Splunk Enterprise

Need help with configuring Linux Auditd app to collect data from certain host on an Index. Much appreciated.

SamHTexas
Builder

Need direction on how to configure Linux Auditd app to collect data from a host on an Index. Thank u 

Labels (1)
Tags (1)
0 Karma

PickleRick
SplunkTrust
SplunkTrust

Did you read the docs? https://github.com/doksu/splunk_auditd/wiki

What did you try? What didn't work as expected?

0 Karma
Get Updates on the Splunk Community!

OpenTelemetry for Legacy Apps? Yes, You Can!

This article is a follow-up to my previous article posted on the OpenTelemetry Blog, "Your Critical Legacy App ...

UCC Framework: Discover Developer Toolkit for Building Technology Add-ons

The Next-Gen Toolkit for Splunk Technology Add-on Development The Universal Configuration Console (UCC) ...

.conf25 Community Recap

Hello Splunkers, And just like that, .conf25 is in the books! What an incredible few days — full of learning, ...