All Apps and Add-ons

Is there a field in Workday logs that store username information in Workday Add-on for Splunk?



We have onboarded Workday logs and in the user activity input section, checked "Include target details". Now the question is would it be possible to view username who has performed some action on Windows systems? Is there a field for that?

Please suggest.

0 Karma


The user_activity sourcetype contains a field called systemAccount (also aliased to user) which contains a unique identifier for the user that performed the action. Depending on the tenant setup this value can be a username or id number.

0 Karma


Is there any field called systemAccount or user?

0 Karma


Access the Edit Tenant Setup - System task and ensure that the Enable User Activity Logging checkbox is selected.
- You can able to search for user activity
Access the Edit Tenant Setup - Security task and ensure that the OAuth 2.0 Clients Enabled checkbox is selected.

0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!