Solved: monitoring configurations file

kannu · ‎06-28-2017

Hi guys ,
Currently i am working for client and setuping the splunk . currently there are two admin of the splunk.
My question is can i get an alert if other admin setup new monitor as i am also the admin so currently i am asking other admin that what changes he has done . But i want to setup an monitoring for configrations files like is some body(admin) alter the content of the conf file or add more monitors so i should get an alert so no need to ask the other admin.

can it be done by splunk .
Please help.

adonio · ‎06-28-2017

hello @kannu,
this answer seems as a good one:
https://answers.splunk.com/answers/448625/how-to-monitor-changes-made-to-the-inputsconf-file.html
hope it helps

View solution in original post

adonio · ‎06-28-2017

hello @kannu,
this answer seems as a good one:
https://answers.splunk.com/answers/448625/how-to-monitor-changes-made-to-the-inputsconf-file.html
hope it helps

monitoring configurations file

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Automating Threat Operations and Threat Hunting with Recorded Future

Join the Conversation