Is anyone Splunking the Orion/SAM logs?
noisy-conjuror wrote:Is anyone Splunking the Orion/SAM logs?
noisy-conjuror wrote:
I'm interested to know if there are customers doing this, as I search through the archives I do see some posts e.g. Solarwinds Addon with Splunk At some point one of our THWACK MVPs created this template for a forwarder to Splunk Splunk Forwarder
What would you be using Splunk to do against those SAM logs?
This is the plan, here. I extended the auditing so that application monitor changes are audited (because arbitrary scripts...).
Not there yet.
