https://community.splunk.com/t5/Getting-Data-In/How-to-utilize-Splunk-Enterprise-to-perform-automated-audits-on/m-p/279404#M53494 <P>You should take the time first to run through the Splunk tutorial here: <A href="http://docs.splunk.com/Documentation/Splunk/6.3.3/SearchTutorial/WelcometotheSearchTutorial">http://docs.splunk.com/Documentation/Splunk/6.3.3/SearchTutorial/WelcometotheSearchTutorial</A> This will give you some familiarity with how splunk works and how to get data into it. </P> <P>In terms of how to achieve your audit that is really going to depend on what you need audited! If you're just getting a list of logins for two PCs I would probably suggest Splunk is overkill. Instead you can just connect to the event viewer on each PC and run a search. </P> <P>If you do want to go down the Splunk route have a look at this prebuilt collection of inputs and dashboards: <A href="http://docs.splunk.com/Documentation/WindowsAddOn/4.8.1/User/AbouttheSplunkAdd-onforWindows">http://docs.splunk.com/Documentation/WindowsAddOn/4.8.1/User/AbouttheSplunkAdd-onforWindows</A></P> Mon, 15 Feb 2016 18:18:58 GMT jplumsdaine22 2016-02-15T18:18:58Z https://community.splunk.com/t5/Getting-Data-In/How-to-utilize-Splunk-Enterprise-to-perform-automated-audits-on/m-p/279403#M53493 <P>Trying to use Splunk Enterprise as a tool to perform automated auditing of my event logs. I have a couple standalone PCs and am required to perform bi-weekly audits. Would love to be able to have this process automated. </P> <P>Does anyone have "laymen" instructions on how to accomplish this task?</P> Thu, 11 Feb 2016 13:26:45 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-utilize-Splunk-Enterprise-to-perform-automated-audits-on/m-p/279403#M53493 mrglover 2016-02-11T13:26:45Z https://community.splunk.com/t5/Getting-Data-In/How-to-utilize-Splunk-Enterprise-to-perform-automated-audits-on/m-p/279404#M53494 <P>You should take the time first to run through the Splunk tutorial here: <A href="http://docs.splunk.com/Documentation/Splunk/6.3.3/SearchTutorial/WelcometotheSearchTutorial">http://docs.splunk.com/Documentation/Splunk/6.3.3/SearchTutorial/WelcometotheSearchTutorial</A> This will give you some familiarity with how splunk works and how to get data into it. </P> <P>In terms of how to achieve your audit that is really going to depend on what you need audited! If you're just getting a list of logins for two PCs I would probably suggest Splunk is overkill. Instead you can just connect to the event viewer on each PC and run a search. </P> <P>If you do want to go down the Splunk route have a look at this prebuilt collection of inputs and dashboards: <A href="http://docs.splunk.com/Documentation/WindowsAddOn/4.8.1/User/AbouttheSplunkAdd-onforWindows">http://docs.splunk.com/Documentation/WindowsAddOn/4.8.1/User/AbouttheSplunkAdd-onforWindows</A></P> Mon, 15 Feb 2016 18:18:58 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-utilize-Splunk-Enterprise-to-perform-automated-audits-on/m-p/279404#M53494 jplumsdaine22 2016-02-15T18:18:58Z