Search help - Splunk Community

Splunk Search

I have the Sophos XG forwarding logs to Splunk. How do i search for users who logged into Sophos XG in Splunk.

Hello @ticbos

if you are receiving audit logs of Sophos, then you can easily search it.

There are several apps for Sophos in Splunkbase. Have you tried any of them?

---
If this reply helps you, Karma would be appreciated.

Get Updates on the Splunk Community!

Quantify Your Splunk Investment Impact: Introducing Savings Metrics to Value Insights

Building on the foundation established in our initial Value Insights releases, we are introducing the Savings ...

Event Series: Telemetry Pipeline Management

Balancing Scale and Spend: Gaining Control Over High-Volume Metrics in Splunk Observability Cloud As ...

Kick the Tires Before You Commit: A Hands-On Tour of the Splunk Observability Cloud ...

Evaluating an enterprise observability platform usually goes like this: fill out a form, get a free trial with ...