topic Monitoring Event Logs in Getting Data In https://community.splunk.com/t5/Getting-Data-In/Monitoring-Event-Logs/m-p/539862#M90409 <P>Hi,</P><P>I'm trying to pull the event logs when an account is being locked in Active Directory, but I could see multiple entries for single account, one entry for each 1 or 2 hrs . Could please help me in understanding why duplicate entries are being generated in splunk?</P> Mon, 15 Feb 2021 05:47:23 GMT yashaswinig2210 2021-02-15T05:47:23Z Monitoring Event Logs https://community.splunk.com/t5/Getting-Data-In/Monitoring-Event-Logs/m-p/539862#M90409 <P>Hi,</P><P>I'm trying to pull the event logs when an account is being locked in Active Directory, but I could see multiple entries for single account, one entry for each 1 or 2 hrs . Could please help me in understanding why duplicate entries are being generated in splunk?</P> Mon, 15 Feb 2021 05:47:23 GMT https://community.splunk.com/t5/Getting-Data-In/Monitoring-Event-Logs/m-p/539862#M90409 yashaswinig2210 2021-02-15T05:47:23Z