topic Need help to find specific auth logs for Linux OS in Getting Data In https://community.splunk.com/t5/Getting-Data-In/Need-help-to-find-specific-auth-logs-for-Linux-OS/m-p/538050#M90183 <P>Can someone please guide how I can collect the following logs from Linux systems ?<BR /><STRONG>changes to account privileges.</STRONG><BR /><STRONG>unsuccessful login and log off events for privileged accounts.</STRONG><BR /><STRONG>any access attempts using deactivated accounts</STRONG></P><P>Any help on this would be highly appreciated.</P> Mon, 01 Feb 2021 08:31:56 GMT damode 2021-02-01T08:31:56Z Need help to find specific auth logs for Linux OS https://community.splunk.com/t5/Getting-Data-In/Need-help-to-find-specific-auth-logs-for-Linux-OS/m-p/538050#M90183 <P>Can someone please guide how I can collect the following logs from Linux systems ?<BR /><STRONG>changes to account privileges.</STRONG><BR /><STRONG>unsuccessful login and log off events for privileged accounts.</STRONG><BR /><STRONG>any access attempts using deactivated accounts</STRONG></P><P>Any help on this would be highly appreciated.</P> Mon, 01 Feb 2021 08:31:56 GMT https://community.splunk.com/t5/Getting-Data-In/Need-help-to-find-specific-auth-logs-for-Linux-OS/m-p/538050#M90183 damode 2021-02-01T08:31:56Z