I am looking to log creation of users and change to user permissions. How do I forward those logs to a SIEM or pull them via API?

I need to be able to audit user creation and privilege changes in the Solarwinds Orion console. I haven't found anything in the documentation to do that. How would I extract those on a regular or real time basis, either to a flat file or forward to a SIEM or other collector?

Find more posts tagged with

windows users

users

orion

Alerting

Accepted answers

All comments

aLTeReGo

You could schedule a recurring report containing these events and have it saved to a CSV file on disk.

Quick Links

All Categories
Recent Posts
Activity
Unanswered
Groups
Help
Best Of