Ok thank you.  I am not sure about which events report CD Drive actions.  I was just wondering if there was a general dashboard query that could be used to identify cd drive usage. ... View more

Our splunk server keeps the logs for a lot longer.  Sorry I was unclear.   ... View more

New splunk user here -  No, I was looking for a query I could add to my dashboard that would look in system logs that would check for when the CD drive is accessed or burned to.   ... View more

Thank you for this but I am not sure if it will work for my set up since logs are deleted weekly.  These are windows events. Do you have a query that may identify all enabled accounts and when their last login date was? ... View more