Abstract
Splunk is a great tool for sifting through the various Bro logs and creating visualizations of your data. Splunk can be used for determining what level of activity on your network is normal as you write site specific policies.
© 2014 The Bro Project.