Security

how to setup security event logging linux

pontifor
New Member

Hi this is a setup question for compliance monitoring.

I have a linux box, so I index everything under /var/log. I need to build reports that

  • report each account login/logout
  • success or failure of login
  • activities performed
  • software installed/uninstalled

Any hints on how to processed? I think this is basic compliance reporting, maybe there are some examples somwhere?

thanks!
Stefan

Tags (2)
0 Karma
1 Solution

MarioM
Motivator

the Splunk for *nix app has most of what you looking for

View solution in original post

0 Karma

MarioM
Motivator

the Splunk for *nix app has most of what you looking for

0 Karma
Get Updates on the Splunk Community!

See your relevant APM services, dashboards, and alerts in one place with the updated ...

As a Splunk Observability user, you have a lot of data you have to manage, prioritize, and troubleshoot on a ...

Cultivate Your Career Growth with Fresh Splunk Training

Growth doesn’t just happen—it’s nurtured. Like tending a garden, developing your Splunk skills takes the right ...

Introducing a Smarter Way to Discover Apps on Splunkbase

We’re excited to announce the launch of a foundational enhancement to Splunkbase: App Tiering.  Because we’ve ...