This project demonstrates how to ingest, parse, and analyze DNS logs using Splunk Enterprise. By leveraging Zeek-style JSON DNS logs, we perform meaningful security and traffic analysis using Splunk Search Processing Language (SPL).
log-analysis splunk cybersecurity siem spl network-security zeek blue-team threat-detection dns-analysis security-analytics security-monitoring incident-detection soc-analyst dns-logs
-
Updated
Dec 27, 2025