Do we have some search command to check if someone from disabled user account list? We want to monitor unauthorized access to create a report and alert for this in Splunk.
↧