Estoy trabajando en un panel de equipo para eventos de carpetas compartidas, sin embargo no recibo eventos con eventcode 4663, ya habilité la política de auditoría y en las carpetas que quiero monitorear hice lo mismo, me guié con el siguiente enlace: https://www.lepide.com/how-to/track-changes-made-to-files-of-shared-folder.html
Pero sigo sin recibir eventos de carpetas compartidas en splunk, alguien sabe que mas debo revisar para recibir este tipo de eventos?
I am working on a team panel for shared folder events, however I do not receive events with eventcode 4663, I have already enabled the audit policy and in the folders that I want to monitor I did the same, I was guided by the following link: https:// www.lepide.com/how-to/track-changes-made-to-files-of-shared-folder.html
But I still do not receive events from shared folders in splunk, does anyone know what else I should check to receive these types of events?
*post translated to English by Splunk staff
... View more