All Apps and Add-ons

Is there a field in Workday logs that store username information in Workday Add-on for Splunk?

sumandebnath23
Explorer

Hello,

We have onboarded Workday logs and in the user activity input section, checked "Include target details". Now the question is would it be possible to view username who has performed some action on Windows systems? Is there a field for that?

Please suggest.

0 Karma

3thanlewis
Explorer

The user_activity sourcetype contains a field called systemAccount (also aliased to user) which contains a unique identifier for the user that performed the action. Depending on the tenant setup this value can be a username or id number.

0 Karma

p_gurav
Champion

Is there any field called systemAccount or user?

0 Karma

splunker12er
Motivator

Access the Edit Tenant Setup - System task and ensure that the Enable User Activity Logging checkbox is selected.
- You can able to search for user activity
Access the Edit Tenant Setup - Security task and ensure that the OAuth 2.0 Clients Enabled checkbox is selected.

0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!