All Apps and Add-ons

Skip audit log by DATABASE_USER name

ksasaki0214
New Member

Hi,

I want to skip indexing audit log if DATABASE_USER match some strings.
Is there any way?

Thanks,

0 Karma

deepashri_123
Motivator

Hey@ksasaki0214,

Try referring this link:
http://docs.splunk.com/Documentation/Splunk/latest/Forwarding/Routeandfilterdatad#Keep_specific_even...

Let me know if this helps!!

0 Karma
Get Updates on the Splunk Community!

SplunkTrust | Where Are They Now - Michael Uschmann

The Background Five years ago, Splunk published several videos showcasing members of the SplunkTrust to share ...

Admin Your Splunk Cloud, Your Way

Join us to maximize different techniques to best tune Splunk Cloud. In this Tech Enablement, you will get ...

Cloud Platform | Discontinuing support for TLS version 1.0 and 1.1

Overview Transport Layer Security (TLS) is a security communications protocol that lets two computers, ...