Hi, we have Solaris 11.3 and have installed the splunk forwarder. Would like to know if anybody is aware how to get the audit logs from the solaris as the solaris 11 TA does not provide any scripts for the audit logs.
Hey@kpsajin,
You can refer this app:
https://splunkbase.splunk.com/app/847/
Let me know if this helps!!