usually set our filter to 15 minutes and most attackers give up after that. At this level, you... Source: about 1 year ago

• Processing netwflow data

  Have you looked at fastnetmon ? It's freemium and It looks like the commercial version would work you, but I think the community edition is aslo worth a look. It's primary function is to detect DDOS attacks, but it can export data in ways that might be useful to you. Source: about 2 years ago

• WAN Attacks is it just whack-a-mole?

  To mitigate DoS attacks means you need information - preferably before the users start screaming. Running sampling on your edge router with something like Fastnetmon will give you alerting of a probable DDoS attack before it becomes a significant problem. Source: almost 3 years ago