Splunk Search

Setup an alert for Changing password parameters?

iamsplunker
Communicator

Hello Splunkers,

I wanted to setup an alert for changing password parameters for ex, we have policy of 15 min characters which includes at least 1 number lowercase , 1 number uppercase , 1 special characters I want an alert to trigger if someone modifies this password rule.

 

 Thanks!

0 Karma

PickleRick
SplunkTrust
SplunkTrust

Where do you have this policy? In what system? And how is it connected with Splunk?

0 Karma

iamsplunker
Communicator

Thanks for your response @PickleRick 
We defined the policy in Splunk cloud SH.

Connection SHC -- IDXR -- FORWARDER

0 Karma

PickleRick
SplunkTrust
SplunkTrust

OK. If you mean the password policy within the Splunk itself, you should be able to find it in the _configtracker index (I'm not sure if it's available for Cloud but I assume it is) - look for changes to authorize.conf file.

0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud’s AI Assistant in Action Series: Analyzing and ...

This is the second post in our Splunk Observability Cloud’s AI Assistant in Action series, in which we look at ...

Elevate Your Organization with Splunk’s Next Platform Evolution

 Thursday, July 10, 2025  |  11AM PDT / 2PM EDT Whether you're managing complex deployments or looking to ...

Splunk Answers Content Calendar, June Edition

Get ready for this week’s post dedicated to Splunk Dashboards! We're celebrating the power of community by ...