Hi Splunkers,
Is there a good way to detect bulk queries conducted in the database, or bulk download of data in database and file servers? If there is, what are the relevant logs/sourcetypes that I should pull from the DB/file servers?