Hi everyone,
I know that Splunk is capable of maintaining its own data integrity via hashing the events. However, what if there's a need to export the data while maintaining the integrity?
aka.
We have a search that we want to export as evidence for a legal issue. When we export the data, it would be very beneficial for us that Splunk would log the hash of the export file. This means that it would be verifiable that Splunk maintained the integrity of the source data by hashing and export from this data had a specific hash, that was provided to the authorities.
Is there anything like this (an App perhaps or some setting that I don't know of) that would allow us to do this?
Thanks,
