Hi,
I would like to see a log of when and by whom the ACS API was called.
I thought I could check the “_internal” index in Splunk Cloud, but I couldn't.
Is there any way to get the ACS API logs?
Unfortunately the ACS logs are not currently available in the indexes within your cloud stack, however you may be able to get specific information from Splunk support if you need something looking in to, for example to find out who made/when a change was made.
Please let me know how you get on and consider accepting this answer or adding karma this answer if it has helped.
Regards
Will