Re: Search help - Splunk Community

Splunk Search

I have the Sophos XG forwarding logs to Splunk. How do i search for users who logged into Sophos XG in Splunk.

Hello @ticbos

if you are receiving audit logs of Sophos, then you can easily search it.

There are several apps for Sophos in Splunkbase. Have you tried any of them?

---
If this reply helps you, Karma would be appreciated.

Get Updates on the Splunk Community!

test 2

test 222222

test

test

Join the Hackathon at .conf26 and build a No-Code AI agent

Join us for the AI Agent Buildathon, an in-person, three-hour hands-on Hackathon where you’ll use Splunk Agent ...