https://community.splunk.com/t5/Security/how-to-setup-security-event-logging-linux/m-p/24791#M13703 <P>Hi this is a setup question for compliance monitoring.</P> <P>I have a linux box, so I index everything under /var/log. I need to build reports that</P> <UL> <LI>report each account login/logout</LI> <LI>success or failure of login</LI> <LI>activities performed</LI> <LI>software installed/uninstalled</LI> </UL> <P>Any hints on how to processed? I think this is basic compliance reporting, maybe there are some examples somwhere? </P> <P>thanks!<BR /> Stefan</P> Wed, 08 Jun 2011 12:49:39 GMT pontifor 2011-06-08T12:49:39Z https://community.splunk.com/t5/Security/how-to-setup-security-event-logging-linux/m-p/24791#M13703 <P>Hi this is a setup question for compliance monitoring.</P> <P>I have a linux box, so I index everything under /var/log. I need to build reports that</P> <UL> <LI>report each account login/logout</LI> <LI>success or failure of login</LI> <LI>activities performed</LI> <LI>software installed/uninstalled</LI> </UL> <P>Any hints on how to processed? I think this is basic compliance reporting, maybe there are some examples somwhere? </P> <P>thanks!<BR /> Stefan</P> Wed, 08 Jun 2011 12:49:39 GMT https://community.splunk.com/t5/Security/how-to-setup-security-event-logging-linux/m-p/24791#M13703 pontifor 2011-06-08T12:49:39Z https://community.splunk.com/t5/Security/how-to-setup-security-event-logging-linux/m-p/24792#M13704 <P>the <A href="http://splunk-base.splunk.com/apps/22314/splunk-for-unix-and-linux">Splunk for *nix</A> app has most of what you looking for</P> Sat, 11 Jun 2011 09:18:29 GMT https://community.splunk.com/t5/Security/how-to-setup-security-event-logging-linux/m-p/24792#M13704 MarioM 2011-06-11T09:18:29Z