Hi,
So where is the documentation for this app?
https://splunkbase.splunk.com/app/5399/
The overview comes up with many empty items, there is no required configuration step, so I wonder how useful/reliable this is.
thx
afx
Like most apps, there is no documentation. Contact the developer.
Well, I would think Splunk documents their own apps.
Except it's not Splunk, it's "Splunk Works" which is a voluntary effort. That makes it up to each developer to document their work.
Brilliant.
One gets pointed to the app on splunk ideas by splunk employees that claim this app already fulfills part of the requirements for better audit and state this is step one of what they are working on.
Not really confidence inspiring.
You're not the first to make that observation. Let's hope step 2 is an actual improvement.