Is it possible for a user who has access to the Splunk server delete audit logs in splunk? Auditors do not want our developers to have the ability to delete Splunk audit logs. But, our developers do have access to the Splunk server.
How can I prove to the auditors that the logs within Splunk cannot be deleted?
↧