How to monitor the Internet Explorer Process in Splunk?

[nicolay_koecher]

Hello,

For security reasons, I have to monitor processes, especially the IExplore Process. Open connections are important as well as Username and Port. How can I monitor processes in Splunk?

regards Nico

[jeffland]

If an application does not write a text log that you can read, you'll have to work around that as splunk does not "monitor" an application directly. For IE, you'll have to enable logging as for example described here, and index the windows event logs regarding those events.