import Adaudit logs into Splunk

fahimeh · ‎11-18-2024

I want to import Adaudit logs into Splunk
but I don't know how
The important thing is that I want to do this from the oldest logs, not from now on.

gcusello · ‎11-18-2024

Hi @fahimeh ,

you have to use the add on "CCX Add-on for ManageEngine Products (ADAudit Plus)" (https://splunkbase.splunk.com/app/7004) from splunkbase and follow the instructions.

Ciao.

Giuseppe

import Adaudit logs into Splunk

other

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Automating Threat Operations and Threat Hunting with Recorded Future

Keep the Learning Going with the New Best of .conf Hub

Splunk Community Badges!

Join the Conversation

import Adaudit logs into Splunk

other

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Automating Threat Operations and Threat Hunting with Recorded Future

Keep the Learning Going with the New Best of .conf Hub

Splunk Community Badges!