Skip to content

Latest commit

 

History

History
47 lines (40 loc) · 1.25 KB

29-query_langs_exercise.md

File metadata and controls

47 lines (40 loc) · 1.25 KB
SPDX-FileCopyrightText SPDX-License-Identifier title author footer description keywords color class style
© 2023 Menacit AB <[email protected]>
CC-BY-SA-4.0
Logging course: Course recap
Joel Rangsmo <[email protected]>
© Course authors (CC BY-SA 4.0)
Recap of material covered in logging course
logging
siem
course
#ffffff
invert
section.center { text-align: center; } table strong { color: #d63030; } table em { color: #2ce172; }

Exercise: Playing with SQL/PPL

bg right:30%


Open "Query Workbench" page in your instance of OpenSearch Dashboards.

Develop queries using both SQL and PPL to find/filter information about:

  • Web server requests from Chrome web browsers
  • Country and IP address for each failed Windows attempt login
  • Top 10 usernames observed during failed Windows login attempts

Send SQL and PPL query strings to courses+log_012901@%EMAIL_DOMAIN%

bg right:30%