---
title: "Discussion on \"Lab 22: Same Logs, New SIEM — Setting Up Splunk From Scratch\" | Hashnode"
description: "Discussion on \"Lab 22: Same Logs, New SIEM — Setting Up Splunk From Scratch\". How I installed Splunk Enterprise 10.2.2 on Kali Linux, configured auth.log ingestion, and confirmed 76 SSH brute force events indexed."
url: "https://hashnode.com/posts/lab-22-same-logs-new-siem-setting-up-splunk-from-scratch/6aa34d8cd98c11b112aa136f"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Lab 22: Same Logs, New SIEM — Setting Up Splunk From Scratch](https://blog.routetoroot.io/lab-22-same-logs-new-siem-setting-up-splunk-from-scratch?utm_source=hashnode&utm_medium=feed)

How I installed Splunk Enterprise 10.2.2 on Kali Linux, configured auth.log ingestion, and confirmed 76 SSH brute force events indexed.

Sep 11 · 4 min read · blog.routetoroot.io  
Read the article

-   [#cybersecurity](https://hashnode.com/tag/cybersecurity)
-   [#career-change](https://hashnode.com/tag/career-change)
-   [#infosec](https://hashnode.com/tag/infosec)
-   [#splunk](https://hashnode.com/tag/splunk)
-   [#soc](https://hashnode.com/tag/soc)

## Written by

[routetoroot](https://hashnode.com/@routetoroot)

@routetoroot · Los Angeles, California

  
[View profile](https://hashnode.com/@routetoroot)

Cybersecurity walkthroughs, CTF writeups, and notes from the field. From zero to root.

Self-taught cybersecurity practitioner documenting the path from zero to root. SOC analyst, CTF player, detection engineer. 29 hands-on labs and counting.

## Responses

Markdown supported · ⌘↵ to post

No responses yet.