https://community.splunk.com/t5/Splunk-Search/Active-Directory-Security-Events/m-p/57014#M179901 <P>By archive do you mean search for matching events and export them out of splunk?</P> Sat, 15 Jun 2013 02:35:05 GMT starcher 2013-06-15T02:35:05Z https://community.splunk.com/t5/Splunk-Search/Active-Directory-Security-Events/m-p/57013#M179900 <P>Guys, apologies if this has already been asked before and there is a KB article for this. We are looking to archive Logon/Logoff events that occur in our Windows domain controller security log. Is this possible ? and if so how ? TIA</P> Thu, 06 Jun 2013 15:16:47 GMT https://community.splunk.com/t5/Splunk-Search/Active-Directory-Security-Events/m-p/57013#M179900 stokecoll 2013-06-06T15:16:47Z https://community.splunk.com/t5/Splunk-Search/Active-Directory-Security-Events/m-p/57014#M179901 <P>By archive do you mean search for matching events and export them out of splunk?</P> Sat, 15 Jun 2013 02:35:05 GMT https://community.splunk.com/t5/Splunk-Search/Active-Directory-Security-Events/m-p/57014#M179901 starcher 2013-06-15T02:35:05Z