https://community.splunk.com/t5/Splunk-Search/how-to-check-files-being-downloaded-by-user/m-p/417632#M120159 <P>I normally use index=proxy username=12345 to check on visited sites. how do i check if the user downloaded any files on the site?</P> Mon, 03 Dec 2018 11:33:07 GMT arunaLM 2018-12-03T11:33:07Z https://community.splunk.com/t5/Splunk-Search/how-to-check-files-being-downloaded-by-user/m-p/417632#M120159 <P>I normally use index=proxy username=12345 to check on visited sites. how do i check if the user downloaded any files on the site?</P> Mon, 03 Dec 2018 11:33:07 GMT https://community.splunk.com/t5/Splunk-Search/how-to-check-files-being-downloaded-by-user/m-p/417632#M120159 arunaLM 2018-12-03T11:33:07Z https://community.splunk.com/t5/Splunk-Search/how-to-check-files-being-downloaded-by-user/m-p/417633#M120160 <P>That will depend on if and how your proxy server logs that information.</P> Mon, 03 Dec 2018 15:38:05 GMT https://community.splunk.com/t5/Splunk-Search/how-to-check-files-being-downloaded-by-user/m-p/417633#M120160 richgalloway 2018-12-03T15:38:05Z