Getting Data In

Splunk Dashboard Query to List when CD Drive is access and Written to

Rosie2287
Explorer

Is there a Splunk query I can use to list when CD drive is access and written to and the users associated with those actions made

Labels (3)
0 Karma

Rosie2287
Explorer

New splunk user here - 

No, I was looking for a query I could add to my dashboard that would look in system logs that would check for when the CD drive is accessed or burned to.  

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

If the system logs have been ingested into Splunk, you need to identify which events in those logs include the information you are looking for. You can then tell Splunk how to pull out those events so you can report on them in your dashboard. We do not have access to your data, it is only something that you can determine

0 Karma

Rosie2287
Explorer

Ok thank you.  I am not sure about which events report CD Drive actions.  I was just wondering if there was a general dashboard query that could be used to identify cd drive usage.

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Probably not - Splunk is a generalised tool for analysing logs not a windows-specific tool

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Is this information in a log somewhere that you have ingested into Splunk?

Get Updates on the Splunk Community!

Developer Spotlight with William Searle

The Splunk Guy: A Developer’s Path from Web to Cloud William is a Splunk Professional Services Consultant with ...

Major Splunk Upgrade – Prepare your Environment for Splunk 10 Now!

Attention App Developers: Test Your Apps with the Splunk 10.0 Beta and Ensure Compatibility Before the ...

Stay Connected: Your Guide to June Tech Talks, Office Hours, and Webinars!

What are Community Office Hours?Community Office Hours is an interactive 60-minute Zoom series where ...