LAB_01in progress
Splunk SIEM lab on Oracle Cloud
Ubuntu VM, Syslog ingestion, searches and detection alerts in a lab environment.
SplunkOCIUbuntuSyslog
ⓘ
Training exercise — documentation in progress. This page describes the scope of practice. Detailed personal evidence has not yet been published.
Practise event collection and analysis in a training environment, then document the reasoning from an event to an alert.
- 01Ubuntu VM on Oracle Cloud Infrastructure and Splunk installation.
- 02Syslog ingestion and event searches.
- 03HTTP / ICMP dashboards and lab alerts.
- 04Detailed write-up and query excerpts to prepare for publication.
- This lab configuration is a training exercise. Queries, screenshots and triage cases have not yet been published.
Skills practised
- ▸Linux / Ubuntu
- ▸Syslog collection
- ▸Splunk searches
- ▸Technical documentation
Documentation status
- ◆Lab exercise
- ◆Public write-up in preparation