Can you guys or this app monitor user activities with in Linux environments and the commands that they used ??
That app doesn't do this explicitly, but you might get some user activities and commands through the top/ps/prstat inputs.
If Splunk is running as root and a modern shell like BASH is in use, it is possible to monitor each user's history file in their home directory to keep a record of what commands each user ran.
I will mark that down as an enhancement request for the next version of the app - tracking it as SPL-46559.
That app doesn't do this explicitly, but you might get some user activities and commands through the top/ps/prstat inputs.
If Splunk is running as root and a modern shell like BASH is in use, it is possible to monitor each user's history file in their home directory to keep a record of what commands each user ran.
I will mark that down as an enhancement request for the next version of the app - tracking it as SPL-46559.