Comment Firewall logs query (Score 1) 34
I am a beginner in cybersecurity. I have a huge firewall log file(14GB). I have to find out which are all the source IP have sent maximum bytes (accumulated) to (destination IP) and tabulate the top 10 results in descending order along with additional details like Date, time, service, country. For example , IP-1 have sent 70bytes on first request and 40bytes on second request, IP-2 have sent 90 bytes on first request and 10 bytes on second request. So, IP-1 is the one who sent max bytes accumulated (110bytes) than IP-2 (100bytes) -Find out which Country (source Country) have sent maximum bytes (accumulated) to (destination IP) and tabulate the top 10 results in descending order along with additional details like Date, time, service, IP.
I have tried Splunk free trial but there are restrictions.