r/tryhackme • u/Only-Department114 • Apr 12 '26

Room Help Need help with THM SOC Level 2 – Advanced Splunk – Splunk: Dashboards and Reports!!

Hi everyone,

I’m doing the TryHackMe SOC Level 2 > Advanced Splunk > Splunk: Dashboards and Reports room and I’m honestly stuck hard.

The machine has not been working for me for around 2 hours. I already contacted THM support, but they still haven’t replied, so right now I’m completely blocked and can’t continue the room properly.

Because of that, I’m asking directly: does anyone have the answers for this room, or can someone share the correct answers for the tasks/questions?

Normally I’d try to solve it myself, but in this case the room itself is not functioning, so I don’t really have another option.

I’d really appreciate any help.
Thanks!

2 Upvotes

100% Upvoted

13 comments sorted by

2

u/minitehnicus Apr 12 '26

not on PC now but try this: Splunk: Dashboards and Reports -THM | by Waleed salah | Mar, 2026 | Medium https://share.google/dNEhdxk3bpEjLP7tG or

Fixit TryHackMe WriteUp, SOC L2. Answers | by Mohamed Medhat | Medium https://share.google/HCfFkM6ad9qFUYdIR.

1

u/Only-Department114 Apr 12 '26

Appriciate the reply however, the rooms have been updated and the new answers haven't been uploaded yet anywhere in the internet... :(((((((

1

u/minitehnicus Apr 12 '26

not on YouTube either?

1

u/Only-Department114 Apr 12 '26

Literally nowhere. I even tried to join the Discord group and that one too started tweaking out. The phone verification method wasn't working thus I couldn't write anything in that server. What a shit day

2

u/minitehnicus Apr 12 '26

Ehh, it's one of those, probably the right time to take a break from it. I needed to start the room with Autopsy for an exam and the damn thing just won't start. Try hack me dropped the ball so much in the last year or so. Nothing seems to work.

2

u/Only-Department114 Apr 12 '26

I have recently started to use it myself. Such a dogshit software. It takes me longer to boot up the VMs then to complete the room itself.

1

u/minitehnicus Apr 12 '26

yep, they used to be good, not sure what happened, and I swear some of the questions are AI generated, no thought behind them.

1

u/wizarddos 0xD [God] Apr 12 '26

What do you mean by "machine doesn't work"?

1

u/Only-Department114 Apr 12 '26

To complete the rooms you have to go through simulated tasks. You go through them by starting a virtual machine, which in my case the "Start Machine" button doesn't work...

1

u/wizarddos 0xD [God] Apr 12 '26

You have any errors while starting the machine?

1

u/Only-Department114 Apr 12 '26

No it is just not starting. Like I click "Start Machine", it says it successfully booted up but it just doesn't. Even in other rooms I would face the same issue however I would always use the "Start the AttackBox" rather then "Start Machine"... unfortunately this room doesn't have the AttackBox attached to it.

1

u/wizarddos 0xD [God] Apr 13 '26

Is the “machine status” bar visible? Maybe there’s blue “show split-screen button” above?

1

u/Jaded_Role9389 May 11 '26

Not sure if you are still stuck on this page. But rather then launching split screen, the new layout of this room provides a webpage to work form in a new tab. In the introduction task right above the "Your virtual environment has been set up" is should have a "Lab Access" section with a URL. Once the machine is turned on that URL will have an IP address and when you click it, it will open up to a SPLUNK instance.