Hello Splunk community, I'm ata delimma, Our organiztion is transitioning to an OCI cloud environment so the way we used to query On-Prem databse audit logs are now going to be done with OCI datasafe audit log. My issue is attempting to run a Splunk query the will provide me information for DB events like 1. Password enabled Privileged Users, 2. Account Creation and Modification, 3. Account termination, 4. Account Disabling, 5. Denial of Access: Excessive Logon , just to start off. Any assitance please.
