Hi Team,
We have an requirement to monitor the files is getting deleted or modified or added into a folder then we need to get an splunk alert stating that who has modified the file or deleted the folder.
Consider an example:
We have an shared Drive (D) in a windows server in that we have multiple folders like (A),(B) and (C). In that when we go to folder (A) inside there would be multiple files (might be log file or any other files) like x.log, y.csv and z.xlsx.
So we want to get notified if any of the files say (x.log) is getting deleted or modified in that particular folder (A) and we want to know who has deleted or modified the file.
Is it possible to achieve in Splunk?
If yes kindly let me know how to proceed the same.
↧