Splunk Search

how to check files being downloaded by user

arunaLM
New Member

I normally use index=proxy username=12345 to check on visited sites. how do i check if the user downloaded any files on the site?

Tags (2)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

That will depend on if and how your proxy server logs that information.

---
If this reply helps you, an upvote would be appreciated.
0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!