How to route events into two or more different indexes is a question that has been asked many times. Here is a comprehensive overview of how Windows events can be routed into two different indexes following 4 simple steps.
Read MoreMonitoring root-owned files with Splunk
The first challenge you may encounter when trying to monitor files on a Linux server is when you’re trying to access files your Splunk user is not allowed to read. Here’s a solution for this challenge…
Read More
You must be logged in to post a comment.