Getting Data In

Splunk Dashboard Query to List when CD Drive is access and Written to

Rosie2287
Explorer

Is there a Splunk query I can use to list when CD drive is access and written to and the users associated with those actions made

Labels (3)
0 Karma

Rosie2287
Explorer

New splunk user here - 

No, I was looking for a query I could add to my dashboard that would look in system logs that would check for when the CD drive is accessed or burned to.  

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

If the system logs have been ingested into Splunk, you need to identify which events in those logs include the information you are looking for. You can then tell Splunk how to pull out those events so you can report on them in your dashboard. We do not have access to your data, it is only something that you can determine

0 Karma

Rosie2287
Explorer

Ok thank you.  I am not sure about which events report CD Drive actions.  I was just wondering if there was a general dashboard query that could be used to identify cd drive usage.

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Probably not - Splunk is a generalised tool for analysing logs not a windows-specific tool

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Is this information in a log somewhere that you have ingested into Splunk?

Get Updates on the Splunk Community!

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Your Voice Matters! Help Us Shape the New Splunk Lantern Experience

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Building Momentum: Splunk Developer Program at .conf25

At Splunk, developers are at the heart of innovation. That’s why this year at .conf25, we officially launched ...