Getting Data In

How to monitor the Internet Explorer Process in Splunk?

nicolay_koecher
Explorer

Hello,

For security reasons, I have to monitor processes, especially the IExplore Process. Open connections are important as well as Username and Port. How can I monitor processes in Splunk?

regards Nico

Tags (3)
0 Karma

jeffland
SplunkTrust
SplunkTrust

If an application does not write a text log that you can read, you'll have to work around that as splunk does not "monitor" an application directly. For IE, you'll have to enable logging as for example described here, and index the windows event logs regarding those events.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...