Monitoring Splunk

CA SiteMinder - How to get audit logs into Splunk?

morphis72
Path Finder

I need to get the SiteMinder audit logs into Splunk. Currently they we have them going into an Oracle DB. We want to eliminate the Oracle DB and have the audit logs go directly from SiteMinder into Splunk. Is this possible?

0 Karma

morphis72
Path Finder

Just to follow up on this if someone else has similar questions. The audit logs can be configured in SiteMinder to write to log on disk rather than to a database. Then it's like another other data input for Splunk.

0 Karma
Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.