Is there a process I can use with Splunk Light to pull audit logs on how, who, when, and where directories are being created on our file share servers?

[pnv2254]

Is there a process I can use with Splunk to pull audit logs on how, who, when, and where directories are being created on our file share servers?

Thank you.

Steve

[jterry]

If the audit logs are already on disk/exist, it's easy. if not, it sounds like you need to look at scripted inputs.

[jterry]

If the audit logs are already on disk/exist, it's easy. if not, it sounds like you need to look at scripted inputs.