topic Re: How can we monitor if user changes or updates or deletes any file from any of the Splunk Servers? in Monitoring Splunk https://community.splunk.com/t5/Monitoring-Splunk/How-can-we-monitor-if-user-changes-or-updates-or-deletes-any/m-p/348968#M6566 <P>Here is a document that covers what Splunk logs about itself. </P> <UL> <LI><A href="http://docs.splunk.com/Documentation/Splunk/6.5.3/Troubleshooting/WhatSplunklogsaboutitself">http://docs.splunk.com/Documentation/Splunk/6.5.3/Troubleshooting/WhatSplunklogsaboutitself</A></LI> </UL> <P>If you look at the contents on the left, you will see additional pages you may want to review. You may also want to test different actions and then review the Splunk logs to see what type of event is generated for that action. You can use that to build alerts or dashboards if you deem it necessary.</P> Tue, 25 Apr 2017 19:09:14 GMT jcrabb_splunk 2017-04-25T19:09:14Z How can we monitor if user changes or updates or deletes any file from any of the Splunk Servers? https://community.splunk.com/t5/Monitoring-Splunk/How-can-we-monitor-if-user-changes-or-updates-or-deletes-any/m-p/348966#M6564 <P>How can we monitor if user changes or updates or deletes any file from any of the Splunk Servers?</P> Tue, 25 Apr 2017 00:18:46 GMT https://community.splunk.com/t5/Monitoring-Splunk/How-can-we-monitor-if-user-changes-or-updates-or-deletes-any/m-p/348966#M6564 sharonjo 2017-04-25T00:18:46Z Re: How can we monitor if user changes or updates or deletes any file from any of the Splunk Servers? https://community.splunk.com/t5/Monitoring-Splunk/How-can-we-monitor-if-user-changes-or-updates-or-deletes-any/m-p/348967#M6565 <P>windows or nix?<BR /> do you collect that data from the server?</P> Tue, 25 Apr 2017 12:56:40 GMT https://community.splunk.com/t5/Monitoring-Splunk/How-can-we-monitor-if-user-changes-or-updates-or-deletes-any/m-p/348967#M6565 adonio 2017-04-25T12:56:40Z Re: How can we monitor if user changes or updates or deletes any file from any of the Splunk Servers? https://community.splunk.com/t5/Monitoring-Splunk/How-can-we-monitor-if-user-changes-or-updates-or-deletes-any/m-p/348968#M6566 <P>Here is a document that covers what Splunk logs about itself. </P> <UL> <LI><A href="http://docs.splunk.com/Documentation/Splunk/6.5.3/Troubleshooting/WhatSplunklogsaboutitself">http://docs.splunk.com/Documentation/Splunk/6.5.3/Troubleshooting/WhatSplunklogsaboutitself</A></LI> </UL> <P>If you look at the contents on the left, you will see additional pages you may want to review. You may also want to test different actions and then review the Splunk logs to see what type of event is generated for that action. You can use that to build alerts or dashboards if you deem it necessary.</P> Tue, 25 Apr 2017 19:09:14 GMT https://community.splunk.com/t5/Monitoring-Splunk/How-can-we-monitor-if-user-changes-or-updates-or-deletes-any/m-p/348968#M6566 jcrabb_splunk 2017-04-25T19:09:14Z