Looking for the better idea.
User reported xyz.com site is not working, When I look at the firewall logs xyz.com was allowed in firewall.
And I filtered the logs with source IP for 5mins time frame and found deny logs for particular IP address 184.108.40.206
I am not sure what is the url for 220.127.116.11, In such case what you will do to find the URL for 18.104.22.168
I usually do a search in splunk log server, for this IP 22.214.171.124 it will show all the related logs, I filter with dns logs then I can find the hostname for 126.96.36.199 ex. ab.xyz.com, Now I am able to permit this additional URL, it will fix the issue.
What if I don't have splunk log server, how can I identify this additional link(ab.xyz.com)
Also is there a way to find all the links that is being used in a website?
... View more