Archive
Highlighted

index history

Contributor

hi
i created a virtual index last week, but i think someone delete it, i want to know how is.
how/where can i check this information?

thx

0 Karma
Highlighted

Re: index history

SplunkTrust
SplunkTrust

Check audit.log or search 'index=_audit'.

---
If this reply helps you, an upvote would be appreciated.
0 Karma
Highlighted

Re: index history

Contributor

i don't found the information that i need

0 Karma