Splunk Cloud Platform

How to get ACS API logs?

SpingALong
Engager

Hi,

I would like to see a log of when and by whom the ACS API was called.
I thought I could check the “_internal” index in Splunk Cloud, but I couldn't.

Is there any way to get the ACS API logs?

Labels (1)
0 Karma

livehybrid
SplunkTrust
SplunkTrust

Unfortunately the ACS logs are not currently available in the indexes within your cloud stack, however you may be able to get specific information from Splunk support if you need something looking in to, for example to find out who made/when a change was made.

Please let me know how you get on and consider accepting this answer or adding karma this answer if it has helped.
Regards

Will

Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...