Forum Discussion
Bronze IIntroduction to Detection Engineering: Ep.5 – Custom Alerting
I've spent too much time trying to figure this out.
fwiw I had to do this a few times before it worked - Patience is key.
Once the data view is setup and you have working code, it can take 5-10 minutes for the events to show, then the token appears once all are present, if token isn't apparent then just put token in the search bar and it'll be there if you have captured all events. keep refreshing etc.
6 Replies
Cicada3301Hi GusC,
Thanks for the elements! How many events are waited? I saw 2 after ~ 10 minutes then a third one appeared after 15 minutes saying to restart lab as I missed few events... don't know why.
GusCBronze III
Hello - I got 18 results back after waiting a while.
pm me on ajithoth@googlemail.com if you want.....
- Cicada3301
Thanks Gus, I finally achieved the lab. It was 40 results on my side.
- GusC
fwiw I had to do this a few times before it worked - Patience is key.
Once the data view is setup and you have working code, it can take 5-10 minutes for the events to show, then the token appears once all are present, if token isn't apparent then just put token in the search bar and it'll be there if you have captured all events. keep refreshing etc.
Hi f_alharthi94 are you able to share a little more detail on what you have tried with this lab so far? That should hopefully give our community somewhere to start from when trying to answer your question.
- KieranRowley
Community Manager
Hi f_alharthi94
Welcome to The Human Connection!
Please can you provide some detail of the steps that you have already taken so that your fellow community members are better able to assist you?
