All Apps and Add-ons

Can the Windows app monitor user activities with in Linux environments and the commands that they used ??

allamiro
Path Finder

Can you guys or this app monitor user activities with in Linux environments and the commands that they used ??

1 Solution

araitz
Splunk Employee
Splunk Employee

That app doesn't do this explicitly, but you might get some user activities and commands through the top/ps/prstat inputs.

If Splunk is running as root and a modern shell like BASH is in use, it is possible to monitor each user's history file in their home directory to keep a record of what commands each user ran.

I will mark that down as an enhancement request for the next version of the app - tracking it as SPL-46559.

View solution in original post

0 Karma

araitz
Splunk Employee
Splunk Employee

That app doesn't do this explicitly, but you might get some user activities and commands through the top/ps/prstat inputs.

If Splunk is running as root and a modern shell like BASH is in use, it is possible to monitor each user's history file in their home directory to keep a record of what commands each user ran.

I will mark that down as an enhancement request for the next version of the app - tracking it as SPL-46559.

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...