1

I am volunteering to teach some folks to learn Splunk to analyze logs by using SIEM. Therefore I will need some public log file archives such as auditd, secure.log, firewall, webapp logs, which I can use to upload to Splunk instance and write some queries on it.

Do you have any place you know I can download those kind of log files?

1 Answer 1

1

If you're hosting the Splunk instance yourself, you can install the Splunk Add-on for Unix and Linux and grab those logs from your Splunk server. You can run a bare-bones Splunk install well below the specs listed on their website.

Here are some syslogs from an MIT server (not all are viewable), but I will post a better repository if I am able to find one.

2
  • Thanks for that. The link you provided has some data such as apache log files, which helped me as a start.
    – Blacklion
    Commented Oct 10, 2019 at 4:22
  • @Blacklion This weekend I have some free time and I can probably post some logs from one of my homelab servers
    – cutrightjm
    Commented Oct 10, 2019 at 16:33

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .