Hi Splunker;
After created object audits for server-level and database-level on SQL server, Now we need create username and password for splunk can read the audit logs for database-level not table-audit, and already created splunk user on active directory, how I use this splunk user which created on active directory for read the audit logs from SQL server.
Please I need help you in that.
Thank you
Regards;
Abdullah Al-Habbash
Thank you for your reply.
Ok, after created user, how I give him permission for access the audit logs from SQL window server?
Regards.