Splunk Search

AD User logon/Destination host report

fgottilu
New Member

Hello Community,

I am new in splunk.
I want to make a report with all AD User logon with the details the source and the destination host.
I want to have the possibility to have a daily and a weekly report. How to proceed ?

Thank you in advance.

Tags (1)
0 Karma

to4kawa
Ultra Champion

Is the log in Splunk?

0 Karma

fgottilu
New Member

The log is not in splunk, I have just add the Domain Controller.

0 Karma

to4kawa
Ultra Champion
0 Karma
Get Updates on the Splunk Community!

Uncovering Multi-Account Fraud with Splunk Banking Analytics

Last month, I met with a Senior Fraud Analyst at a nationally recognized bank to discuss their recent success ...

Secure Your Future: A Deep Dive into the Compliance and Security Enhancements for the ...

What has been announced?  In the blog, “Preparing your Splunk Environment for OpensSSL3,”we announced the ...

New This Month in Splunk Observability Cloud - Synthetic Monitoring updates, UI ...

This month, we’re delivering several platform, infrastructure, application and digital experience monitoring ...