Getting Data In

Monitor CD DVD activity on Windows machines (Data transfer)

sbettison
New Member

I am new to SPLUNK. Installed SPLUNK enterprise and have installed splunk forwarder on a workstation. Configured Data forwarder on Indexer to send Application, System and Security logs from the workstation. I want report on CD DVD activity on this client machine, and not sure how to do this. Is there a particular EVENT ID I should be using? I have copied data from DVD to the local machine and back again but cannot find any events. Is there something else I need to setup on the client machine?

Any help on this would be much appreciated.

0 Karma
1 Solution

jdonn_splunk
Splunk Employee
Splunk Employee
0 Karma

sbettison
New Member

Thanks for reply and the link to EventTracker .. most useful

0 Karma
Get Updates on the Splunk Community!

Splunk Forwarders and Forced Time Based Load Balancing

Splunk customers use universal forwarders to collect and send data to Splunk. A universal forwarder can send ...

NEW! Log Views in Splunk Observability Dashboards Gives Context From a Single Page

Today, Splunk Observability releases log views, a new feature for users to add their logs data from Splunk Log ...

Last Chance to Submit Your Paper For BSides Splunk - Deadline is August 12th!

Hello everyone! Don't wait to submit - The deadline is August 12th! We have truly missed the community so ...