Monitoring Splunk

Linux Auditd app not receiving data from host it is configured with. Any best practices list on this please? Thank u

SamHTexas
Builder

Linux Auditd app not receiving data from host it is configured with. Any best practices list on this please? Thank u

Labels (1)
Tags (1)
0 Karma

codebuilder
Influencer

Is the service running?

systemctl status auditd.service

----
An upvote would be appreciated and Accept Solution if it helps!
0 Karma
Get Updates on the Splunk Community!

Celebrating Fast Lane: 2025 Authorized Learning Partner of the Year

At .conf25, Splunk proudly recognized Fast Lane as the 2025 Authorized Learning Partner of the Year. This ...

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...