https://community.splunk.com/t5/All-Apps-and-Add-ons/How-to-create-a-search-that-will-show-me-any-and-all-changes-an/m-p/598357#M76838 <P>What do the events that you have coming in look like? For example, fields you have extracted from the events, or do you need help extracting the fields?</P> Wed, 18 May 2022 17:38:24 GMT ITWhisperer 2022-05-18T17:38:24Z https://community.splunk.com/t5/All-Apps-and-Add-ons/How-to-create-a-search-that-will-show-me-any-and-all-changes-an/m-p/598335#M76837 <P>Hello World,&nbsp;</P> <P>I am attempting to create a search in Splunk that will provide me with any and all changes an admin made to our firewalls. This is part of a "governance" task and we have logs coming from the FWs. Any pointers will be appreciated.&nbsp;</P> <P>Best,</P> <P>AD</P> Wed, 18 May 2022 16:49:53 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/How-to-create-a-search-that-will-show-me-any-and-all-changes-an/m-p/598335#M76837 theSOCguy 2022-05-18T16:49:53Z https://community.splunk.com/t5/All-Apps-and-Add-ons/How-to-create-a-search-that-will-show-me-any-and-all-changes-an/m-p/598357#M76838 <P>What do the events that you have coming in look like? For example, fields you have extracted from the events, or do you need help extracting the fields?</P> Wed, 18 May 2022 17:38:24 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/How-to-create-a-search-that-will-show-me-any-and-all-changes-an/m-p/598357#M76838 ITWhisperer 2022-05-18T17:38:24Z https://community.splunk.com/t5/All-Apps-and-Add-ons/How-to-create-a-search-that-will-show-me-any-and-all-changes-an/m-p/598691#M76859 <P><a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/225168">@ITWhisperer</a>&nbsp;I'm sitting down with the people that configured Splunk for this network. I cant even get basic logs to pull-up via a simple search. Might be a configuration issue. I will get back to you once I have some logs to work with.&nbsp;</P> Fri, 20 May 2022 16:28:18 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/How-to-create-a-search-that-will-show-me-any-and-all-changes-an/m-p/598691#M76859 theSOCguy 2022-05-20T16:28:18Z https://community.splunk.com/t5/All-Apps-and-Add-ons/How-to-create-a-search-that-will-show-me-any-and-all-changes-an/m-p/618501#M77868 <P>Been a while. Learning a lot about Splunk. I found the index and specific event code needed to make this search happen.&nbsp;</P><P>index=fgt eventtype=ftnt_fortigate_config_change</P> Wed, 26 Oct 2022 23:26:13 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/How-to-create-a-search-that-will-show-me-any-and-all-changes-an/m-p/618501#M77868 theSOCguy 2022-10-26T23:26:13Z