https://community.splunk.com/t5/Alerting/How-to-create-an-alert-that-monitors-VPN-solution-use/m-p/385861#M6776 <P>Do you have a tool (firewall, etc.) in place that can detect VPN use? If so, trigger the alert on events from that tool.</P> Thu, 23 May 2019 17:15:55 GMT richgalloway 2019-05-23T17:15:55Z https://community.splunk.com/t5/Alerting/How-to-create-an-alert-that-monitors-VPN-solution-use/m-p/385860#M6775 <P>Hello,</P> <P>I'm looking to create an alert that looks for and triggers when certain VPN solutions, such as GoToMyPC, VNC, etc. are utilized within our environment. </P> <P>Does anyone have experience with this? I wasn't able to find any similar existing posts. Thank you. </P> Thu, 23 May 2019 17:02:36 GMT https://community.splunk.com/t5/Alerting/How-to-create-an-alert-that-monitors-VPN-solution-use/m-p/385860#M6775 rcastello 2019-05-23T17:02:36Z https://community.splunk.com/t5/Alerting/How-to-create-an-alert-that-monitors-VPN-solution-use/m-p/385861#M6776 <P>Do you have a tool (firewall, etc.) in place that can detect VPN use? If so, trigger the alert on events from that tool.</P> Thu, 23 May 2019 17:15:55 GMT https://community.splunk.com/t5/Alerting/How-to-create-an-alert-that-monitors-VPN-solution-use/m-p/385861#M6776 richgalloway 2019-05-23T17:15:55Z https://community.splunk.com/t5/Alerting/How-to-create-an-alert-that-monitors-VPN-solution-use/m-p/385862#M6777 <P>Hi @rcastello,</P> <P>The answer is in the logs... what kind of logs are you collecting already and what applications logs are you fetching from your endpoint ? <BR /> You need to have a tool on your hosts to detect the applications that are being installed/used/removed then you can fetch the logs from there.</P> <P>Cheers,<BR /> David</P> Thu, 23 May 2019 17:32:34 GMT https://community.splunk.com/t5/Alerting/How-to-create-an-alert-that-monitors-VPN-solution-use/m-p/385862#M6777 DavidHourani 2019-05-23T17:32:34Z