Search help - Splunk Community

Splunk Search

I have the Sophos XG forwarding logs to Splunk. How do i search for users who logged into Sophos XG in Splunk.

Hello @ticbos

if you are receiving audit logs of Sophos, then you can easily search it.

There are several apps for Sophos in Splunkbase. Have you tried any of them?

---
If this reply helps you, Karma would be appreciated.

Get Updates on the Splunk Community!

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Splunk introduced persistent queueing at the tcpout layer as one of the most practical resilience features in ...

Skip the Awkward Silence: Have a .conf-ersation at .conf26

Picture this. You arrive at .conf26 already having your socializing and networking plans mapped out. No ...

Rethinking Zero Trust: From Product Purchases to Logical Control Evidence

Implementing Zero Trust (ZT) across complex environments often falters at the very beginning due to a ...