https://community.splunk.com/t5/Getting-Data-In/alert/m-p/556216#M92087 <P><SPAN>How to write a search to find which user did a sudo to root on Linux servers?</SPAN></P> Thu, 17 Jun 2021 17:35:16 GMT Pradz18 2021-06-17T17:35:16Z https://community.splunk.com/t5/Getting-Data-In/alert/m-p/556216#M92087 <P><SPAN>How to write a search to find which user did a sudo to root on Linux servers?</SPAN></P> Thu, 17 Jun 2021 17:35:16 GMT https://community.splunk.com/t5/Getting-Data-In/alert/m-p/556216#M92087 Pradz18 2021-06-17T17:35:16Z