topic fingerprint alert in Alerting

fingerprint alert

isin67 — Sat, 13 Mar 2021 14:28:03 GMT

Hi.. i am new to splunk so i would like to know is there alert for fingerprint login also?

please let me know and i would like to know the search comments used in search box

Re: fingerprint alert

richgalloway — Sat, 13 Mar 2021 18:31:27 GMT

If a fingerprint login generates an event and that event is logged in Splunk then alert can be triggered.

To learn search commands, take the free Splunk Fundamentals 1 class at splunk.com. Also, see the Search Manual at https://docs.splunk.com/Documentation/Splunk/8.1.2/Search/GetstartedwithSearch

Re: fingerprint alert

isin67 — Thu, 18 Mar 2021 07:36:58 GMT

can u tell me in details how do i insert my fingerprint log details into spliunk tool( for windows)and what is the search command used for it

Re: fingerprint alert

richgalloway — Thu, 18 Mar 2021 13:22:41 GMT

I don't know how fingerprint details are stored in Windows so I can't offer specific advice on how to get them into Splunk. It's likely, however, you'll need a Splunk Universal Forwarder (UF) on that Windows box (assuming it's a different machine from the one running Splunk).