Hi Splunkers,
We would like to use splunk for audit trails of host server logs.
In our operations, we always compare application forms of MS excel in Windows file server for remote connects to Windows server with actual security event logs.
So out detail operations will become the followings.
1. The one registers servers and accounts, dates when he use servers on an Excel file in Windows file server.
2. He connects to servers and operates it.
3. A system administrator checks registered forms and raw event log aggregated by splunk.
We want to adopt splunk to this operations in automation.
Excel file is in CIFS server, so we are troubled by how to integrate this excel file to splunk in linux server.
Samba is actually a good CIFS client, but we are seeking more easy ways.
↧