Resolving the Log Parsing Problem in Splunk — Fixit — TryHackMe

Title: Resolving the Log Parsing Problem in Splunk — Fixit — TryHackMe

URL Source: https://medium.com/@rehmanwaraich107/resolving-the-log-parsing-problem-in-splunk-fixit-tryhackme-de1921ccf48d?source=rss------cybersecurity-5

Published Time: 2026-04-28T15:01:03Z

Markdown Content:
# Resolving the Log Parsing Problem in Splunk — Fixit — TryHackMe | by Misbah Ur Rehman | Apr, 2026 | Medium

[Sitemap](https://medium.com/sitemap/sitemap.xml)

[Open in app](https://play.google.com/store/apps/details?id=com.medium.reader&referrer=utm_source%3DmobileNavBar&source=post_page---top_nav_layout_nav-----------------------------------------)

Sign up

[Sign in](https://medium.com/m/signin?operation=login&redirect=https%3A%2F%2Fmedium.com%2F%40rehmanwaraich107%2Fresolving-the-log-parsing-problem-in-splunk-fixit-tryhackme-de1921ccf48d&source=post_page---top_nav_layout_nav-----------------------global_nav------------------)

[](https://medium.com/?source=post_page---top_nav_layout_nav-----------------------------------------)

Get app

[Write](https://medium.com/m/signin?operation=register&redirect=https%3A%2F%2Fmedium.com%2Fnew-story&source=---top_nav_layout_nav-----------------------new_post_topnav------------------)

[Search](https://medium.com/search?source=post_page---top_nav_layout_nav-----------------------------------------)

Sign up

[Sign in](https://medium.com/m/signin?operation=login&redirect=https%3A%2F%2Fmedium.com%2F%40rehmanwaraich107%2Fresolving-the-log-parsing-problem-in-splunk-fixit-tryhackme-de1921ccf48d&source=post_page---top_nav_layout_nav-----------------------global_nav------------------)


# Resolving the Log Parsing Problem in Splunk — Fixit — TryHackMe

[](https://medium.com/@rehmanwaraich107?source=post_page---byline--de1921ccf48d---------------------------------------)

[Misbah Ur Rehman](https://medium.com/@rehmanwaraich107?source=post_page---byline--de1921ccf48d---------------------------------------)

Follow

7 min read

·

1 hour ago

[](https://medium.com/m/signin?actionUrl=https%3A%2F%2Fmedium.com%2F_%2Fvote%2Fp%2Fde1921ccf48d&operation=register&redirect=https%3A%2F%2Fmedium.com%2F%40rehmanwaraich107%2Fresolving-the-log-parsing-problem-in-splunk-fixit-tryhackme-de1921ccf48d&user=Misbah+Ur+Rehman&userId=5fa98395bd9e&source=---header_actions--de1921ccf48d---------------------clap_footer------------------)

[](https://medium.com/m/signin?actionUrl=https%3A%2F%2Fmedium.com%2F_%2Fbookmark%2Fp%2Fde1921ccf48d&operation=register&redirect=https%3A%2F%2Fmedium.com%2F%40rehmanwaraich107%2Fresolving-the-log-parsing-problem-in-splunk-fixit-tryhackme-de1921ccf48d&source=---header_actions--de1921ccf48d---------------------bookmark_footer------------------)

[Listen](https://medium.com/m/signin?actionUrl=https%3A%2F%2Fmedium.com%2Fplans%3Fdimension%3Dpost_audio_button%26postId%3Dde1921ccf48d&operation=register&redirect=https%3A%2F%2Fmedium.com%2F%40rehmanwaraich107%2Fresolving-the-log-parsing-problem-in-splunk-fixit-tryhackme-de1921ccf48d&source=---header_actions--de1921ccf48d---------------------post_audio_button------------------)

Share

**Splunk**is essential for companies using it as a Security Information and Event Management (**SIEM**) tool to monitor their operations. In this challenge room, we need to solve the log parsing problem in Splunk and investigate the logs.

## Introduction:

Welcome to this hands-on Splunk challenge room. In this scenario, you’ve just completed your third screening interview for a SOC Level 2 role at MSSP Cybertees Ltd, and you’re now faced with the final assessment to test your knowledge. You’ll be given access to a Splunk instance receiving network logs from an unknown source. The data isn’t arriving in a usable state, so before you can analyze what’s happening on the network, you must Fixit!

![Imag