All Apps and Add-ons

How to get the history of modifications made to a lookup file?

akarivaratharaj
Communicator

I have gone through a few questions which are related to lookup file changes. I tried to use the same query to get the internal logs regarding my lookup file changes but I am unable to fetch any logs.

I would like to know where can I find the information about the changes made to my lookup file. The information is more related to the user who modified and the respective time.

I tried to search in _audit index, but I am unable to find the exact logs (may be the way of my searching is wrong)

Could anyone please help me in finding the history of modification/changes made to any lookup file?

Labels (1)
Tags (1)
0 Karma

akarivaratharaj
Communicator

Could anyone help me on this please?

0 Karma

akarivaratharaj
Communicator

I am looking this information to check the history of the modification made to a lookup file. If anyone can help me on this, it will be much appreciated!

0 Karma
Get Updates on the Splunk Community!

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...