Is it possible to Monitor Spunk Useractivity of users using Splunk, based on Splunk internal Logs?
If so What would be the best place to start monitoring?, if there was an already built Splunk A...
We are trying to audit/monitor administrative activity to Splunk. Is there some canned dashboards or searches that can be used to monitor/review elevated privilege activity? How do we monitor...
Hi all!
I need to import users informations from AD.
The forest has a folder for each Country, and each country has the "users" folder (Ex: OU=users, OU=Country1, OU=intranet and OU=users, O...
I want to know the active user count of an application, the following is the query i created, however its not giving the out put, can someone guide please? index=application host=Server N...
Hi All,
we use splunk to monitoring super useractivity (on windows, DB, and network)
right now we have setting splunk to sending alert on several windows event code with .adm user. but now w...
...954 - Windows Firewall Group Policy settings has changed. The new settings have been applied
4956 - Windows Firewall has changed the active profile
Panel 4: Local Security Policy
index=w...
...orrect or not I want to analyze the user accounts of my active directory: I want to work only on the information concerning the connection of the accounts (login, log off...) and also (creation, m...
How do I monitoruser account creation in AD?
I need to accomplish the following:
Who created the user?
What privileges were given to the new user?
What did the user do with the account o...
Hello,
Excuse my lack of expertise with Splunk. Could you please let me know how i can track when a specific user logon and logoff from the computer? I am using a universal forwarder to the dc o...