Essentially we want to share our changes monthly in a report with my other sites so they can benefit. I cannot find a way (looked in _audit) to search Splunk for changes made to ITSI KPIs, thresholds, settings in general.
Can anyone help?