Forum Discussion

SushiPanda's avatar
SushiPanda
Bronze I
20 days ago

Need help in Splunk Lab!

I am attempting the Splunk collection under Upskill. In the final lab i.e. Demonstrate your skill lab, I am getting stuck at a particular task.

 

This is the prompt that I need to solve.
The problem is there is no field for Destination IP in the log.

 

Whenever I search according to the prompt, no results are returned and the question won't take 0 as an answer.

 


Please help me move forward.

2 Replies

  • S1m0n07's avatar
    S1m0n07
    Bronze II
    18 days ago

    Hi SushiPanda​ As you can see, the DestinationIp field is not automatically extracted, even if you switch to Verbose mode. You can try and extract "new fields" that contain this value and look through results, which should help practice SPL more ;) or remember to chain in your search the correct field name. 

    • SushiPanda's avatar
      SushiPanda
      Bronze I
      18 days ago

      Hi S1m0n07​, the problem is that there is no IP mentioned in the log for the given host and source.

      This is a screenshot of one of the events with the given host and source. I don't see any IP.