Hi there. Is Splunk free has a capability to report on successful logons, object access, and logon attempts?? Your feedback will be highly appreciated. Thank you.
yes it has, it has all reporting features. Check out this link to find out what is included in Splunk free.
yes, you need your data indexed, run your search to get the result you need and create your report out of this result.
Thank you for your feedback MuS 🙂 so in order to create a specific report, i should have index my search first (ex. logon attempts) then create a report of it. Am i right sir?