Splunk Free Reporting Capabilty

[melfice0023]

Hi there. Is Splunk free has a capability to report on successful logons, object access, and logon attempts?? Your feedback will be highly appreciated. Thank you.

[MuS]

Hi melfice0023

yes it has, it has all reporting features. Check out this link to find out what is included in Splunk free.

cheers, MuS

[MuS]

yes, you need your data indexed, run your search to get the result you need and create your report out of this result.

[melfice0023]

Thank you for your feedback MuS 🙂 so in order to create a specific report, i should have index my search first (ex. logon attempts) then create a report of it. Am i right sir?