Splunk App update for SELKS6 and Splunk v8

[Dam]

Hello,

I'm going to update my app for SELKS 6 and Splunk v8.

https://splunkbase.splunk.com/app/4014/

My to do list :

- test it with Splunkv8

- Change all themes to dark mode

- Change regarding the new selks colors

- .... suggestions???

So if you have suggestions or need something? (i'm not a dev so i hope i can do what you need :), you can contribute as well! )

Kind regards

[Peter Manev]

Hi,

Contributions are always welcome :)
Not sure if you had a chance to look at some of the improvements in the newer version of the dashboards. For example in SN-HTTP/SN-FLOW
Would you be able to take some ideas from there?

Thank you

--
IRC: Let's talk about SELKS on Freenode IRC on the #SELKS channel
Wiki: https://github.com/StamusNetworks/SELKS/wiki
GitHub: https://github.com/StamusNetworks/SELKS
Blog: https://www.stamus-networks.com/theblog/
Twitter: @StamusN
g+: Stamus Networks
---
You received this message because you are subscribed to the Google Groups "SELKS" group.
To unsubscribe from this group and stop receiving emails from it, send an email to selks+un...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/selks/4669d450-8376-46da-81ad-71bce0e59335o%40googlegroups.com.

--

Regards,

Peter Manev

[Scarpafo Scarpafo]

Hi Peter,

Great to read you!

Not yet, i know i'm scare because you have so much dashboard (thump up for that) ... if i want to add it all... it's going to be looonnng ahah.

By i will check for sure and try to add some of it!

[Peter Manev]

On 15 Jul 2020, at 08:41, Scarpafo Scarpafo <scar...@gmail.com> wrote:



Hi Peter,

Great to read you!

Not yet, i know i'm scare because you have so much dashboard (thump up for that) ... if i want to add it all... it's going to be looonnng ahah.

For sure - it takes a while to do it , I mean it is definitely not a one shot thing.

I was referring more in terms of to give you some ideas :)

Anything you do helps - so  -as always  much much appreciated!

But to give a few ideas if I may for consideration - 

http hosts 

http servers

http user agents

tls JA3/S

Dns rrnames  

Thank you

[Dam]

Ok 

Thank you for your suggestion. I remember it's rip my head to extract http user agent, and inside it OS xD.

I will check your suggestion for sure!