Getting Data In

How are other users utilizing Splunk to monitor privileged account usage in Windows/*nix environments?

NateStreet
New Member

How are other users utilizing Splunk to monitor privileged account usage in Windows/*nix environments? I'm looking for dashboards/report ideas and any other alerts that others have created for enterprise monitoring that we may be able to adapt. Thanks!

0 Karma

the_wolverine
Champion

The ES app has an example of how this can be done but it requires a paid POC.

A simple way to do it would be to use a lookup file containing your privileged account details (name, email address, userid, etc) and run a query that uses that lookup file to find a match.

0 Karma
Get Updates on the Splunk Community!

Developer Spotlight with William Searle

The Splunk Guy: A Developer’s Path from Web to Cloud William is a Splunk Professional Services Consultant with ...

Major Splunk Upgrade – Prepare your Environment for Splunk 10 Now!

Attention App Developers: Test Your Apps with the Splunk 10.0 Beta and Ensure Compatibility Before the ...

Stay Connected: Your Guide to June Tech Talks, Office Hours, and Webinars!

What are Community Office Hours?Community Office Hours is an interactive 60-minute Zoom series where ...