Splunk query for reporting any new alert or dashboard created in splunk

[JuhiSaxena]

Is there any way to find out if any new alert or dashboard is being created in splunk system?

[JuhiSaxena]

This is not returning the name of alert which user recently created. I want it in tabular for with user, Time and the name of alert/Dashboard created.

[p_gurav]

Hi,

Try this query:

index=_internal sourcetype=splunkd_ui_access editxml OR edit method=post ui/views/ 
  | rex field=referer "/(?<edit_type>editx?m?l?)(\?|$)"
  | rex field=other "\s*?\-\s*(?<sessionId>[\S]+)\s*"
  | table _time user clientip sessionId edit_type file useragent
  | rename file as dashboard